last executing test programs: 2m33.54466031s ago: executing program 4 (id=11): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000002c0)={0x0, 0xfffffffffffffd68, &(0x7f0000000080)='['}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_io_uring_setup(0x23a, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) r5 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x400}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, 0x0, 0x0) sendto$inet(r6, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="c2eb0100180000000000000034000000340000000600000004f5d14483190291abdc78d3db000000000000000000000001050000000800000000000000010000850000000000000000020000000000000000000000da0000000000000000"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x20) 2m30.531546444s ago: executing program 4 (id=18): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) write$FUSE_INIT(r1, &(0x7f0000002100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40000}}, 0x50) read$FUSE(r1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000032c0), 0x101000, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x2160, 0x0) 2m29.952960976s ago: executing program 4 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x1f00000000000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2m29.700866501s ago: executing program 4 (id=24): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0405619, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0xfffffffd, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x62b09e0c, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_vhci(0x0, 0x15) umount2(0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000), &(0x7f0000000140)) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) 2m29.275462057s ago: executing program 4 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) read$msr(r3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r4}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0300000000000000000000010500200080000000000000000000000300000000020000"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) keyctl$set_timeout(0xf, r1, 0x21000) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x18a8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) close_range(r0, 0xffffffffffffffff, 0x615f6d47777a31c3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) 2m27.079305616s ago: executing program 4 (id=32): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xf) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0x301) socket(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r3, 0x0, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) 2m11.567406034s ago: executing program 32 (id=32): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xf) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0x301) socket(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r3, 0x0, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) 1m13.455296268s ago: executing program 0 (id=195): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0xffffffffffffffff, 0xe6368f3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, 0x0) r2 = dup(r1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}) sendmmsg$unix(r5, &(0x7f0000002140)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000040)="f44d8eb5d9dd508ec7108bb0934c0efc4bbb686c41985a35513e2c69c4b9b74035d70043bb4eb88fb16ec792e100d68531e97b", 0x33}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000380)="fdc75b61b7183911c7e7540eb55c7e878e4646c34ccc0cf8762d7f4ea8351d644ecc5d6b8228ea826393b95331bda029cb0ae63a1b89ca5196122f37997821958b11c4b3dcb3651d249cc02e188ca733d12ef1b77f4c725076ba00737201757b27308c11d5da8e4ddd7c6a7c2fdbd28312b7b606b9cca001f4ecc44e223cf39b1f5be53b401c677c20a9e21517699d95cc281ba386c16c2d32cbbee4f04d639c1f81b5d6730aedbc45704ddf0027", 0xae}, {&(0x7f0000001580)="29584e11b8f56015ab62b1f7d1580c54728ca32658a30369fb638df171c5de90c12c4b09a89adaa3e2d30029a83c80a7fb26fb55d74d9051d1b546b982425885ade35078c417603ed0d669082c71b13ee6562494c688fff34ea8a714e96ca21b5f53d59c6d1494f5edb9232d161c13ae3f22dab93c1a87fc128e5842f16455c64b0f", 0x82}, {&(0x7f0000001640)="cc2b581d323e5977197b46e7e0989104ad7701a4daa0c202522b51175b2add0d225a99b7f13ac9a72494212ff8bb877bc38fff7673ca4d131db23036e44e8db2789ce9a47af50888b454cb094a584bb31c639ce2e9a6d494ab7178850abd870bb911538fefe29da451a995b5acb6d1cd2063ddcf824c137e5d0f5eeb64be1a67b2fea7e7e98deeda6142b412ff9e5afd8c1cf8fd0f2fa7dc63218189fa56bfa05d3f416fd7a940314b8e0c9ef479350b6e51c28f5ad5072ba8e480f0b69d15", 0xbf}], 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="cd34000100000001000000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r0], 0x130, 0x4000000}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c00)="87b2fa2af1afcee542a916ba0b710aad3933139560bba5a852d204ecdf7f535e3fbe247274526a640eea95af3be62864436c5531943ee521819250af33ba7cdab6310d69723d47b29f2a406c5e8433fd2a067e57635b1ec391f5091e4fc779db69807dc4c3ca7fc82fd955c0da67ac217826197065b84bfc3aaf08ae1b5c0188d3d0592c2b0b97c1803b919662e00ebe59f2321575fcc6749d0e338e1d75bddedd59a2745bfc966acbc3155ae040f4442caf35845e11dc5179f1c50ea1121f7f", 0xc0}, {&(0x7f0000001cc0)="72541638717e1549e268790667b5ed2b012c747091eef80a1646e53db50ec5bd015889250d0944fd0e1bb4256986253d67c422e7a8622458c511dad97681a5e39fd57ea72627fa47da8520be2875ba2c86fe96a8d7d6b624f70ea89ccec8cc7008ee796a0929894b48bc9e86151b41464178c529588d58440269299a05e3639539bcd1281f7e1c1f336f0c474ac6112589bcb5fca110f14da669730f65c0", 0x9e}, {&(0x7f0000001d80)="894fb20664a1ceecc7c27d1f8560fc530e6566262fb483db731c511e85e3d2f47768458070f12e2be0f7f5abbb5449ae3d175a1fbeff52dac53cd83681800cdc91a9c44d20464b6528f2eaf58a2f13f7bffd2b04e0bc8eb98b3c9fdd0e125a83173c12576d37d17020a1848125b4e5d79e5a9769bec06ffd348ab6e6a56f945d45ec251fd374a0efc4412b4a1673efad4238237c289d5533d698c10a129bebb42439007e8c82a088ca412de8e5c948caf586f429e36d8e445e448f82d33a001e52c77ff94774022935bdca89e0ec78009d2b9ad21c0d297390e4969c181adeb8aaff3bb0a056", 0xe6}, {&(0x7f0000001e80)="589ea1f1ae52afb98a4220f6e01d4ea46ecdcefcc03c16388a9a3e4a27ab591874214898d40ce8a22ef704d9698eae6c1a21bcdeaad270a679ca7510c563bfc19c81958bdb1466325c8ac713c0a161e65cd1acdcc9bebceb84c9fa49ff6cb15ef93a033cffd86f37af6d55422a649a2da1cd547508f3d7c23fc55bde357d6820375e17032882c03b63394d0776e5eccd212957517ee010e2351b18a4", 0x9c}, {&(0x7f0000001f40)="de43490fd9d8840a5a0b60c22d0602be64811f08a3b8e74aaad9a2ee3f3ef83574caddeeb9472049c5018b7a705291429ae9c1859f833c9ce02ef8723e2c50f7bd64ac4470ff3c2c92c2596df2528a490f7273d94e9dedd189c239a417191b4427b54e1dc15581a3da91a79ed5f91bea0075cf2047d54d282d61b1691a3ebba26f6396438929473bade06170f56f1fb901b543ea1409dcfb610d38218d24b14b4cf22f3cfd25eb4a36cfd158ce55c7cde95ca165f82015d1385b7c08e432f3106e2da698be01527a71e826daec97a5d6246e", 0xd2}], 0x5, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000020c0)="2c5caac053b4715c023d2965f50f6211f1857156e4fb", 0x16}], 0x1, 0x0, 0x0, 0x8800}}], 0x3, 0x1) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000028", @ANYRESOCT=r9, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x2000000, @val=@netkit={@void, @value=r6}}, 0x1c) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x82f6, 0xff, "0800000000000002"}) readv(r8, &(0x7f0000000c40), 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x9, [0x7, 0x800, 0x2, 0x9, 0x5, 0x8, 0x75, 0x9d, 0xffff]}, &(0x7f0000000540)=0x16) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') read$FUSE(r10, &(0x7f0000005cc0)={0x2020}, 0x2020) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r11, 0x28, 0x0, &(0x7f0000000000)=0x31e4, 0x8) 1m12.546845759s ago: executing program 0 (id=198): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f040000800700000003000000040000800000000000000000000400040000000000"], 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), 0x10) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = creat(&(0x7f0000000180)='./file1\x00', 0x8) read$FUSE(r3, &(0x7f000000c400)={0x2020}, 0x2020) 1m11.316911734s ago: executing program 0 (id=201): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0xfffffffe) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x2800, 0x0) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x2f, 0xfffffffd, 0x3}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000118, 0x0, 0x99f5}]}) 1m9.586133013s ago: executing program 0 (id=203): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r4 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)={[{@quota}, {@huge_always}]}) r5 = socket(0x40000000015, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x1d, &(0x7f0000000680)=0x1, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000000300)={0x2020}, 0x2020) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) 1m8.433618s ago: executing program 0 (id=206): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, <r3=>0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000040000000020000001"], 0x2a) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) 1m2.619501191s ago: executing program 0 (id=218): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0405619, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0xfffffffd, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x62b09e0c, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_vhci(0x0, 0x15) umount2(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000000), &(0x7f0000000140)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) 47.413473945s ago: executing program 33 (id=218): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0405619, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0xfffffffd, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x62b09e0c, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_vhci(0x0, 0x15) umount2(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000000), &(0x7f0000000140)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) 18.738325014s ago: executing program 5 (id=304): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)='5', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)}}], 0x2, 0x0) recvmmsg(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/210, 0xd2}, 0xce}], 0x1, 0x40002002, 0x0) r5 = dup(r3) r6 = socket$packet(0x11, 0x2, 0x300) r7 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x140}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r7, 0xb) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000000)) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) dup3(r5, r6, 0x0) unshare(0x42000000) 16.907832078s ago: executing program 3 (id=307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) read$msr(r3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r4}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0300000000000000000000010500200080000000000000000000000300000000020000"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) keyctl$set_timeout(0xf, r1, 0x21000) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x18a8) close_range(r0, 0xffffffffffffffff, 0x615f6d47777a31c3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) 14.566818907s ago: executing program 5 (id=312): r0 = socket$netlink(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x22}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0xc00) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r4, 0x200, &(0x7f00000000c0)={0x0, 0xfffffdc0}) bind$bt_l2cap(r3, &(0x7f0000000180)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x47, 0x1}, 0xe) syz_emit_ethernet(0x83, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000200)={0xa0000004}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3100000000080041007278650014003300626f6e645f736c6176655f310000000044a3f9d2c8a4a3fa0700b85717db1541244b470c88897b370ecdb281c5ead273fb0227d708bc70906338f8e5618ae5a8e7a9a056a813305eb73c840be12b5c9c3aff2e8c47b1cbc1cdbc7067404e06588d24148b0f9dbf695561fadb55da18a3f4ec47"], 0x38}, 0x1, 0x0, 0x0, 0x4080004}, 0x0) 13.770193964s ago: executing program 3 (id=313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9a00, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x20) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) syz_open_dev$video(0x0, 0x81, 0x20100) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0xeeef0000, 0x0, 0x4, 0x7fffffff, 0x0, [{0xf1, 0x6, 0x2, '\x00', 0x8}, {0x7, 0x18, 0xf, '\x00', 0x4}, {0x3c, 0xe, 0x3, '\x00', 0x80}, {0xc4, 0x3, 0x3, '\x00', 0x80}, {0x5, 0x4, 0x8, '\x00', 0x5}, {0x82, 0x8, 0x0, '\x00', 0xe}, {0x6, 0x1, 0x3}, {0x6, 0x88, 0x52, '\x00', 0xff}, {0x3, 0x6, 0x8, '\x00', 0x6}, {0x0, 0x4, 0x7, '\x00', 0x5}, {0x2, 0x2, 0x81, '\x00', 0x81}, {0x80, 0x0, 0xe, '\x00', 0xc}, {0x9, 0x4, 0x6, '\x00', 0x7}, {0x4, 0x1, 0xf5, '\x00', 0x4}, {0x9, 0x8}, {0x9, 0xb, 0x6}, {0x5, 0x2, 0xf, '\x00', 0xf}, {0x39, 0x7, 0x40, '\x00', 0x6}, {0x6, 0x10, 0xc5, '\x00', 0x73}, {0x2, 0x0, 0xfa, '\x00', 0xf}, {0x3, 0x9, 0xc, '\x00', 0x7}, {0x7, 0x3, 0x6, '\x00', 0xf}, {0x9, 0x6, 0x10, '\x00', 0x8}, {0x2, 0x7, 0x84, '\x00', 0x2}]}}) readv(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 13.331027644s ago: executing program 2 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x9, 0xfff}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1101, 0x2}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x4000080) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xcbff9000) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x16b) madvise(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1f) openat$dlm_monitor(0xffffff9c, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f0000001d40), 0x64200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 12.987022578s ago: executing program 6 (id=244): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$sndctrl(&(0x7f0000001340), 0xe, 0x410640) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x6, 0x1, 0x0, 0x20000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000088000/0x1000)=nil, 0x1000, 0xb635773f05ebbeef, 0x10, 0xffffffffffffffff, 0xbe3c5000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4122, 0x101a) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, &(0x7f0000000080)) lseek(r4, 0x9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000007c0)=ANY=[], &(0x7f00000001c0)=""/250, 0x3e, 0xfa, 0x1, 0x0, 0x0, @void, @value}, 0x28) r5 = semget(0x1, 0x4, 0x83) clock_gettime(0x0, &(0x7f0000001280)={<r6=>0x0, <r7=>0x0}) semtimedop(r5, 0x0, 0x0, &(0x7f00000012c0)={r6, r7+60000000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001500010027bd7000fddbdf250a980100", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000400000000000000000000aa"], 0x2c}}, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001080), &(0x7f0000000000)=0xc) read$msr(r0, &(0x7f0000001140)=""/232, 0xe8) 12.015745278s ago: executing program 6 (id=315): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) fdatasync(0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004000000a00300000500000001010000", @ANYRES32, @ANYBLOB="000000000000000000000000b300000000004000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 10.974530932s ago: executing program 1 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='u\x80\x05fs\x00') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000240)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d]}}], [{@dont_measure}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="43d827749fb8e98f2e9e0cee70069b91800100fdea53e21e3380bfca2f50639ee73791aafb0ff2448a746573aa8eb532b1fbf900000000036c9f608cf9d987c7362fb13955572a46490a12ea69257c8505beaf03805745926f1710b72451141b3c525e3fe1618b", @ANYRES16=r1, @ANYBLOB="05000000e8ffffffefff0e00000008000300", @ANYRES32=r2], 0x64}}, 0x0) 10.917033781s ago: executing program 2 (id=317): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_script(r2, 0x0, 0x0) migrate_pages(0x0, 0xd, 0x0, &(0x7f0000000300)=0x8) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x151201) ioctl$MON_IOCT_RING_SIZE(r3, 0x80089203, 0x200000000000000) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) capset(&(0x7f0000000100)={0x39900612}, &(0x7f0000000000)={0x0, 0x22e2, 0x0, 0x0, 0x1000}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000040)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000ac0)={0x14, r8, 0x1}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) r9 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x185000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r9, 0x80585414, &(0x7f00000015c0)) 10.621298764s ago: executing program 3 (id=318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0xa, &(0x7f0000000040)=0x1, 