last executing test programs: 5m56.605434463s ago: executing program 0 (id=41): mkdir(0x0, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 5m55.704075091s ago: executing program 0 (id=44): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x128}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0xb, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a4f000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x376, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/886], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0x8, 0x2, 0x20b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1}, 0x4) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000009c0)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109023b00010104800d0904000802020600fe04240f"], &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000a004e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f6000000080001001c0000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c00000008"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0xd0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 5m50.563761867s ago: executing program 0 (id=54): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0xa, 0x4, 0x84) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl(r4, 0x40186f40, &(0x7f0000000040)="ffffffff0000000089") connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r3, 0x8) accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1b6) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xf1, 0x40000, 0x7, 0x7}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r6, &(0x7f0000000100)=""/256, 0x100) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x21780, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m46.744393867s ago: executing program 0 (id=59): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x10000000}) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x4, 0x42, 0x3, {0x77359400}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x29, 0x2, 0x0, 0x0, "c836d06c6facc539716fdab570197844505379cef4aa09d137803248045c24388a33ebcdd8d8b5ac4e315117eb02444155ae31154009518defc10eee8c2b4a43"}}, 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0xa93dc2489268027) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000180)={0x0, 0x7, 0x4, "451db7d3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m42.431384905s ago: executing program 0 (id=64): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000080)=0x114c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0xdecb0e7b592b9954) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) listen(r7, 0x49) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 5m39.89839118s ago: executing program 0 (id=65): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="3196", 0x2) sendmsg$AUDIT_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x7fff, 0x3, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8a92ebd8366efbafc0cb003ee66b9800000c00f326635001000000f300f0fb10100a42e0f708268fa48baf80c66b8d8fb638f66efbafc0c66ed0f01c566b88bb100000f23d80f21f86635000000600f23f866b93f0b000066b80000008066ba000000000f30b8ff0f8ee0baf80c66b84432308766efbafc0c66b80000000066ef", 0x85}], 0x1, 0x11, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x4004084) 5m24.558094599s ago: executing program 32 (id=65): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="3196", 0x2) sendmsg$AUDIT_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x7fff, 