0x4) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0x5a, 0xa5, 0x20, 0x105b, 0x1799, 0x36e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x4, 0x2, 0xff, 0x1, 0x1, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7, 0x0, 0x6, [@generic={0x7, 0x5, "a902e86f4c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7f, 0x9, 0xff}}]}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_ep_write(r1, 0x5, 0xd2, &(0x7f0000000140)="dc0fef76762c70f6993fae473ffaae3d3ea2b4950f2d52da250c31bcce15bb50cbd98ea542fd9fa91d61f86acc26494e9ae74627bbe5dd4a5a25149139d3c81cdeb3e22f2252b230332fd50bb1223fc68c99cda6d7eced1fb644db0b9ee98a2a920817469864f8d58ba5687aef7df00cc364c0c06d9294fae78382a62d2117b6ef3feb58a0b390f6f5c97c57be7100efcf7a6d5d66e55cd157bfcf05c46897249b9a672e20b4c509c323e05569c3696fc2b038a196582d0e66207b5601743def836d59aaa176b9b1029b756dfe089a3cc018") syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="40229800000098214ea9d3263edba0a38dc3e937af7355a283895750dd9c235a23a7afb3e2911451cd4aebf7e55636af77f0d0cbd7d0691a7d8726e853097da485f40469254d48196a101cedede609e21db00b5d839a1040c34192ed5aa71080568b8cb3de8521153de8f759f19a8cbca35aa8d4291e3d944661e6b5f193119fe9eb3a60a654e65eb5580f6b6ed974896c32925b6e250b011ab2e0"], &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000600)={0x34, &(0x7f0000000300)={0x40, 0x12, 0xe1, "7b565a91c38b087627e88cb01af3d6463bcba05aab7457f7eff3f9d96f80c7178f66aee5e35428b7d476443e51f3cdcce724db9f2a96e3e7c54a1ae538ac2a998c04e0e69aa473d535f48b9178980587bb0bb9ac23f5890dc6f7de96f6e072296129c54b1ac39c7014f95de652feeccb1479d3af8a2e9481f1e84a6982cab2955461cb0a66ba069768a0edfbd9ba6b28de8008feb5b29500eb617b0f9805f5fc684f3b276b00a75959e5236e87046b059fb6bc675ce8654e1b84a09d8c1a38ddae628f682c7c6454e0a700a6f618b0976c9d2a88f5f2a04bb3eae5d2bfab685eff"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x98}, &(0x7f0000000480)={0x20, 0x0, 0xcf, {0xcd, "70ec974ee9c72bbded5e24f95af7cee5f4b3f82a449be2474360df11b3253d30c8201c5dad2846b05a02216681028d3ffeca4ff259b82d9065fd1c5d4e005de29a2eeaa57978c40c267336b3419f021443722fdcebf182a716b84abf2ea0f3ffcaecc69933a163e9f770fbd2e6baf369686e262e4c1bf2f1444556646fb86dfae0b0f077f8a2ad0c41fb939c6984eed9969f93881cbdd765cbb8235f8cb1717289882e2ef7b7225a9c8b181dd354da7b42563caf8d418d62870aefdec0943dbce44e512d7f24fe0f2a92b86af8"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x2}}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000032c0), 0x101000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x39, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) 10.539321722s ago: executing program 1 (id=319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0xc}, {{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/213, 0xd5}], 0x1}, 0x7e0}], 0x3, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) 10.348815434s ago: executing program 1 (id=320): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)='5', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{0x0}], 0x1}}], 0x2, 0x0) recvmmsg(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/210, 0xd2}, 0xce}], 0x1, 0x40002002, 0x0) r5 = dup(r3) r6 = socket$packet(0x11, 0x2, 0x300) r7 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x140}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r7, 0xb) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000000)) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) dup3(r5, r6, 0x0) unshare(0x42000000) 8.756373444s ago: executing program 2 (id=321): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) read$FUSE(r1, 0x0, 0x0) capget(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x5, 0x3, 0x40, 0x4, 0x0, 0x7ff}) 8.559029267s ago: executing program 2 (id=322): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$kcm(0x29, 0x5, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 8.452355327s ago: executing program 5 (id=323): syz_open_dev$sndctrl(&(0x7f0000001340), 0xe, 0x410640) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000088000/0x1000)=nil, 0x1000, 0xb635773f05ebbeef, 0x10, 0xffffffffffffffff, 0xbe3c5000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r2, &(0x7f0000000040)=""/4122, 0x101a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000070000000000000e02000000001b78ae92898124ed00000c00000000000000000000002e2e"], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) semget(0x1, 0x4, 0x83) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001500010027bd7000fddbdf250a980100", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000400000000000000000000aa"], 0x2c}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000000)=0xc) setgroups(0x2, &(0x7f0000001100)=[0x0, r4]) 7.630883522s ago: executing program 5 (id=324): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [<r8=>0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, <r9=>0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 7.513851438s ago: executing program 1 (id=325): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) 7.296057372s ago: executing program 6 (id=326): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0xfffffffe) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x2800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000118, 0x0, 0x99f5}]}) 7.295528152s ago: executing program 1 (id=327): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r0=>0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', <r4=>r0, 0x7, 0x744, 0x9, 0x4, {{0x9, 0x4, 0x1, 0x3, 0x24, 0x66, 0x0, 0xc, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0x7, 0x16, [@multicast1]}, @lsrr={0x83, 0x7, 0x6, [@empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={'gre0\x00', <r5=>0x0, 0x7, 0x80, 0x3, 0x8, {{0x18, 0x4, 0x3, 0x9, 0x60, 0x65, 0x0, 0xf6, 0x29, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x1c, 0x97, 0x0, 0x5, [0x0, 0x99c4, 0x7fffffff, 0x5bd, 0x0, 0x2b]}, @rr={0x7, 0xb, 0x83, [@empty, @loopback]}, @noop, @ssrr={0x89, 0x23, 0x7, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="e8000000", @ANYRES16, @ANYBLOB="00082cbd7000ffdbdf250a0000000c000680080003007f00000124000180060001000a00000008000700", @ANYRES32=r0, @ANYBLOB="0800060000000000060005004e24000008000400090000003c000680060005004e2400000500020001000000060005004e20000008000700", @ANYRES32=r3, @ANYBLOB="06a40101000000000000060010000000060005004e200019531b8a2f3c1af4e93d44000800020008492a7c51312843da742facb2f045f1a2f89acac9d720d702000000be340907b4123be7010100004dea0f06e1faf589ba26e1bd44", @ANYRES32=r4, @ANYBLOB="080006001d000000050002008100000008000600010000001400040000000000000000000000ffffe000000208000700", @ANYRES32=r5, @ANYBLOB="080006000a00000008000200030000000500050005000000"], 0xe8}, 0x1, 0x0, 0x0, 0x44084}, 0x80) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x5, 0x260001) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) 7.132869142s ago: executing program 3 (id=328): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mount$pvfs2(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)={[{'#$'}, {'rng\x00'}, {'\x00'}, {'#'}, {'/dev/vim2m\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsfloor}]}) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r4 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)={[{@quota}, {@huge_always}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00@\x00\x00\x00\x00\x00\x00A\x00'/29], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, r7, 0x0, 0x700}, 0x38) 4.346707777s ago: executing program 3 (id=329): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0xffffffffffffffff, 0xe6368f3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, 0x0) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x2000000, @void}, 0x10) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x82f6, 0xff, "0800000000000002"}) readv(r6, &(0x7f0000000c40), 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50, 0x8, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x2}]}) write$ppp(r7, &(0x7f0000000140), 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x9, [0x7, 0x800, 0x2, 0x9, 0x5, 0x8, 0x75, 0x9d, 0xffff]}, &(0x7f0000000540)=0x16) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') read$FUSE(r8, &(0x7f0000005cc0)={0x2020}, 0x2020) 2.723293817s ago: executing program 5 (id=330): ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x3, 0x5004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000000c0)=0x80000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1f, @remote}, 0x10, 0x0}, 0x3000c041) 2.689661098s ago: executing program 1 (id=331): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2710}, 0xd, 0xba4, 0x9}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0xfe, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.059860858s ago: executing program 2 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, &(0x7f0000000040)='./file0\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r8, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) syz_genetlink_get_family_id$l2tp(0x0, r7) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ptrace(0x10, r6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a000000400100"/46, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a9ffa2619a1201d0ef88a44e5ed535a8a52b15"], 0x4c}}, 0x0) 1.873414954s ago: executing program 6 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x83, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x3000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x8040) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x300}, 0x20008000) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 706.300602ms ago: executing program 2 (id=334): syz_open_dev$sndctrl(&(0x7f0000001340), 0xe, 0x410640) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000088000/0x1000)=nil, 0x1000, 0xb635773f05ebbeef, 0x10, 0xffffffffffffffff, 0xbe3c5000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r2, &(0x7f0000000040)=""/4122, 0x101a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000070000000000000e02000000001b78ae92898124ed00000c00000000000000000000002e2e"], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) semget(0x1, 0x4, 0x83) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001500010027bd7000fddbdf250a980100", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000400000000000000000000aa"], 0x2c}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000000)=0xc) setgroups(0x2, &(0x7f0000001100)=[0x0, r4]) 609.037094ms ago: executing program 5 (id=335): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 494.200884ms ago: executing program 3 (id=336): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) fdatasync(0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004000000a00300000500000001010000", @ANYRES32, @ANYBLOB="000000000000000000000000b300000000004000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 6 (id=337): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) sysfs$3(0x3) r1 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) fdatasync(0xffffffffffffffff) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) fcntl$setlease(r6, 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x106, 0xa}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000a00300000500000001010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000004e060300"/31], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000180)={r7, 0x0, &(0x7f0000000740)=""/240}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) dup3(r4, r7, 0x80000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ce21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0a85320, 0x0) kernel console output (not intermixed with test programs): 0: Adding interface: batadv_slave_1 [ 54.972320][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.998731][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.021662][ T5828] team0: Port device team_slave_0 added [ 55.029182][ T5828] team0: Port device team_slave_1 added [ 55.042699][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.049725][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.075959][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.088254][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.095699][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.121822][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.138842][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.146092][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.153212][ T5817] bridge_slave_0: entered allmulticast mode [ 55.160063][ T5817] bridge_slave_0: entered promiscuous mode [ 55.171725][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.180031][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.187370][ T5821] bridge_slave_0: entered allmulticast mode [ 55.193741][ T5821] bridge_slave_0: entered promiscuous mode [ 55.201890][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.209128][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.216564][ T5821] bridge_slave_1: entered allmulticast mode [ 55.222982][ T5821] bridge_slave_1: entered promiscuous mode [ 55.243899][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.251109][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.258489][ T5817] bridge_slave_1: entered allmulticast mode [ 55.265234][ T5817] bridge_slave_1: entered promiscuous mode [ 55.291852][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.312514][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.319609][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.345947][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.358504][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.365588][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.391602][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.414029][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.434431][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.447847][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.460225][ T5814] hsr_slave_0: entered promiscuous mode [ 55.466522][ T5814] hsr_slave_1: entered promiscuous mode [ 55.500281][ T5825] hsr_slave_0: entered promiscuous mode [ 55.506705][ T5825] hsr_slave_1: entered promiscuous mode [ 55.512549][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.520538][ T5825] Cannot create hsr debugfs directory [ 55.528272][ T5821] team0: Port device team_slave_0 added [ 55.545245][ T5817] team0: Port device team_slave_0 added [ 55.554026][ T5821] team0: Port device team_slave_1 added [ 55.578953][ T5817] team0: Port device team_slave_1 added [ 55.601508][ T5828] hsr_slave_0: entered promiscuous mode [ 55.609477][ T5828] hsr_slave_1: entered promiscuous mode [ 55.616105][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.623684][ T5828] Cannot create hsr debugfs directory [ 55.668720][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.676343][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.702804][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.715653][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.722600][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.748638][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.773979][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.781124][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.807369][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.821383][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.828546][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.854792][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.895912][ T5824] Bluetooth: hci0: command tx timeout [ 55.917582][ T5817] hsr_slave_0: entered promiscuous mode [ 55.923696][ T5817] hsr_slave_1: entered promiscuous mode [ 55.931470][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.940113][ T5817] Cannot create hsr debugfs directory [ 55.984177][ T5821] hsr_slave_0: entered promiscuous mode [ 55.990687][ T5821] hsr_slave_1: entered promiscuous mode [ 55.996971][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.005119][ T5821] Cannot create hsr debugfs directory [ 56.054809][ T5824] Bluetooth: hci4: command tx timeout [ 56.054854][ T5131] Bluetooth: hci1: command tx timeout [ 56.060335][ T5819] Bluetooth: hci2: command tx timeout [ 56.072022][ T5816] Bluetooth: hci3: command tx timeout [ 56.146687][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.161192][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.171518][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.180063][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.230216][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.240301][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.255064][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.274756][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.326521][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.336853][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.357271][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.366994][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.397323][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.415897][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.426531][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.437522][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.511493][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.519162][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.541732][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.550025][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.569739][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.581594][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.622414][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.629671][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.640397][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.647497][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.687744][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.696681][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.712813][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.748490][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.755637][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.776232][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 56.776247][ T29] audit: type=1400 audit(1735259372.177:111): avc: denied { sys_module } for pid=5828 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.790206][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.814421][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.829409][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.838087][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.845237][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.868177][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.895778][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.902906][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.913721][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.947078][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.954231][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.996358][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.012014][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.023043][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.034704][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.051858][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.058934][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.067380][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.074511][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.104127][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.138224][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.155039][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.162184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.170988][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.178137][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.193785][ T5828] veth0_vlan: entered promiscuous mode [ 57.222227][ T5828] veth1_vlan: entered promiscuous mode [ 57.249708][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.309167][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.353147][ T5828] veth0_macvtap: entered promiscuous mode [ 57.389162][ T5825] veth0_vlan: entered promiscuous mode [ 57.401618][ T5828] veth1_macvtap: entered promiscuous mode [ 57.420194][ T5825] veth1_vlan: entered promiscuous mode [ 57.447068][ T5814] veth0_vlan: entered promiscuous mode [ 57.480039][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.516271][ T5814] veth1_vlan: entered promiscuous mode [ 57.525279][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.539664][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.554069][ T5825] veth0_macvtap: entered promiscuous mode [ 57.563689][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.572869][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.583212][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.592297][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.612936][ T5814] veth0_macvtap: entered promiscuous mode [ 57.635340][ T5825] veth1_macvtap: entered promiscuous mode [ 57.641794][ T5814] veth1_macvtap: entered promiscuous mode [ 57.688449][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.702550][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.713587][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.727462][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.737379][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.749271][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.759559][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.770397][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.780917][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.793105][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.808872][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.820525][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.846466][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.857124][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.867342][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.878293][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.889215][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.899222][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.908321][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.917725][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.926529][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.958289][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.967203][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.976174][ T5816] Bluetooth: hci0: command tx timeout [ 57.976465][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.991707][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.019394][ T5821] veth0_vlan: entered promiscuous mode [ 58.046141][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.051838][ T5817] veth0_vlan: entered promiscuous mode [ 58.054113][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.086861][ T5821] veth1_vlan: entered promiscuous mode [ 58.098956][ T5817] veth1_vlan: entered promiscuous mode [ 58.136089][ T5816] Bluetooth: hci3: command tx timeout [ 58.136215][ T5824] Bluetooth: hci2: command tx timeout [ 58.147164][ T5819] Bluetooth: hci1: command tx timeout [ 58.148080][ T5816] Bluetooth: hci4: command tx timeout [ 58.175969][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.181457][ T5817] veth0_macvtap: entered promiscuous mode [ 58.183797][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.192669][ T5817] veth1_macvtap: entered promiscuous mode [ 58.238338][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.248852][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.259098][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.272007][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.281946][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.292594][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.303729][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.319591][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.324658][ T29] audit: type=1400 audit(1735259373.717:112): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.7CQepX/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 58.330604][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.368694][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.372163][ T29] audit: type=1400 audit(1735259373.717:113): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.380330][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.401476][ T29] audit: type=1400 audit(1735259373.717:114): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.7CQepX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.417130][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.437025][ T29] audit: type=1400 audit(1735259373.767:115): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.471222][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.477821][ T29] audit: type=1400 audit(1735259373.767:116): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.7CQepX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.485221][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.518745][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.524104][ T29] audit: type=1400 audit(1735259373.767:117): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.7CQepX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.531111][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.564217][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.581071][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.583525][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.591233][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.606076][ T29] audit: type=1400 audit(1735259373.767:118): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.621851][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.633519][ T29] audit: type=1400 audit(1735259373.917:119): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.633560][ T29] audit: type=1400 audit(1735259373.917:120): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="gadgetfs" ino=6820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.693436][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.706445][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.730790][ T5821] veth0_macvtap: entered promiscuous mode [ 58.778213][ T5821] veth1_macvtap: entered promiscuous mode [ 58.793085][ T5897] mmap: syz.2.3 (5897) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.793287][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.818445][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.828328][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.838860][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.848808][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.859379][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.869484][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.881610][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.894723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.910159][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.099187][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.144209][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.184626][ T5897] overlayfs: failed to resolve './file1': -2 [ 59.406069][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.417271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.425733][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.435808][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.446417][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.456303][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.466847][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.476743][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.487251][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.498381][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.505976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.516437][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.529115][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.538597][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.547499][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.622095][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.634434][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.744639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.796533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.814627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 59.974816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 60.090335][ T5816] Bluetooth: hci0: command tx timeout [ 60.096655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.136594][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.146738][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.187063][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.199575][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.214823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.216426][ T5816] Bluetooth: hci2: command tx timeout [ 60.223411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.228575][ T5824] Bluetooth: hci4: command tx timeout [ 60.242769][ T5824] Bluetooth: hci1: command tx timeout [ 60.248249][ T5816] Bluetooth: hci3: command tx timeout [ 60.267523][ T336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.360481][ T336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.887469][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.909372][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.004811][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.144273][ T5917] evm: overlay not supported [ 61.178346][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 61.189709][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.210418][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.259083][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 61.286663][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.326586][ T8] usb 3-1: Product: syz [ 61.338845][ T8] usb 3-1: Manufacturer: syz [ 61.371062][ T8] usb 3-1: SerialNumber: syz [ 61.386232][ T8] usb 3-1: config 0 descriptor?? [ 62.132238][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 62.132250][ T29] audit: type=1400 audit(1735259377.527:165): avc: denied { read } for pid=5931 comm="syz.4.11" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.163620][ T5819] Bluetooth: hci0: command tx timeout [ 62.200674][ T29] audit: type=1400 audit(1735259377.587:166): avc: denied { open } for pid=5931 comm="syz.4.11" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.233654][ T5930] block nbd0: shutting down sockets [ 62.239796][ T29] audit: type=1400 audit(1735259377.597:167): avc: denied { ioctl } for pid=5931 comm="syz.4.11" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.294950][ T5819] Bluetooth: hci1: command tx timeout [ 62.300867][ T5819] Bluetooth: hci3: command tx timeout [ 62.306445][ T5824] Bluetooth: hci2: command tx timeout [ 62.312344][ T5819] Bluetooth: hci4: command tx timeout [ 62.340688][ T29] audit: type=1400 audit(1735259377.677:168): avc: denied { create } for pid=5929 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.370936][ T5933] nbd0: detected capacity change from 0 to 30 [ 62.376002][ T5913] usb 3-1: USB disconnect, device number 2 [ 62.591058][ T5937] Bluetooth: MGMT ver 1.23 [ 62.594612][ T29] audit: type=1400 audit(1735259377.677:169): avc: denied { create } for pid=5929 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.625524][ T29] audit: type=1400 audit(1735259377.787:170): avc: denied { bind } for pid=5931 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.648935][ T29] audit: type=1400 audit(1735259377.987:171): avc: denied { write } for pid=5931 comm="syz.4.11" path="socket:[8229]" dev="sockfs" ino=8229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.757505][ T5939] overlayfs: failed to resolve './file1': -2 [ 63.101739][ T29] audit: type=1400 audit(1735259378.497:172): avc: denied { create } for pid=5931 comm="syz.4.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.127710][ T29] audit: type=1400 audit(1735259378.527:173): avc: denied { map } for pid=5931 comm="syz.4.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.213698][ T29] audit: type=1400 audit(1735259378.527:174): avc: denied { read write } for pid=5931 comm="syz.4.