0x3, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8a92ebd8366efbafc0cb003ee66b9800000c00f326635001000000f300f0fb10100a42e0f708268fa48baf80c66b8d8fb638f66efbafc0c66ed0f01c566b88bb100000f23d80f21f86635000000600f23f866b93f0b000066b80000008066ba000000000f30b8ff0f8ee0baf80c66b84432308766efbafc0c66b80000000066ef", 0x85}], 0x1, 0x11, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x4004084) 4m59.860340942s ago: executing program 4 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x48200, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r4, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff3, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)={0x0, 0x42, 0x14}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800010000000080fbdbdf250a808000000000000000000008001f"], 0x2c}}, 0x20000050) 4m58.140367203s ago: executing program 4 (id=108): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000080)=0x114c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0xdecb0e7b592b9954) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) listen(r7, 0x49) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 4m55.642317866s ago: executing program 4 (id=111): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m51.691076102s ago: executing program 4 (id=115): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1}) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0xffffffff, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xff, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r9, 0xa1}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929f5277a", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) 4m50.581057968s ago: executing program 2 (id=116): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1}) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0xffffffff, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xff, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r9 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r9) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r10, 0xa1}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929f5277a", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) 4m46.639720716s ago: executing program 2 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04", 0xfffffffffffffff1) syz_usb_connect(0x0, 0x47, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="350033008000e100ffffffffffff08021100000050505050505000000000000000000000234bdb7677c0"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x2004000}, 0x90) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="897a20ccf6041d6d", 0xffd8}], 0x1, 0x0, 0x0, 0x900}, 0x60) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r8, 0x3, {0x0, 0x1}}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20040041}, 0x2000004) close(r1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f0000000080)=0x2, 0x1, 0x1, &(0x7f00000003c0)={r9, r10+10000000}, &(0x7f0000000480), 0x2) syz_usbip_server_init(0x7) syz_emit_ethernet(0x26, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046600018000000004093907800000004ac1414bb8303090014ed054ef2799a86d2d1508225e2a4156cc2f596cd04f18541662e67888250"], 0x0) r11 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r11, 0xffffffffffffffff, &(0x7f0000002080)=0x264, 0x23b) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) 4m46.130291473s ago: executing program 4 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0xfffffffe, 