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.347827][ T5941] overlayfs: failed to resolve './file1': -2 [ 63.542608][ T5950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 64.374238][ T5956] tmpfs: Bad value for 'mpol' [ 65.344932][ T5895] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.373575][ T5823] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.714535][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 65.720298][ T5823] usb 1-1: Using ep0 maxpacket: 8 [ 65.730782][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.751733][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.767476][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.789307][ T5823] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 65.808843][ T5895] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 65.821963][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.832454][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.847614][ T5823] usb 1-1: config 0 descriptor?? [ 65.884889][ T5895] usb 2-1: config 0 descriptor?? [ 65.901098][ T5895] hub 2-1:0.0: USB hub found [ 66.059326][ T117] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 66.136349][ T5823] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 66.232575][ T5895] hub 2-1:0.0: 1 port detected [ 66.461399][ T117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.472592][ T117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.482525][ T117] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 66.492046][ T117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.509742][ T117] usb 5-1: config 0 descriptor?? [ 66.592001][ T5867] usb 1-1: USB disconnect, device number 2 [ 67.141627][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 67.141715][ T29] audit: type=1400 audit(1735259382.517:193): avc: denied { view } for pid=5982 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.178600][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.311702][ T117] usbhid 5-1:0.0: can't add hid device: -71 [ 67.335483][ T117] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.354824][ T5908] usb 2-1: USB disconnect, device number 2 [ 67.360902][ T5895] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 67.372831][ T117] usb 5-1: USB disconnect, device number 2 [ 67.509088][ T29] audit: type=1400 audit(1735259382.907:194): avc: denied { execute } for pid=6001 comm="syz.2.29" path="/6/memory.events" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.531922][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.553134][ T6007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 67.600693][ T29] audit: type=1400 audit(1735259382.947:195): avc: denied { connect } for pid=6003 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.621303][ T29] audit: type=1400 audit(1735259382.977:196): avc: denied { read } for pid=5177 comm="acpid" name="mouse1" dev="devtmpfs" ino=2737 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.644032][ T29] audit: type=1400 audit(1735259382.977:197): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2737 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.667973][ T29] audit: type=1400 audit(1735259382.977:198): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2737 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.693936][ T29] audit: type=1400 audit(1735259382.997:199): avc: denied { ioctl } for pid=6003 comm="syz.3.30" path="socket:[8432]" dev="sockfs" ino=8432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.719284][ T29] audit: type=1400 audit(1735259383.007:200): avc: denied { create } for pid=6003 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.756407][ T29] audit: type=1400 audit(1735259383.007:201): avc: denied { write } for pid=6003 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.777315][ T29] audit: type=1400 audit(1735259383.007:202): avc: denied { nlmsg_write } for pid=6003 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.049759][ T6019] nbd4: detected capacity change from 0 to 30 [ 68.143878][ T6031] netlink: 56 bytes leftover after parsing attributes in process `syz.1.33'. [ 69.167442][ T5819] block nbd4: Receive control failed (result -104) [ 69.686466][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.575040][ T5867] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.251309][ T6052] infiniband syz1: set active [ 71.259973][ T6052] infiniband syz1: added bond_slave_1 [ 71.269588][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 71.275293][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.289990][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.323531][ T6052] RDS/IB: syz1: added [ 71.327846][ T6052] smc: adding ib device syz1 with port count 1 [ 71.334120][ T6052] smc: ib device syz1 port 1 has pnetid [ 71.539525][ T5867] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 71.547796][ T5867] usb 4-1: config 0 has no interface number 0 [ 71.555541][ T5867] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 71.565471][ T5867] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 71.576121][ T5867] usb 4-1: config 0 interface 41 has no altsetting 0 [ 71.702948][ T5867] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 71.712313][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.720508][ T5867] usb 4-1: Product: syz [ 71.724854][ T5867] usb 4-1: Manufacturer: syz [ 71.729583][ T5867] usb 4-1: SerialNumber: syz [ 71.758351][ T5867] usb 4-1: config 0 descriptor?? [ 71.765220][ T6051] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.772574][ T6051] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.088767][ T6077] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.597140][ T6051] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.604838][ T6051] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.767765][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 72.767782][ T29] audit: type=1326 audit(1735259388.167:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 73.013748][ T29] audit: type=1326 audit(1735259388.167:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 73.536545][ T5867] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 73.544590][ T29] audit: type=1326 audit(1735259388.167:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 73.767288][ T5867] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 74.113831][ T5867] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 74.144655][ T29] audit: type=1326 audit(1735259388.167:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 74.154180][ T5867] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 74.180684][ T5867] usb 4-1: USB disconnect, device number 2 [ 74.286561][ T29] audit: type=1326 audit(1735259388.167:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 74.366170][ T29] audit: type=1326 audit(1735259388.167:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 74.442582][ T29] audit: type=1326 audit(1735259388.207:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 74.572464][ T6107] syz1: rxe_newlink: already configured on bond_slave_1 [ 74.670991][ T29] audit: type=1326 audit(1735259388.217:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3500f84690 code=0x7ffc0000 [ 74.694140][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.809118][ T29] audit: type=1326 audit(1735259388.217:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 74.899683][ T29] audit: type=1326 audit(1735259388.217:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 76.115130][ T6120] FAULT_INJECTION: forcing a failure. [ 76.115130][ T6120] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.128307][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.0.47 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 76.138816][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.148873][ T6120] Call Trace: [ 76.152149][ T6120] <TASK> [ 76.155079][ T6120] dump_stack_lvl+0x16c/0x1f0 [ 76.159777][ T6120] should_fail_ex+0x497/0x5b0 [ 76.164469][ T6120] _copy_from_user+0x2e/0xd0 [ 76.169073][ T6120] copy_msghdr_from_user+0x99/0x160 [ 76.174274][ T6120] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 76.180086][ T6120] ? __lock_acquire+0x15a9/0x3c40 [ 76.185134][ T6120] ___sys_recvmsg+0xdc/0x1a0 [ 76.189732][ T6120] ? __pfx____sys_recvmsg+0x10/0x10 [ 76.194935][ T6120] ? __pfx_lock_release+0x10/0x10 [ 76.199966][ T6120] ? trace_lock_acquire+0x14e/0x1f0 [ 76.205192][ T6120] do_recvmmsg+0x2f8/0x740 [ 76.209619][ T6120] ? __pfx_do_recvmmsg+0x10/0x10 [ 76.214559][ T6120] ? __schedule+0xe60/0x5ad0 [ 76.219154][ T6120] ? __pfx___schedule+0x10/0x10 [ 76.224027][ T6120] ? irqentry_exit+0x3b/0x90 [ 76.228720][ T6120] __x64_sys_recvmmsg+0x239/0x290 [ 76.233745][ T6120] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 76.239306][ T6120] do_syscall_64+0xcd/0x250 [ 76.243823][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.249727][ T6120] RIP: 0033:0x7f7508585d29 [ 76.254146][ T6120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.273772][ T6120] RSP: 002b:00007f7509409038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 76.282198][ T6120] RAX: ffffffffffffffda RBX: 00007f7508776160 RCX: 00007f7508585d29 [ 76.290177][ T6120] RDX: 0000000000000f00 RSI: 00000000200004c0 RDI: 0000000000000007 [ 76.298151][ T6120] RBP: 00007f7509409090 R08: 0000000000000000 R09: 0000000000000000 [ 76.306122][ T6120] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 76.314093][ T6120] R13: 0000000000000000 R14: 00007f7508776160 R15: 00007ffefa493398 [ 76.322079][ T6120] </TASK> [ 76.393935][ T9] cfg80211: failed to load regulatory.db [ 78.008400][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 78.008418][ T29] audit: type=1400 audit(1735259393.187:308): avc: denied { mounton } for pid=6138 comm="syz.0.51" path="/10/bus" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.584426][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.286554][ T29] audit: type=1400 audit(1735259393.297:309): avc: denied { write } for pid=6138 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.827522][ T29] audit: type=1400 audit(1735259397.227:310): avc: denied { create } for pid=6156 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.067406][ T29] audit: type=1400 audit(1735259397.947:311): avc: denied { setopt } for pid=6156 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.161460][ T29] audit: type=1400 audit(1735259397.947:312): avc: denied { name_bind } for pid=6156 comm="syz.2.55" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.263699][ T29] audit: type=1400 audit(1735259397.947:313): avc: denied { node_bind } for pid=6156 comm="syz.2.55" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 84.267656][ T29] audit: type=1400 audit(1735259399.307:314): avc: denied { connect } for pid=6171 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.654458][ T29] audit: type=1400 audit(1735259399.307:315): avc: denied { write } for pid=6171 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.846974][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 84.870504][ T29] audit: type=1400 audit(1735259399.307:316): avc: denied { read } for pid=6171 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.889558][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.984542][ T117] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.021417][ T29] audit: type=1400 audit(1735259399.317:317): avc: denied { create } for pid=6171 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.594468][ T29] audit: type=1400 audit(1735259399.337:318): avc: denied { setopt } for pid=6171 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.181494][ T6181] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 86.197334][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 86.243629][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.251626][ T6181] team0: Port device bond0 added [ 86.257009][ T117] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.332658][ T117] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 86.374174][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 86.394914][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.404225][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.412877][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.422389][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.430173][ T5816] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.438110][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.469161][ T29] audit: type=1400 audit(1735259401.847:319): avc: denied { mounton } for pid=6183 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.625014][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 87.162040][ T117] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.352675][ T117] usb 2-1: string descriptor 0 read error: -71 [ 87.359059][ T117] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 87.368366][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.379771][ T117] usb 2-1: config 0 descriptor?? [ 87.427196][ T29] audit: type=1400 audit(1735259402.827:320): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.108885][ T117] usb 2-1: can't set config #0, error -71 [ 88.119115][ T117] usb 2-1: USB disconnect, device number 3 [ 88.595561][ T5819] Bluetooth: hci5: command tx timeout [ 89.413331][ T6183] chnl_net:caif_netlink_parms(): no params data found [ 89.577090][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 89.577107][ T29] audit: type=1400 audit(1735259404.977:322): avc: denied { read } for pid=6215 comm="syz.3.69" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.611924][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.613816][ T29] audit: type=1400 audit(1735259404.977:323): avc: denied { open } for pid=6215 comm="syz.3.69" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.629334][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.650048][ T6183] bridge_slave_0: entered allmulticast mode [ 89.665327][ T6183] bridge_slave_0: entered promiscuous mode [ 89.679098][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.714303][ T29] audit: type=1400 audit(1735259405.107:324): avc: denied { create } for pid=6217 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.744765][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.752057][ T6183] bridge_slave_1: entered allmulticast mode [ 89.785858][ T6183] bridge_slave_1: entered promiscuous mode [ 89.791892][ T29] audit: type=1400 audit(1735259405.167:325): avc: denied { bind } for pid=6217 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.844505][ T5867] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 89.858758][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.871626][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.920545][ T6183] team0: Port device team_slave_0 added [ 89.976568][ T6183] team0: Port device team_slave_1 added [ 90.143358][ T29] audit: type=1400 audit(1735259405.517:326): avc: denied { write } for pid=6215 comm="syz.3.69" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.375526][ T117] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.407740][ T29] audit: type=1400 audit(1735259405.787:327): avc: denied { ioctl } for pid=6210 comm="syz.1.68" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.421871][ T51] libceph: connect (1)[c::]:6789 error -101 [ 90.439088][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 90.455110][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.468024][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.478086][ T5867] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 90.490448][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.519148][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.533421][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.537575][ T5867] usb 3-1: config 0 descriptor?? [ 90.559374][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.570531][ T6221] ceph: No mds server is up or the cluster is laggy [ 90.609055][ T6183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.643050][ T5819] Bluetooth: hci5: command tx timeout [ 90.673809][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 90.676693][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.682658][ T117] usb 2-1: config index 0 descriptor too short (expected 42, got 18) [ 90.692355][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.696190][ T117] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 90.720793][ T6183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.756073][ T117] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 90.788214][ T117] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 90.798494][ T117] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 90.813131][ T117] usb 2-1: Product: syz [ 90.817806][ T117] usb 2-1: SerialNumber: syz [ 90.841149][ T6183] hsr_slave_0: entered promiscuous mode [ 90.842912][ T117] r8152-cfgselector 2-1: Unknown version 0x0000 [ 90.938147][ T6183] hsr_slave_1: entered promiscuous mode [ 90.970735][ T117] r8152-cfgselector 