0x0, 0x0, 0x5, 0x1, 0x8000}]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x47, 0x3, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002bc0)={0x28, 0xfffffffffffffffe, 0x0, {{0x4, 0x6}}}, 0x28) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes']) syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 4m42.931207128s ago: executing program 2 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0xfffe}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x28000052) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m42.712699093s ago: executing program 4 (id=122): syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x200000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x4000}, {r1, 0xa110}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4004743b, &(0x7f0000001200)) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') capget(&(0x7f0000000140)={0x19980330, r2}, &(0x7f0000000180)={0x0, 0x1, 0x8, 0xfff, 0x0, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) fchdir(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x6, 0x9, 0x40, 0x0, 0x7, 0x9, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000280)={0xb6, 0x0, 0x219}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0x9) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000010000000a5"]) 4m41.295468842s ago: executing program 2 (id=123): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x20006884}, 0x40800) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x2, 0xe, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0xb, 0x9, 0x250, 0x0, "b4577c86270919d9ab350e1343eb84659de8d3b230d74f92c868b2d4269a49f6d79668c1873456320d11f92f2f5e6eb9675658ceb36113a316d324fddb375432a2a6ff2ee38aac478d47"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x90}}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$can_bcm(0x1d, 0x2, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x525042, 0x0) r3 = syz_clone(0x80202000, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "07ec685224472d3ce62614a517a532cfa6faa7f4f33fb9fdc06c584b134c2a90b2a009126445277df563f444ba32540429912475d90df0e9844f65bf11763185", 0x2a}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x9a9c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x9, 0xca, &(0x7f0000000780)=""/202, 0x41100, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x90a}, 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4m38.591481701s ago: executing program 2 (id=128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m34.666213594s ago: executing program 2 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04", 0xfffffffffffffff1) syz_usb_connect(0x0, 0x47, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="350033008000e100ffffffffffff08021100000050505050505000000000000000000000234bdb7677c0"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x2004000}, 0x90) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="897a20ccf6041d6d", 0xffd8}], 0x1, 0x0, 0x0, 0x900}, 0x60) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r8, 0x3, {0x0, 0x1}}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20040041}, 0x2000004) close(r1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f0000000080)=0x2, 0x1, 0x1, &(0x7f00000003c0)={r9, r10+10000000}, &(0x7f0000000480), 0x2) syz_usbip_server_init(0x7) syz_emit_ethernet(0x26, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046600018000000004093907800000004ac1414bb8303090014ed054ef2799a86d2d1508225e2a4156cc2f596cd04f18541662e67888250"], 