2-1: config 0 descriptor?? [ 91.081936][ T6183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.157067][ T6183] Cannot create hsr debugfs directory [ 91.394222][ T117] hub 2-1:0.0: bad descriptor, ignoring hub [ 91.400258][ T117] hub 2-1:0.0: probe with driver hub failed with error -5 [ 91.554473][ C0] hrtimer: interrupt took 172462 ns [ 91.894259][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 91.901250][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 91.910067][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.919537][ T29] audit: type=1400 audit(1735259407.307:328): avc: denied { read write } for pid=6210 comm="syz.1.68" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.920540][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.942741][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.012820][ T5867] usb 3-1: USB disconnect, device number 4 [ 92.324647][ T29] audit: type=1400 audit(1735259407.307:329): avc: denied { open } for pid=6210 comm="syz.1.68" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.685186][ T29] audit: type=1400 audit(1735259408.087:330): avc: denied { ioctl } for pid=6210 comm="syz.1.68" path="socket:[9726]" dev="sockfs" ino=9726 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.709962][ T5819] Bluetooth: hci5: command tx timeout [ 92.893473][ T6245] overlayfs: failed to resolve './file1': -2 [ 92.964713][ T6248] overlayfs: failed to resolve './file1': -2 [ 93.522813][ T6260] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 93.562309][ T6260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.625720][ T6183] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.636308][ T6183] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.644633][ T5913] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 93.661324][ T6183] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.670988][ T6183] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.674499][ T29] audit: type=1400 audit(1735259409.067:331): avc: denied { read } for pid=6259 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.700288][ T6260] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 93.716612][ T6260] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 93.729833][ T6260] Zero length message leads to an empty skb [ 93.778842][ T6183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.803131][ T6183] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.813202][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.820385][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.832960][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.840119][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.383562][ T6273] block device autoloading is deprecated and will be removed. [ 94.774669][ T5819] Bluetooth: hci5: command tx timeout [ 95.139300][ T6183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.254598][ T6286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 95.401711][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 95.401727][ T29] audit: type=1326 audit(1735259410.797:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.435239][ T29] audit: type=1326 audit(1735259410.837:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.459119][ T6291] netlink: 56 bytes leftover after parsing attributes in process `syz.2.82'. [ 95.468681][ T29] audit: type=1326 audit(1735259410.857:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.492997][ T29] audit: type=1326 audit(1735259410.887:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.516425][ T29] audit: type=1326 audit(1735259410.887:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.544774][ T29] audit: type=1326 audit(1735259410.937:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.567943][ T29] audit: type=1326 audit(1735259410.947:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.591234][ T29] audit: type=1326 audit(1735259410.947:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.621954][ T29] audit: type=1326 audit(1735259411.017:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.645603][ T29] audit: type=1326 audit(1735259411.017:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 95.742031][ T6183] veth0_vlan: entered promiscuous mode [ 95.755952][ T6183] veth1_vlan: entered promiscuous mode [ 95.776404][ T6183] veth0_macvtap: entered promiscuous mode [ 95.786878][ T6183] veth1_macvtap: entered promiscuous mode [ 95.809509][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.831071][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.879146][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.890272][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.900173][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.910614][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.920454][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.930940][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.940806][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.951651][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.963147][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.026285][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.036855][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.047123][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.058258][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.068217][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.078698][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.088603][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.099192][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.109094][ T6183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.120212][ T6183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.131526][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.140359][ T6183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.149385][ T6183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.158559][ T6183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.167364][ T6183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.282210][ T6309] overlayfs: failed to resolve './file1': -2 [ 97.586839][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.594747][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.594766][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.602542][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.655101][ T6311] netlink: 56 bytes leftover after parsing attributes in process `syz.2.86'. [ 97.685073][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.854438][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 97.862779][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.873247][ T5913] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.898599][ T5913] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 97.907872][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.916108][ T5913] usb 1-1: Product: syz [ 97.920285][ T5913] usb 1-1: Manufacturer: syz [ 97.925003][ T5913] usb 1-1: SerialNumber: syz [ 97.931964][ T5913] usb 1-1: config 0 descriptor?? [ 98.145377][ T5866] usb 1-1: USB disconnect, device number 3 [ 98.153853][ T40] block nbd4: Possible stuck request ffff888025d85080: control (read@0,4096B). Runtime 30 seconds [ 98.444069][ T6323] overlayfs: failed to resolve './file1': -2 [ 99.755588][ T6346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.929930][ T6361] netlink: 56 bytes leftover after parsing attributes in process `syz.5.100'. [ 101.115303][ T6358] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 101.153409][ T6358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.685365][ T6368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 101.926396][ T6372] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.156981][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 102.156996][ T29] audit: type=1326 audit(1735259417.557:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.0.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7508585d29 code=0x0 [ 103.652146][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 103.935435][ T29] audit: type=1326 audit(1735259419.337:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 103.970320][ T6387] netlink: 56 bytes leftover after parsing attributes in process `syz.3.105'. [ 103.984744][ T5865] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.994855][ T29] audit: type=1326 audit(1735259419.367:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 104.224921][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 104.271545][ T6393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.612713][ T29] audit: type=1326 audit(1735259419.367:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 104.636996][ T29] audit: type=1326 audit(1735259419.387:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 104.661514][ T29] audit: type=1326 audit(1735259419.387:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 104.686083][ T29] audit: type=1326 audit(1735259419.387:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 105.085059][ T6384] 9pnet_fd: p9_fd_create_unix (6384): problem connecting socket: ./file1: -111 [ 105.161948][ T29] audit: type=1326 audit(1735259419.387:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 105.194473][ T29] audit: type=1326 audit(1735259419.497:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 105.231530][ T29] audit: type=1326 audit(1735259419.497:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 105.236087][ T5865] usb 3-1: device descriptor read/all, error -71 [ 105.355486][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 105.654463][ T5867] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.124412][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 106.142180][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.167081][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.221775][ T5867] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.231493][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.255740][ T5867] usb 1-1: config 0 descriptor?? [ 106.269244][ T5867] hub 1-1:0.0: USB hub found [ 106.467006][ T5867] hub 1-1:0.0: 1 port detected [ 107.160347][ T5866] hub 1-1:0.0: activate --> -90 [ 108.539875][ T5866] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 108.547085][ T5866] hub_port_connect: 50 callbacks suppressed [ 108.547101][ T5866] usb 1-1-port1: connect-debounce failed [ 108.574266][ T5865] usb 1-1: USB disconnect, device number 4 [ 108.587790][ T29] audit: type=1326 audit(1735259423.977:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 108.611462][ T29] audit: type=1326 audit(1735259423.977:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 108.634847][ T29] audit: type=1326 audit(1735259423.977:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 108.658661][ T29] audit: type=1326 audit(1735259423.977:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 108.682241][ T29] audit: type=1326 audit(1735259423.977:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 108.705731][ T29] audit: type=1326 audit(1735259423.977:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 108.728854][ T29] audit: type=1326 audit(1735259423.977:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 108.752621][ T29] audit: type=1326 audit(1735259423.977:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 108.776452][ T29] audit: type=1326 audit(1735259423.977:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3500f85d29 code=0x7ffc0000 [ 109.831135][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.119'. [ 111.228431][ T6457] trusted_key: syz.5.126 sent an empty control message without MSG_MORE. [ 111.732824][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.670749][ T6475] warning: `syz.0.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.759709][ T6473] netlink: 56 bytes leftover after parsing attributes in process `syz.3.132'. [ 113.214419][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 113.240053][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.255795][ T5913] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.274619][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.298159][ T5865] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 113.314530][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.353594][ T5865] usb 2-1: config 0 descriptor?? [ 113.424369][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 113.437806][ T5913] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 113.505238][ T5913] usb 1-1: config 0 has no interface number 0 [ 113.539505][ T5913] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 113.754588][ T5913] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 113.779562][ T5913] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 113.891195][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 113.891231][ T29] audit: type=1400 audit(1735259429.257:545): avc: denied { getopt } for pid=6485 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.253699][ T5913] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 114.264035][ T5913] usb 1-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.277331][ T5913] usb 1-1: config 0 interface 239 has no altsetting 0 [ 114.311704][ T5913] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 114.323510][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.337070][ T5913] usb 1-1: Product: syz [ 114.341286][ T5913] usb 1-1: Manufacturer: syz [ 114.347108][ T5913] usb 1-1: SerialNumber: syz [ 114.358759][ T5913] usb 1-1: config 0 descriptor?? [ 114.370840][ T6475] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 114.492835][ T5865] bigben 0003:146B:0902.0001: unexpected rdesc, please submit for review [ 114.502297][ T6492] ALSA: mixer_oss: invalid OSS volume '' [ 114.513234][ T5865] bigben 0003:146B:0902.0001: unknown main item tag 0x1 [ 114.551407][ T5865] bigben 0003:146B:0902.0001: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 114.578813][ T5865] bigben 0003:146B:0902.0001: missing HID_OUTPUT_REPORT 0 [ 114.586018][ T5913] usb 1-1: USB disconnect, device number 5 [ 114.618757][ T5865] bigben 0003:146B:0902.0001: no output report found [ 114.827127][ T6495] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 115.037028][ T5865] usb 2-1: USB disconnect, device number 5 [ 115.427275][ T29] audit: type=1400 audit(1735259430.827:546): avc: denied { ioctl } for pid=6500 comm="syz.3.139" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.630253][ T29] audit: type=1400 audit(1735259430.827:547): avc: denied { set_context_mgr } for pid=6500 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 115.652559][ T29] audit: type=1400 audit(1735259431.057:548): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.674078][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.744917][ T6508] FAULT_INJECTION: forcing a failure. [ 115.744917][ T6508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.758627][ T6508] CPU: 0 UID: 0 PID: 6508 Comm: syz.3.142 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 115.769228][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.779268][ T6508] Call Trace: [ 115.782534][ T6508] <TASK> [ 115.785464][ T6508] dump_stack_lvl+0x16c/0x1f0 [ 115.790128][ T6508] should_fail_ex+0x497/0x5b0 [ 115.794789][ T6508] _copy_to_user+0x32/0xd0 [ 115.799192][ T6508] simple_read_from_buffer+0xd0/0x160 [ 115.804560][ T6508] proc_fail_nth_read+0x198/0x270 [ 115.809576][ T6508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.815134][ T6508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.820685][ T6508] vfs_read+0x1df/0xbe0 [ 115.824863][ T6508] ? __fget_files+0x1fc/0x3a0 [ 115.829531][ T6508] ? __pfx___mutex_lock+0x10/0x10 [ 115.834545][ T6508] ? __pfx_vfs_read+0x10/0x10 [ 115.839217][ T6508] ? __fget_files+0x206/0x3a0 [ 115.843888][ T6508] ksys_read+0x12b/0x250 [ 115.848135][ T6508] ? __pfx_ksys_read+0x10/0x10 [ 115.852903][ T6508] do_syscall_64+0xcd/0x250 [ 115.857403][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.863284][ T6508] RIP: 0033:0x7f87eef8473c [ 115.867685][ T6508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.887276][ T6508] RSP: 002b:00007f87efe2d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.895685][ T6508] RAX: ffffffffffffffda RBX: 00007f87ef176160 RCX: 00007f87eef8473c [ 115.903658][ T6508] RDX: 000000000000000f RSI: 00007f87efe2d0a0 RDI: 0000000000000008 [ 115.911622][ T6508] RBP: 00007f87efe2d090 R08: 0000000000000000 R09: 0000000000000000 [ 115.919613][ T6508] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 115.927581][ T6508] R13: 0000000000000000 R14: 00007f87ef176160 R15: 00007fffae9393a8 [ 115.936163][ T6508] </TASK> [ 115.939217][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.229698][ T6510] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.261302][ T6510] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.354437][ T5865] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.504572][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 116.519499][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.090606][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.635761][ T5865] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.664531][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.683523][ T5865] usb 2-1: config 0 descriptor?? [ 117.710590][ T29] audit: type=1400 audit(1735259433.097:549): avc: denied { setopt } for pid=6521 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.715264][ T5865] hub 2-1:0.0: USB hub found [ 117.739193][ T6522] sctp: [Deprecated]: syz.0.146 (pid 6522) Use of int in maxseg socket option. [ 117.739193][ T6522] Use struct sctp_assoc_value instead [ 117.848830][ T6524] netlink: 56 bytes leftover after parsing attributes in process `syz.0.147'. [ 117.854519][ T29] audit: type=1326 audit(1735259433.247:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7508585d29 code=0x7ffc0000 [ 117.912366][ T5865] hub 2-1:0.0: 1 port detected [ 117.944668][ T29] audit: type=1326 audit(1735259433.247:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7508585d29 code=0x7ffc0000 [ 117.967842][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.976690][ T29] audit: type=1326 audit(1735259433.267:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7508585d29 code=0x7ffc0000 [ 117.999893][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.044628][ T29] audit: type=1326 audit(1735259433.267:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7508585d29 code=0x7ffc0000 [ 118.175778][ T6531] vivid-007: ================= START STATUS ================= [ 118.184894][ T6531] vivid-007: Enable Output Cropping: true [ 118.191138][ T6531] vivid-007: Enable Output Composing: true [ 118.197288][ T6531] vivid-007: Enable Output Scaler: true [ 118.202973][ T6531] vivid-007: Tx RGB Quantization Range: Automatic [ 118.211834][ T6531] vivid-007: Transmit Mode: HDMI [ 118.217397][ T29] audit: type=1326 audit(1735259433.267:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7508585d29 code=0x7ffc0000 [ 118.262683][ T6531] vivid-007: Hotplug Present: 0x00000000 [ 118.265083][ T6532] fuse: Unknown parameter '�0xffffffffffffffff0xffffffffffffffff00000000000000000000' [ 118.269440][ T6531] vivid-007: RxSense Present: 0x00000000 [ 118.284869][ T6531] vivid-007: EDID Present: 0x00000000 [ 118.504583][ T6531] vivid-007: ================== END STATUS ================== [ 119.577816][ T25] usb 2-1: USB disconnect, device number 6 [ 119.621186][ T5865] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 119.899195][ T6546] overlayfs: failed to resolve './file1': -2 [ 122.418232][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 123.491883][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 124.272236][ T6573] FAULT_INJECTION: forcing a failure. [ 124.272236][ T6573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.285645][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: syz.1.161 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 124.296262][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.306331][ T6573] Call Trace: [ 124.309620][ T6573] <TASK> [ 124.312555][ T6573] dump_stack_lvl+0x16c/0x1f0 [ 124.317254][ T6573] should_fail_ex+0x497/0x5b0 [ 124.321955][ T6573] _copy_from_user+0x2e/0xd0 [ 124.326561][ T6573] copy_msghdr_from_user+0x99/0x160 [ 124.331765][ T6573] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 124.337593][ T6573] ___sys_sendmsg+0xff/0x1e0 [ 124.342230][ T6573] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.347442][ T6573] ? __pfx_lock_release+0x10/0x10 [ 124.352470][ T6573] ? trace_lock_acquire+0x14e/0x1f0 [ 124.357693][ T6573] ? __fget_files+0x206/0x3a0 [ 124.362381][ T6573] __sys_sendmsg+0x16e/0x220 [ 124.366991][ T6573] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.372138][ T6573] do_syscall_64+0xcd/0x250 [ 124.376659][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.382563][ T6573] RIP: 0033:0x7efcb5785d29 [ 124.386984][ T6573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.406596][ T6573] RSP: 002b:00007efcb35f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.415018][ T6573] RAX: ffffffffffffffda RBX: 00007efcb5975fa0 RCX: 00007efcb5785d29 [ 124.422992][ T6573] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 124.430969][ T6573] RBP: 00007efcb35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.438943][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.446921][ T6573] R13: 0000000000000000 R14: 00007efcb5975fa0 R15: 00007ffc37ac9eb8 [ 124.454918][ T6573] </TASK> [ 124.458051][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.479505][ T5865] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.659094][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 124.674414][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 124.694653][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 124.694671][ T29] audit: type=1326 audit(1735259440.087:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 124.727196][ T6583] netlink: 56 bytes leftover after parsing attributes in process `syz.1.162'. [ 124.740486][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.751537][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.761321][ T5865] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.770499][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.785657][ T5865] usb 4-1: config 0 descriptor?? [ 124.790827][ T29] audit: type=1326 audit(1735259440.087:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 124.814429][ T29] audit: type=1326 audit(1735259440.127:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 124.837525][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.844260][ T29] audit: type=1326 audit(1735259440.137:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 124.868130][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.874637][ T29] audit: type=1326 audit(1735259440.137:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 124.898143][ T29] audit: type=1326 audit(1735259440.137:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 124.921279][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.927915][ T29] audit: type=1326 audit(1735259440.137:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 124.951122][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.957706][ T29] audit: type=1326 audit(1735259440.137:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 124.981174][ T29] audit: type=1326 audit(1735259440.137:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 125.004395][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.010511][ T29] audit: type=1326 audit(1735259440.137:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcb5784690 code=0x7ffc0000 [ 125.033720][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.050485][ T5865] hub 4-1:0.0: USB hub found [ 125.056378][ T935] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.173944][ T5865] hub 4-1:0.0: 1 port detected [ 125.316226][ T6591] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.768089][ T51] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 125.834449][ T935] usb 3-1: Using ep0 maxpacket: 32 [ 125.861424][ T935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.880273][ T935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.906592][ T935] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.960399][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.972544][ T5866] hub 4-1:0.0: activate --> -90 [ 125.985807][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.014434][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.063829][ T51] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 126.099578][ T935] usb 3-1: config 0 descriptor?? [ 126.301865][ T935] usb 3-1: can't set config #0, error -71 [ 126.331841][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.487884][ T5866] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 126.665626][ T935] usb 3-1: USB disconnect, device number 7 [ 126.673385][ T51] usb 1-1: config 0 descriptor?? [ 126.685860][ T5866] usb 4-1: Failed to suspend device, error -71 [ 126.861622][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 127.201392][ T5866] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.427035][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 127.464070][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.688724][ T51] usbhid 1-1:0.0: can't add hid device: -71 [ 127.708516][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.713419][ T5895] usb 4-1: USB disconnect, device number 3 [ 127.726633][ T51] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 127.754534][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.766865][ T51] usb 1-1: USB disconnect, device number 6 [ 127.777588][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.947817][ T5866] usb 2-1: config 0 descriptor?? [ 127.989835][ T5866] hub 2-1:0.0: USB hub found [ 128.669348][ T40] block nbd4: Possible stuck request ffff888025d85080: control (read@0,4096B). Runtime 60 seconds [ 128.835142][ T5866] hub 2-1:0.0: 1 port detected [ 130.357143][ T5866] hub 2-1:0.0: activate --> -90 [ 130.565649][ T5895] usb 2-1: USB disconnect, device number 7 [ 130.892634][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 131.678002][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 131.678020][ T29] audit: type=1400 audit(1735259446.947:607): avc: denied { create } for pid=6610 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 132.894288][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.901700][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.514396][ T5866] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.885826][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 136.557056][ T6657] overlayfs: failed to resolve './file1': -2 [ 136.888203][ T29] audit: type=1400 audit(1735259452.287:608): avc: denied { create } for pid=6670 comm="syz.5.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.909584][ T5866] usb 1-1: unable to read config index 0 descriptor/all [ 136.916752][ T5866] usb 1-1: can't read configurations, error -71 [ 137.274492][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.182'. [ 137.355167][ T29] audit: type=1400 audit(1735259452.657:609): avc: denied { execute } for pid=6670 comm="syz.5.182" path="/dev/dsp" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 137.574423][ T29] audit: type=1400 audit(1735259452.697:610): avc: denied { setopt } for pid=6670 comm="syz.5.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.632332][ T29] audit: type=1400 audit(1735259452.997:611): avc: denied { write } for pid=6676 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 137.952407][ T29] audit: type=1400 audit(1735259453.347:612): avc: denied { setattr } for pid=6685 comm="syz.5.185" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.025354][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.185'. [ 138.044578][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.185'. [ 138.064544][ T29] audit: type=1400 audit(1735259453.397:613): avc: denied { mounton } for pid=6685 comm="syz.5.185" path="/23/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.138132][ T29] audit: type=1400 audit(1735259453.417:614): avc: denied { remount } for pid=6685 comm="syz.5.185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.254441][ T5865] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 138.546265][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.557564][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.567769][ T5865] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 138.576923][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.587316][ T5865] usb 3-1: config 0 descriptor?? [ 139.664633][ T6700] capability: warning: `syz.5.189' uses 32-bit capabilities (legacy support in use) [ 139.690587][ T5865] usbhid 3-1:0.0: can't add hid device: -71 [ 139.712020][ T5865] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 139.752313][ T5865] usb 3-1: USB disconnect, device number 8 [ 140.710618][ T29] audit: type=1400 audit(1735259456.107:615): avc: denied { accept } for pid=6708 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 141.169883][ T6709] bridge1: entered promiscuous mode [ 141.450354][ T6709] bridge1: entered allmulticast mode [ 141.541904][ T6709] team0: Port device bridge1 added [ 142.029162][ T29] audit: type=1400 audit(1735259457.217:616): avc: denied { setopt } for pid=6712 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.324403][ T5908] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 142.475724][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.578426][ T6726] overlayfs: failed to resolve './file1': -2 [ 142.921300][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.931710][ T5908] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 142.943764][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.961379][ T5908] usb 6-1: config 0 descriptor?? [ 143.524691][ T5908] usbhid 6-1:0.0: can't add hid device: -71 [ 143.530709][ T5908] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 143.584623][ T5908] usb 6-1: USB disconnect, device number 2 [ 144.582349][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 146.544539][ T29] audit: type=1400 audit(1735259461.497:617): avc: denied { create } for pid=6743 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.602318][ T29] audit: type=1400 audit(1735259461.517:618): avc: denied { setopt } for pid=6743 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.810657][ T29] audit: type=1400 audit(1735259461.997:619): avc: denied { write } for pid=6728 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.972727][ T6776] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.444796][ T117] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.196965][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 151.270642][ T117] usb 2-1: device descriptor read/all, error -71 [ 151.928859][ T29] audit: type=1326 audit(1735259467.327:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 152.280405][ T29] audit: type=1326 audit(1735259467.657:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 152.340025][ T29] audit: type=1326 audit(1735259467.727:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 152.524467][ T117] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.525288][ T29] audit: type=1326 audit(1735259467.727:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 152.562338][ T29] audit: type=1326 audit(1735259467.727:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 152.868957][ T29] audit: type=1326 audit(1735259467.727:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 152.892193][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.898988][ T29] audit: type=1326 audit(1735259467.727:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 152.933625][ T29] audit: type=1326 audit(1735259467.727:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 152.957084][ T29] audit: type=1326 audit(1735259467.727:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 152.980342][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.986818][ T29] audit: type=1326 audit(1735259467.727:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 153.010011][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.055842][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 153.063142][ T117] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.074501][ T117] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.095527][ T117] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 153.104756][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.112804][ T117] usb 2-1: Product: syz [ 153.117036][ T117] usb 2-1: Manufacturer: syz [ 153.121690][ T117] usb 2-1: SerialNumber: syz [ 153.142992][ T117] usb 2-1: config 0 descriptor?? [ 153.380604][ T5866] usb 2-1: USB disconnect, device number 9 [ 153.594548][ T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.710919][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 156.274402][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 156.289660][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.300690][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.312734][ T51] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.714456][ T6828] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.455998][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.866365][ T51] usb 3-1: config 0 descriptor?? [ 159.243031][ T40] block nbd4: Possible stuck request ffff888025d85080: control (read@0,4096B). Runtime 90 seconds [ 159.322399][ T51] usb 3-1: can't set config #0, error -71 [ 159.330242][ T51] usb 3-1: USB disconnect, device number 9 [ 163.195184][ T6876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.590171][ T5913] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.524520][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 164.536943][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.640117][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.653015][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.663069][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.209971][ T5913] usb 3-1: config 0 descriptor?? [ 166.218618][ T5913] hub 3-1:0.0: USB hub found [ 166.385279][ T5913] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 166.455805][ T5913] usbhid 3-1:0.0: can't add hid device: -71 [ 166.472641][ T5913] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 167.501771][ T5913] usb 3-1: USB disconnect, device number 10 [ 168.341072][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 168.341089][ T29] audit: type=1326 audit(1735259483.737:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 168.344571][ T6915] netlink: 56 bytes leftover after parsing attributes in process `syz.1.245'. [ 168.347392][ T29] audit: type=1326 audit(1735259483.747:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 168.623882][ T29] audit: type=1326 audit(1735259483.847:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 168.647106][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.006721][ T6923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.084410][ T29] audit: type=1326 audit(1735259483.847:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 169.150774][ T29] audit: type=1326 audit(1735259483.967:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 169.315272][ T5816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.329125][ T29] audit: type=1326 audit(1735259483.977:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 169.329428][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.363120][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.371044][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.378452][ T5816] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 169.385669][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.547530][ T29] audit: type=1326 audit(1735259483.977:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 169.611600][ T29] audit: type=1326 audit(1735259483.977:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 169.636137][ T29] audit: type=1326 audit(1735259483.977:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 169.659724][ T29] audit: type=1326 audit(1735259483.977:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb5785d29 code=0x7ffc0000 [ 169.844966][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 169.903096][ T2990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.930989][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 169.990001][ T6942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 170.114941][ T2990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.139734][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.147183][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.154683][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 170.506228][ T6921] bridge_slave_0: entered allmulticast mode [ 170.521253][ T6921] bridge_slave_0: entered promiscuous mode [ 170.558351][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.605770][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.635688][ T6921] bridge_slave_1: entered allmulticast mode [ 170.642502][ T6921] bridge_slave_1: entered promiscuous mode [ 170.648787][ T25] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 170.657139][ T25] usb 6-1: config 0 has no interface number 0 [ 170.663314][ T25] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 170.674428][ T25] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 170.686264][ T25] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 170.697842][ T25] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 170.708724][ T25] usb 6-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.722380][ T25] usb 6-1: config 0 interface 239 has no altsetting 0 [ 170.731509][ T25] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 170.740736][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.748912][ T25] usb 6-1: Product: syz [ 170.780520][ T2990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.843853][ T25] usb 6-1: Manufacturer: syz [ 170.848771][ T25] usb 6-1: SerialNumber: syz [ 170.865300][ T25] usb 6-1: config 0 descriptor?? [ 170.871105][ T6931] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 171.038291][ T6950] overlayfs: failed to resolve './file1': -2 [ 171.121240][ T25] usb 6-1: USB disconnect, device number 3 [ 171.346059][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.479220][ T5816] Bluetooth: hci6: command tx timeout [ 171.499034][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.533506][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.250'. [ 171.951371][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.250'. [ 171.971824][ T2990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.048219][ T6921] team0: Port device team_slave_0 added [ 172.067896][ T6921] team0: Port device team_slave_1 added [ 172.202766][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.216030][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.274115][ T6921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.400243][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.504529][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.531821][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.507717][ T5816] Bluetooth: hci6: command tx timeout [ 173.632363][ T6921] hsr_slave_0: entered promiscuous mode [ 173.642236][ T6921] hsr_slave_1: entered promiscuous mode [ 173.649220][ T6921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.670378][ T6921] Cannot create hsr debugfs directory [ 173.684800][ T2990] bridge_slave_1: left allmulticast mode [ 173.693271][ T2990] bridge_slave_1: left promiscuous mode [ 173.708250][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.773176][ T2990] bridge_slave_0: left allmulticast mode [ 173.846182][ T2990] bridge_slave_0: left promiscuous mode [ 174.039376][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.051142][ T6983] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 174.296364][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 174.296381][ T29] audit: type=1326 audit(1735259489.697:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 174.327850][ T6987] netlink: 56 bytes leftover after parsing attributes in process `syz.3.264'. [ 174.368450][ T29] audit: type=1326 audit(1735259489.727:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 174.396874][ T29] audit: type=1326 audit(1735259489.737:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 174.420893][ T29] audit: type=1326 audit(1735259489.737:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 174.519834][ T29] audit: type=1326 audit(1735259489.747:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 174.729248][ T29] audit: type=1326 audit(1735259489.747:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 174.930307][ T29] audit: type=1326 audit(1735259489.757:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 175.578646][ T5816] Bluetooth: hci6: command tx timeout [ 175.597514][ T29] audit: type=1326 audit(1735259489.757:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 175.640098][ T29] audit: type=1326 audit(1735259489.757:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eef85d29 code=0x7ffc0000 [ 175.663632][ T29] audit: type=1326 audit(1735259489.757:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87eef84690 code=0x7ffc0000 [ 176.676663][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.757183][ T7007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.825548][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.916186][ T2990] infiniband syz1: set down [ 176.945529][ T2990] bond0 (unregistering): Released all slaves [ 177.173225][ T2990] bond1 (unregistering): Released all slaves [ 178.448810][ T5816] Bluetooth: hci6: command tx timeout [ 180.743508][ T7033] IPv6: Can't replace route, no match found [ 180.827825][ T5864] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 180.836961][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 180.836977][ T29] audit: type=1400 audit(1735259496.237:725): avc: denied { bind } for pid=7032 comm="syz.5.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.081295][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.093782][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.104719][ T5864] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 181.113912][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.666794][ T5864] usb 4-1: config 0 descriptor?? [ 181.680046][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 181.686225][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 181.692307][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 182.854887][ T5864] usbhid 4-1:0.0: can't add hid device: -71 [ 182.863853][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 182.937753][ T5864] usb 4-1: USB disconnect, device number 4 [ 183.249740][ T6921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.310037][ T6921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.345419][ T7068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 183.401792][ T2990] hsr_slave_0: left promiscuous mode [ 183.798164][ T2990] hsr_slave_1: left promiscuous mode [ 183.980096][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.064796][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.159913][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.269207][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.483209][ T2990] veth1_macvtap: left promiscuous mode [ 184.510377][ T2990] veth0_macvtap: left promiscuous mode [ 184.540351][ T2990] veth1_vlan: left promiscuous mode [ 184.565612][ T2990] veth0_vlan: left promiscuous mode [ 185.722016][ T2990] team0 (unregistering): Port device team_slave_1 removed [ 185.929270][ T2990] team0 (unregistering): Port device team_slave_0 removed [ 186.424269][ T6201] smc: removing ib device syz1 [ 187.371865][ T6921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.382803][ T6921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 187.621709][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.700073][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.737457][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.745884][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.052231][ T6921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.089278][ T6921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.124798][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.131911][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.895957][ T40] block nbd4: Possible stuck request ffff888025d85080: control (read@0,4096B). Runtime 120 seconds [ 191.304886][ T5824] Bluetooth: hci3: unexpected event for opcode 0x0c38 [ 192.974564][ T5866] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 193.015825][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 193.154831][ T5866] usb 3-1: device descriptor read/64, error -32 [ 193.315205][ T7159] netlink: 56 bytes leftover after parsing attributes in process `syz.1.295'. [ 193.760159][ T6921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.517135][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.523558][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.881512][ T7179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.931751][ T6921] veth0_vlan: entered promiscuous mode [ 196.058692][ T6921] veth1_vlan: entered promiscuous mode [ 196.208819][ T6921] veth0_macvtap: entered promiscuous mode [ 196.222272][ T6921] veth1_macvtap: entered promiscuous mode [ 196.279599][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.463155][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.411627][ T5908] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 197.847169][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.876614][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.891565][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.904351][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 197.914376][ T5908] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 197.922585][ T5908] usb 2-1: config 0 has no interface number 0 [ 197.948364][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.966236][ T5908] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 197.989030][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.011638][ T5908] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 198.024025][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.039346][ T5908] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 198.053295][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.064965][ T5908] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 198.075483][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.463743][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.668971][ T5908] usb 2-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.684651][ T5908] usb 2-1: config 0 interface 239 has no altsetting 0 [ 198.706236][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.720354][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.732033][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.734455][ T5908] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 198.744320][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.762484][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.773442][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.784465][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.792496][ T5908] usb 2-1: Product: syz [ 198.800303][ T5908] usb 2-1: Manufacturer: syz [ 198.819806][ T5908] usb 2-1: SerialNumber: syz [ 198.821699][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.846305][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.857052][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.876604][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.901203][ T5908] usb 2-1: config 0 descriptor?? [ 198.907919][ T5913] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 198.917297][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.943965][ T5908] usb 2-1: can't set config #0, error -71 [ 198.973468][ T5908] usb 2-1: USB disconnect, device number 10 [ 199.157435][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.310874][ T6921] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.342845][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.420062][ T6921] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.507946][ T5913] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 199.547903][ T6921] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.608471][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.623193][ T6921] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.682296][ T5913] usb 4-1: config 0 descriptor?? [ 200.976975][ T5913] usbhid 4-1:0.0: can't add hid device: -71 [ 200.983533][ T5913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 201.004517][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.012593][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.153547][ T5913] usb 4-1: USB disconnect, device number 5 [ 201.523936][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 201.621625][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.663391][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.898031][ T7241] infiniband syz1: set active [ 201.914634][ T7241] infiniband syz1: added bond_slave_1 [ 202.187198][ T7241] RDS/IB: syz1: added [ 