0x0) r11 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r11, 0xffffffffffffffff, &(0x7f0000002080)=0x264, 0x23b) r12 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 4m27.230086101s ago: executing program 33 (id=122): syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x200000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x4000}, {r1, 0xa110}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4004743b, &(0x7f0000001200)) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') capget(&(0x7f0000000140)={0x19980330, r2}, &(0x7f0000000180)={0x0, 0x1, 0x8, 0xfff, 0x0, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) fchdir(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x6, 0x9, 0x40, 0x0, 0x7, 0x9, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000280)={0xb6, 0x0, 0x219}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0x9) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000010000000a5"]) 4m19.023466175s ago: executing program 34 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04", 0xfffffffffffffff1) syz_usb_connect(0x0, 0x47, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="350033008000e100ffffffffffff08021100000050505050505000000000000000000000234bdb7677c0"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x2004000}, 0x90) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="897a20ccf6041d6d", 0xffd8}], 0x1, 0x0, 0x0, 0x900}, 0x60) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r8, 0x3, {0x0, 0x1}}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20040041}, 0x2000004) close(r1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f0000000080)=0x2, 0x1, 0x1, &(0x7f00000003c0)={r9, r10+10000000}, &(0x7f0000000480), 0x2) syz_usbip_server_init(0x7) syz_emit_ethernet(0x26, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046600018000000004093907800000004ac1414bb8303090014ed054ef2799a86d2d1508225e2a4156cc2f596cd04f18541662e67888250"], 0x0) r11 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r11, 0xffffffffffffffff, &(0x7f0000002080)=0x264, 0x23b) r12 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 7.261473631s ago: executing program 3 (id=475): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x203, 0x33ba8, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0xffff, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) 7.06682408s ago: executing program 3 (id=476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.757385297s ago: executing program 3 (id=477): syz_ublk_setup_io_uring(0x33ea, &(0x7f0000000080)={0x0, 0xf812, 0x801, 0x1, 0x3ba}, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000180)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x2020) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f00000014c0)={&(0x7f00000004c0)=[0x7, 0x3, 0x5, 0x1, 0x7, 0x5323, 0x6, 0xde5, 0x5eb, 0x0, 0x6, 0x1, 0x5, 0xffffffc0, 0x6, 0xf, 0x139, 0x0, 0xfffff801, 0x6, 0x8, 0x4, 0xd, 0x2, 0x8, 0x9, 0x4, 0x68, 0x0, 0x7048, 0xd60, 0x90f, 0x3, 0x86, 0x80000001, 0x7ff, 0x4, 0x5, 0x8, 0x9, 0xb00, 0x4, 0xa67, 0x5, 0x7, 0x8000, 0x2, 0x5, 0x5, 0xcdac, 0xf, 0x7fffffff, 0x7, 0x40, 0x4, 0x2, 0x9, 0x1, 0x651222f7, 0xf2, 0x3, 0x800, 0x2, 0x80, 0x8, 0xfffeffff, 0x4, 0x80000000, 0x3, 0x4, 0x8dd, 0x5, 0x6, 0x5, 0x6, 0x0, 0x400, 0x0, 0x1, 0x6, 0x8, 0x3, 0x3, 0x40, 0x80000001, 0xaa12, 0x7ff, 0x13f, 0xd, 0x3, 0x81, 0x900, 0x2, 0x4, 0xe, 