202.904530][ T7241] smc: adding ib device syz1 with port count 1 [ 202.910968][ T7241] smc: ib device syz1 port 1 has pnetid [ 203.224435][ T29] audit: type=1400 audit(1735259518.607:726): avc: denied { append } for pid=7268 comm="syz.2.314" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.274462][ T29] audit: type=1400 audit(1735259518.607:727): avc: denied { map } for pid=7268 comm="syz.2.314" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.777273][ T29] audit: type=1400 audit(1735259519.177:728): avc: denied { setrlimit } for pid=7276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 204.090344][ T7285] Invalid source name [ 204.111648][ T29] audit: type=1326 audit(1735259519.507:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3500f85d29 code=0x0 [ 204.320375][ T29] audit: type=1400 audit(1735259519.697:730): avc: denied { setopt } for pid=7286 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 205.027630][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 206.403660][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 206.415821][ T25] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 206.424092][ T25] usb 4-1: config 0 has no interface number 0 [ 206.437171][ T25] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 206.500066][ T25] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 207.054491][ T25] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 207.074355][ T25] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 207.084714][ T25] usb 4-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.104335][ T25] usb 4-1: config 0 interface 239 has no altsetting 0 [ 207.161729][ T25] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 207.172762][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.181376][ T25] usb 4-1: Product: syz [ 207.234805][ T25] usb 4-1: Manufacturer: syz [ 207.239450][ T25] usb 4-1: SerialNumber: syz [ 207.274836][ T25] usb 4-1: config 0 descriptor?? [ 207.280987][ T7308] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 207.691410][ T5866] usb 4-1: USB disconnect, device number 6 [ 208.325849][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 211.464537][ T5192] udevd[5192]: worker [5808] /devices/virtual/block/nbd4 is taking a long time [ 214.104801][ T29] audit: type=1400 audit(1735259529.357:731): avc: denied { nlmsg_read } for pid=7377 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 214.355086][ T5908] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 214.968462][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.984249][ T5908] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 214.993929][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.045745][ T5908] usb 2-1: config 0 descriptor?? [ 215.147642][ T5864] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 215.259070][ T30] INFO: task syz.4.32:6018 blocked for more than 144 seconds. [ 215.274551][ T30] Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.344241][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.368293][ T30] task:syz.4.32 state:D stack:26048 pid:6018 tgid:6018 ppid:5821 flags:0x00004004 [ 215.662715][ T30] Call Trace: [ 215.676535][ T30] <TASK> [ 215.685819][ T30] __schedule+0xe58/0x5ad0 [ 215.707003][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 215.725874][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 215.738860][ T30] ? __pfx___schedule+0x10/0x10 [ 215.743765][ T30] ? schedule+0x298/0x350 [ 215.748203][ T30] ? __pfx_lock_release+0x10/0x10 [ 215.753653][ T30] ? __mutex_trylock_common+0x78/0x250 [ 215.759215][ T30] ? lock_acquire+0x2f/0xb0 [ 215.763771][ T30] ? schedule+0x1fd/0x350 [ 215.768379][ T30] schedule+0xe7/0x350 [ 215.772547][ T30] schedule_preempt_disabled+0x13/0x30 [ 215.778067][ T30] __mutex_lock+0x62b/0xa60 [ 215.782689][ T30] ? bdev_release+0x15a/0x6d0 [ 215.787451][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 215.792509][ T30] ? __pfx_lock_release+0x10/0x10 [ 215.797693][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 215.802922][ T30] ? bdev_release+0x15a/0x6d0 [ 215.807670][ T30] bdev_release+0x15a/0x6d0 [ 215.812246][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 215.817528][ T30] blkdev_release+0x15/0x20 [ 215.822046][ T30] __fput+0x3f8/0xb60 [ 215.826146][ T30] task_work_run+0x14e/0x250 [ 215.830757][ T30] ? __pfx_task_work_run+0x10/0x10 [ 215.835953][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 215.841705][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 215.847436][ T30] do_syscall_64+0xda/0x250 [ 215.851960][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.858135][ T30] RIP: 0033:0x7fca2cb85d29 [ 215.862565][ T30] RSP: 002b:00007fffc0fdc0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 215.871368][ T30] RAX: 0000000000000000 RBX: 00007fca2cd77ba0 RCX: 00007fca2cb85d29 [ 215.879413][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 215.887477][ T30] RBP: 00007fca2cd77ba0 R08: 000000000000f04c R09: 00007fffc0fdc3ef [ 215.895799][ T30] R10: 00007fca2cd77ac0 R11: 0000000000000246 R12: 0000000000010c58 [ 215.904512][ T30] R13: 00007fca2cd76160 R14: 0000000000000032 R15: ffffffffffffffff [ 215.912524][ T30] </TASK> [ 215.915638][ T30] INFO: task syz.4.32:6019 blocked for more than 144 seconds. [ 215.923118][ T30] Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 215.930811][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.941777][ T30] task:syz.4.32 state:D stack:27936 pid:6019 tgid:6018 ppid:5821 flags:0x00004004 [ 215.952340][ T30] Call Trace: [ 215.955733][ T30] <TASK> [ 215.959108][ T30] __schedule+0xe58/0x5ad0 [ 215.963562][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 215.968876][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 215.974170][ T30] ? __pfx___schedule+0x10/0x10 [ 215.979167][ T30] ? schedule+0x298/0x350 [ 215.984473][ T30] ? __pfx_lock_release+0x10/0x10 [ 215.989534][ T30] ? __mutex_trylock_common+0x78/0x250 [ 215.995066][ T30] ? lock_acquire+0x2f/0xb0 [ 215.999587][ T30] ? schedule+0x1fd/0x350 [ 216.003942][ T30] schedule+0xe7/0x350 [ 216.014430][ T30] schedule_preempt_disabled+0x13/0x30 [ 216.019921][ T30] __mutex_lock+0x62b/0xa60 [ 216.024512][ T30] ? bdev_release+0x15a/0x6d0 [ 216.029203][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 216.034249][ T30] ? __pfx_lock_release+0x10/0x10 [ 216.039382][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 216.044654][ T30] ? bdev_release+0x15a/0x6d0 [ 216.049340][ T30] bdev_release+0x15a/0x6d0 [ 216.059391][ T30] ? task_work_run+0x126/0x250 [ 216.064200][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 216.069483][ T30] blkdev_release+0x15/0x20 [ 216.074006][ T30] __fput+0x3f8/0xb60 [ 216.078085][ T30] task_work_run+0x14e/0x250 [ 216.082696][ T30] ? __pfx_task_work_run+0x10/0x10 [ 216.087925][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 216.093589][ T30] do_syscall_64+0xda/0x250 [ 216.098210][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.104129][ T30] RIP: 0033:0x7fca2cb85d29 [ 216.108610][ T30] RSP: 002b:00007fca2d9cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.117094][ T30] RAX: 0000000000000000 RBX: 00007fca2cd75fa0 RCX: 00007fca2cb85d29 [ 216.125148][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 216.133137][ T30] RBP: 00007fca2cc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 216.141256][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.149339][ T30] R13: 0000000000000000 R14: 00007fca2cd75fa0 R15: 00007fffc0fdbf98 [ 216.157423][ T30] </TASK> [ 216.160503][ T30] [ 216.160503][ T30] Showing all locks held in the system: [ 216.168488][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 216.173791][ T30] 1 lock held by khungtaskd/30: [ 216.178941][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 216.188933][ T30] 3 locks held by kworker/u8:2/33: [ 216.194091][ T30] 1 lock held by dhcpcd/5486: [ 216.198826][ T30] 2 locks held by getty/5577: [ 216.203514][ T30] #0: ffff888031ab20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 216.213378][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 216.224048][ T30] 1 lock held by udevd/5808: [ 216.228702][ T30] #0: ffff888025bc44c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 216.238093][ T30] 2 locks held by syz-executor/5828: [ 216.243392][ T30] 4 locks held by udevd/5834: [ 216.248136][ T30] #0: ffff88804f5ed668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0 [ 216.257249][ T30] #1: ffff888063697488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 216.266929][ T30] #2: ffff88807c2e2e18 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 216.276647][ T30] #3: ffff88804d97e190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x188/0x3b0 [ 216.285700][ T30] 5 locks held by kworker/0:4/5864: [ 216.290918][ T30] 2 locks held by kworker/1:3/5865: [ 216.296169][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 216.306696][ T30] #1: ffffc900042dfd80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 216.316451][ T30] 5 locks held by kworker/0:7/5908: [ 216.321671][ T30] 1 lock held by syz.4.32/6018: [ 216.326603][ T30] #0: ffff888025bc44c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 216.336359][ T30] 1 lock held by syz.4.32/6019: [ 216.341216][ T30] #0: ffff888025bc44c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 216.350884][ T30] 1 lock held by syz.3.336/7402: [ 216.355882][ T30] #0: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 216.366168][ T30] 2 locks held by syz.6.337/7409: [ 216.371204][ T30] #0: ffff88807c338d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 216.381237][ T30] #1: ffff88807c338078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 216.391125][ T30] 1 lock held by dhcpcd-run-hook/7413: [ 216.396679][ T30] [ 216.399009][ T30] ============================================= [ 216.399009][ T30] [ 216.407467][ T30] NMI backtrace for cpu 0 [ 216.411814][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 216.422343][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.432423][ T30] Call Trace: [ 216.435722][ T30] <TASK> [ 216.438692][ T30] dump_stack_lvl+0x116/0x1f0 [ 216.443401][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 216.448355][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 216.454360][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 216.460366][ T30] watchdog+0xf14/0x1240 [ 216.464628][ T30] ? __pfx_watchdog+0x10/0x10 [ 216.469318][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.474527][ T30] ? __kthread_parkme+0x148/0x220 [ 216.479555][ T30] ? __pfx_watchdog+0x10/0x10 [ 216.484237][ T30] kthread+0x2c1/0x3a0 [ 216.488308][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.493505][ T30] ? __pfx_kthread+0x10/0x10 [ 216.498094][ T30] ret_from_fork+0x45/0x80 [ 216.502509][ T30] ? __pfx_kthread+0x10/0x10 [ 216.507111][ T30] ret_from_fork_asm+0x1a/0x30 [ 216.511893][ T30] </TASK> [ 216.515196][ T30] Sending NMI from CPU 0 to CPUs 1: [ 216.520425][ C1] NMI backtrace for cpu 1 [ 216.520439][ C1] CPU: 1 UID: 0 PID: 7414 Comm: dhcpcd-run-hook Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 216.520461][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.520470][ C1] RIP: 0010:___slab_alloc+0x216/0x17a0 [ 216.520494][ C1] Code: 12 7e 9c 5b fa 48 89 d8 25 00 02 00 00 48 89 85 50 ff ff ff 0f 85 39 06 00 00 49 8b 45 00 48 8d 50 20 49 89 d7 e8 1a fe 37 09 <83> f8 07 89 c2 0f 87 13 13 00 00 4c 03 3c d5 e0 7c a7 8d 31 f6 45 [ 216.520511][ C1] RSP: 0018:ffffc90004ddf780 EFLAGS: 00000096 [ 216.520526][ C1] RAX: 0000000000000001 RBX: 0000000000000282 RCX: ffffffff81a1b5a5 [ 216.520544][ C1] RDX: 00000000000453e0 RSI: ffffffff8bd1ece0 RDI: ffffffff8bd1ed20 [ 216.520556][ C1] RBP: ffffc90004ddf860 R08: 0000000000000000 R09: fffffbfff20be6aa [ 216.520568][ C1] R10: ffffffff905f3557 R11: 0000000000000001 R12: ffff8880b87453c0 [ 216.520579][ C1] R13: ffff88801c2bd280 R14: ffff88805de44880 R15: 00000000000453e0 [ 216.520592][ C1] FS: 00007fac56da6500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 216.520612][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.520625][ C1] CR2: 00007fac56f10fe4 CR3: 000000005a892000 CR4: 00000000003526f0 [ 216.520637][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.520648][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.520659][ C1] Call Trace: [ 216.520665][ C1] <NMI> [ 216.520672][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 216.520693][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 216.520711][ C1] ? nmi_handle+0x1ac/0x5d0 [ 216.520731][ C1] ? ___slab_alloc+0x216/0x17a0 [ 216.520749][ C1] ? default_do_nmi+0x6a/0x160 [ 216.520767][ C1] ? exc_nmi+0x170/0x1e0 [ 216.520783][ C1] ? end_repeat_nmi+0xf/0x53 [ 216.520811][ C1] ? trace_irq_disable.constprop.0+0x35/0x140 [ 216.520835][ C1] ? ___slab_alloc+0x216/0x17a0 [ 216.520852][ C1] ? ___slab_alloc+0x216/0x17a0 [ 216.520871][ C1] ? ___slab_alloc+0x216/0x17a0 [ 216.520888][ C1] </NMI> [ 216.520894][ C1] <TASK> [ 216.520900][ C1] ? mas_alloc_nodes+0x18b/0x8b0 [ 216.520919][ C1] ? anon_vma_clone+0xe1/0x5e0 [ 216.520940][ C1] ? ___slab_alloc+0x68/0x17a0 [ 216.520962][ C1] ? anon_vma_clone+0xe1/0x5e0 [ 216.520981][ C1] ? __slab_alloc.constprop.0+0x56/0xb0 [ 216.520999][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 216.521019][ C1] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 216.521040][ C1] ? anon_vma_clone+0xe1/0x5e0 [ 216.521060][ C1] anon_vma_clone+0xe1/0x5e0 [ 216.521078][ C1] __split_vma+0x6b6/0x1160 [ 216.521095][ C1] ? __pfx___split_vma+0x10/0x10 [ 216.521114][ C1] ? ima_file_mprotect+0x1b9/0x690 [ 216.521131][ C1] vma_modify.constprop.0+0x2ed/0x3b0 [ 216.521148][ C1] vma_modify_flags+0x209/0x2a0 [ 216.521164][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 216.521188][ C1] mprotect_fixup+0x2c2/0xbe0 [ 216.521206][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 216.521222][ C1] ? selinux_file_mprotect+0x161/0x610 [ 216.521240][ C1] do_mprotect_pkey+0x981/0xcf0 [ 216.521259][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 216.521280][ C1] ? do_user_addr_fault+0xe50/0x13f0 [ 216.521300][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 216.521315][ C1] __x64_sys_mprotect+0x78/0xc0 [ 216.521331][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.521347][ C1] do_syscall_64+0xcd/0x250 [ 216.521365][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.521382][ C1] RIP: 0033:0x7fac570cabb7 [ 216.521393][ C1] Code: 00 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 8d 0d b9 46 01 00 f7 d8 89 01 48 83 c8 ff c3 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 99 46 01 00 f7 d8 89 01 48 83 [ 216.521405][ C1] RSP: 002b:00007ffec9c93a48 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 216.521417][ C1] RAX: ffffffffffffffda RBX: 00007fac570a8880 RCX: 00007fac570cabb7 [ 216.521426][ C1] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007fac56dfa000 [ 216.521435][ C1] RBP: 00007ffec9c93b60 R08: 00007ffec9c939d8 R09: 00007fac570a78d0 [ 216.521444][ C1] R10: 00007fac56da7928 R11: 0000000000000206 R12: 00007fac570a8880 [ 216.521453][ C1] R13: 00007fac570d2eda R14: 00007fac56dfafb0 R15: 00007fac56dfae58 [ 216.521467][ C1] </TASK> [ 216.528189][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 216.528203][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 216.528222][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.528232][ T30] Call Trace: [ 216.528238][ T30] <TASK> [ 216.528244][ T30] dump_stack_lvl+0x3d/0x1f0 [ 216.528269][ T30] panic+0x71d/0x800 [ 216.528297][ T30] ? __pfx_panic+0x10/0x10 [ 216.528320][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 216.528340][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 216.528357][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 216.528375][ T30] ? watchdog+0xd7e/0x1240 [ 216.528395][ T30] ? watchdog+0xd71/0x1240 [ 216.528416][ T30] watchdog+0xd8f/0x1240 [ 216.528440][ T30] ? __pfx_watchdog+0x10/0x10 [ 216.528458][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.528479][ T30] ? __kthread_parkme+0x148/0x220 [ 216.528503][ T30] ? __pfx_watchdog+0x10/0x10 [ 216.528522][ T30] kthread+0x2c1/0x3a0 [ 216.528542][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.528560][ T30] ? __pfx_kthread+0x10/0x10 [ 216.528581][ T30] ret_from_fork+0x45/0x80 [ 216.528596][ T30] ? __pfx_kthread+0x10/0x10 [ 217.049986][ T30] ret_from_fork_asm+0x1a/0x30 [ 217.054760][ T30] </TASK> [ 217.058053][ T30] Kernel Offset: disabled [ 217.062360][ T30] Rebooting in 86400 seconds..