0x14dd, 0x10001, 0x10, 0x7, 0x6c, 0x2, 0x81, 0x0, 0x9, 0x3, 0x81, 0x40, 0x8, 0x0, 0x10000, 0x2, 0x8, 0x8, 0x2, 0x80, 0x8, 0x3, 0x7, 0x0, 0xce0000, 0xd83, 0xb000, 0x7, 0xfffffff6, 0x0, 0x1, 0x70000, 0x8001, 0x2a9, 0x9fc2, 0x10, 0x9, 0x8, 0x473, 0x5, 0x2, 0xffff, 0xce, 0x7fffffff, 0x7, 0x477, 0xbb, 0x8, 0x4fc, 0xb424, 0x3, 0x6, 0x5, 0x1000, 0x2, 0x8, 0x0, 0x1, 0x8, 0x9, 0x1, 0x4, 0x0, 0x80000000, 0x400, 0x5b, 0x9, 0x4, 0x7f, 0x4, 0x16, 0x6, 0x1ff, 0x9, 0x7fff, 0x9, 0x70f1, 0x7, 0x8001, 0x800, 0x401, 0x2, 0x4, 0xfff, 0xbbb4, 0xe128, 0x3, 0x4, 0x5, 0xdd32, 0x9, 0x1, 0xf224, 0x1, 0x3, 0x3, 0xba, 0x8d4d, 0x9, 0x3d024228, 0xfffffff8, 0x6, 0x0, 0x9, 0x4e5, 0x40, 0x3, 0x7, 0x9, 0xffff0222, 0xfffffff4, 0x7fffffff, 0x6, 0x8, 0x1, 0x15a, 0xe91d, 0x3ff, 0x4, 0x400, 0x3, 0x2, 0xf, 0x8, 0x0, 0x2, 0x9, 0x8000, 0x8, 0x15, 0x9, 0x5, 0x7fff, 0x7, 0x1, 0x9, 0x800, 0x12b3, 0x2, 0x4ffa328b, 0x5b3f, 0x1, 0x0, 0x7fffffff, 0xf, 0xb, 0x4, 0x64c, 0x2, 0x7254, 0x101, 0x0, 0x800, 0xffff7a0e, 0x15f16288, 0x6, 0x1ff, 0x4, 0x5, 0x1ff, 0xfffffff7, 0x1006, 0x6, 0x3210, 0x3, 0x3, 0x2, 0x8001, 0xfff, 0xffffd5b4, 0x7ff, 0x1ff, 0x8000, 0x1, 0x10001, 0x8, 0x7e, 0x4, 0x7, 0x0, 0x6, 0x4, 0x1b5, 0x81, 0xffffc88c, 0x0, 0x0, 0x3, 0x9, 0x6, 0x4, 0xd4, 0x6, 0x0, 0x1, 0x81, 0x6, 0x800, 0x5, 0x0, 0xa1b, 0x4, 0x100, 0x8, 0xfff, 0x2, 0x5758, 0x2358, 0xb00, 0xd, 0x2, 0x2, 0x20000000, 0x9, 0x8, 0x6, 0x18d2, 0x8, 0x80000001, 0x905a, 0x2, 0x7, 0x3, 0x5, 0xb2, 0x4, 0x0, 0xea5b49a, 0xd62f, 0xfff, 0x0, 0x5, 0x9, 0x7, 0xff, 0x8, 0x4, 0x1, 0x2388, 0x8001, 0x4, 0x1d, 0x8, 0xf54, 0x22, 0x7, 0x0, 0x8, 0x8000, 0x8, 0xe5, 0x17e, 0x1000, 0x7, 0x8, 0x9, 0x5, 0x5, 0x7, 0x8, 0x4410, 0x3c, 0x7, 0xeb, 0x1, 0x3, 0xffffff4b, 0x10, 0xc, 0x7, 0x4, 0x640e, 0x7, 0xc2, 0x6a31075a, 0x7, 0xd51, 0x9, 0x0, 0xfffffb02, 0x0, 0x6, 0x7, 0x41, 0x1000, 0xc, 0xf, 0xb43, 0x100, 0x3, 0x4, 0x9, 0x2, 0x8, 0x0, 0x4, 0x40, 0x9, 0x2c, 0x9, 0x9, 0xd19, 0x9, 0xfdf, 0x1, 0x4, 0x200, 0x8, 0x401, 0x7, 0x3, 0x5b, 0x9000000, 0x4, 0x6, 0x80, 0xffff, 0x7e6, 0x10, 0x2, 0x6, 0x7, 0x80, 0xfffffff9, 0x7, 0x5, 0xfea2, 0xfffffffa, 0xfffffffb, 0x100, 0x401, 0x2, 0x3, 0x1000, 0x80000000, 0x9, 0x67, 0x7, 0x9, 0xea8, 0x16000, 0x800, 0x5, 0x3, 0x548, 0x80000001, 0x8, 0x1e4, 0x6, 0x6, 0x1, 0x6, 0x7, 0x4, 0x81, 0x81, 0xffffffed, 0x8000, 0xe2b, 0x0, 0x9, 0x2, 0xf42d, 0x3, 0xe, 0xb865, 0x2, 0x4, 0x0, 0x7, 0x9, 0x3, 0xff, 0xffffffff, 0xf1b4, 0xb1, 0x2, 0x10, 0x2, 0xb3, 0x100ec01, 0x1ff, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0xffffff7f, 0x7fff, 0x186, 0xc4, 0x7, 0x1, 0x8, 0x2, 0xb4, 0x1, 0x0, 0x5, 0x3, 0x0, 0x5cfa, 0x7, 0x18, 0x4b, 0x4709, 0x1ff, 0x0, 0x8, 0xffffffff, 0x3f, 0x7ec9, 0x9, 0xd2, 0x1, 0x6, 0xca3, 0x74, 0x2, 0x6, 0x9, 0x5, 0x6, 0x3f3c, 0x3, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x7f, 0x9, 0x9, 0x8, 0x4, 0x2, 0x4, 0x7, 0x95, 0x3, 0x2, 0x0, 0x401, 0x401, 0x7, 0x92fd, 0x4, 0x60c, 0x5, 0x0, 0x92, 0x5, 0x0, 0x1, 0xed0b, 0x6, 0x5, 0x5, 0x101, 0x7fffffff, 0x3b, 0x666a, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0xfffffffd, 0x8282, 0x8, 0x2, 0x8000, 0x7, 0x80000000, 0x10001, 0x8001, 0xffff3416, 0x3, 0x8001, 0xd1, 0x8, 0x7, 0x3, 0x5a, 0x400, 0xff, 0x5, 0x400, 0x0, 0xe, 0xa00000, 0x4, 0xd9b, 0x7, 0x3, 0xfffffa3f, 0x3, 0x3, 0x2, 0x5, 0x4, 0xa, 0x15c, 0x1, 0x1, 0x401, 0x7, 0x3, 0x3, 0xf4700000, 0x3, 0x2, 0xe8, 0x5, 0xda8, 0x5, 0x9, 0x6, 0xb, 0x8, 0x9, 0x4, 0x101, 0x89, 0x2, 0x83, 0x0, 0x141, 0x0, 0xfd8, 0x3, 0xffffffff, 0x3, 0x0, 0x6, 0x0, 0x2, 0x675, 0x3cee8f1e, 0x80, 0x6, 0xc30, 0x0, 0x3, 0x6, 0x9, 0x2, 0x9, 0x5, 0xffff, 0x1cd, 0x800, 0x4, 0x8, 0x1, 0x3, 0x5, 0x6, 0x3, 0x4, 0xff, 0x2, 0x9, 0x9, 0xa9, 0x7, 0x88, 0xffffffff, 0x7, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0x9f7, 0x9, 0xffffffff, 0x1ff, 0x32e, 0x81, 0x0, 0x9, 0x80000000, 0x9, 0x40, 0x5, 0x4, 0xfffeffff, 0x6, 0x5, 0x1, 0x3, 0x101, 0xb54, 0x4, 0x0, 0x5f, 0x0, 0x5, 0x5, 0xb0c8, 0xcff, 0x6a, 0x0, 0x3a, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8, 0xd29, 0xfffff103, 0x7, 0x3, 0x6, 0x0, 0x7ff, 0x4, 0x1621, 0x3, 0x2, 0x3, 0xffff, 0x1, 0x8, 0x53a3079, 0x0, 0x7, 0x6, 0x4, 0x8, 0x2, 0x5, 0x48225044, 0x6, 0x6, 0x3, 0x0, 0xb6, 0x9a, 0x10, 0x5, 0x10, 0x4, 0x7ff, 0x9, 0x1, 0x9, 0x6, 0x8, 0x1, 0x3, 0x7, 0x1ff, 0x7c21, 0x2, 0x2, 0x8, 0x6, 0x5, 0x2, 0x1, 0x200, 0x71ac4689, 0xdd, 0xff, 0x7, 0x3, 0x3, 0x4, 0x5, 0xc1e6, 0x4, 0x1, 0xfffffeff, 0x4, 0x8, 0xffffffff, 0x80, 0x0, 0xc, 0x5, 0x81, 0x7, 0x3d9d, 0x4, 0xfe68, 0x261, 0x80, 0x7, 0xd, 0x401, 0x411, 0x3ff, 0xe, 0x4, 0xfffff001, 0x0, 0xfffffff8, 0x8, 0x9, 0x0, 0x1, 0x4, 0x1000, 0x1, 0x1a, 0x5c143a52, 0x10001, 0x7ff, 0x5, 0x2, 0x6, 0x3ff, 0x2, 0x2ad, 0x5, 0x2, 0x3b8, 0x1, 0x0, 0x2, 0x2, 0x40, 0x8, 0xf, 0x948, 0x7, 0x6, 0xc306, 0x1, 0xfffff801, 0xffffff5e, 0x7f, 0x1ff, 0x3, 0x7, 0x9c0d, 0x7f9, 0xfffffffc, 0x9, 0x4, 0xffffffff, 0xfffffff7, 0x7d, 0x8, 0x6, 0x3, 0xfb7, 0xff, 0x5, 0x81, 0x5, 0x6, 0x7869, 0x10001, 0xc, 0xc79, 0xe, 0x6, 0x8000, 0x46, 0x1e5b, 0x400, 0x99, 0x7, 0x7, 0x0, 0x5, 0x3, 0x5, 0x8001, 0xffffffff, 0x2, 0x3, 0x4, 0x9, 0x8001, 0x401, 0x4, 0xb2, 0x5, 0x1, 0x4, 0x1, 0x161, 0x2, 0xef18, 0x2, 0x9, 0x7721, 0x8, 0x5, 0x378, 0xc0000000, 0xff, 0x9, 0x7, 0x3, 0xfffffff9, 0x2, 0x4, 0x1, 0xe879, 0x4, 0x0, 0x6, 0x33d7478f, 0x5e, 0x5, 0x0, 0x101, 0xc9, 0x6, 0x3, 0x0, 0x5, 0x1, 0x5, 0x5, 0x7, 0x401000, 0xee03, 0x7, 0xb33, 0x0, 0xfffeffff, 0x3, 0x8, 0x8, 0x0, 0x7, 0x7142, 0xbea7, 0xfff, 0x9, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x52b, 0x6, 0x6, 0x8, 0x30, 0xffffffff, 0x473, 0x1, 0x80000003, 0x9, 0x2, 0xf5b8, 0x7, 0x77a, 0x0, 0x1, 0x3, 0xdfe9, 0x6, 0x8, 0x0, 0x5, 0x10001, 0x0, 0xf68, 0xfffffff0, 0x3, 0x9, 0x3c, 0x1, 0xe, 0x4, 0x400, 0x5, 0x7fff, 0x8, 0xc06, 0x28, 0xffff, 0x0, 0xd1bb, 0x4, 0x2, 0x9, 0x100, 0x0, 0xfffffffa, 0x5, 0x66, 0x7, 0xe6a6, 0x5, 0x4, 0x4, 0xf30c, 0x5, 0x3, 0x3, 0x7, 0x2, 0x1, 0x6, 0x9, 0x8, 0x1, 0x1, 0x81, 0x4, 0x5, 0x4c, 0x2, 0x3, 0x401, 0x6, 0x0, 0x9fe, 0xb31, 0xfffffffc, 0x3, 0xe, 0x0, 0x0, 0x5, 0xffffffff, 0x8], 0x2, 0x400, 0x3}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0xb0f1, 0x80, 0x1, 0x2fb}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7956, 0x10, 0x1, 0x1fc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdcec, 0x400, 0x1, 0x177}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d12, 0x1, 0x3, 0x16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3274, 0x1, 0x0, 0x2a9}}], 0x4, &(0x7f00000018c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff3}, 0x0, 0x0, '\x00', {0x1, 0x287, 0x0, &(0x7f00000008c0)=@buf_max_buf="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"}}, &(0x7f0000001940)) r8 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 5.783688648s ago: executing program 3 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000300)=""/248, &(0x7f0000000400)=0xf8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="130000001000020000000000000000000000000000000000e190557c87ac14be8066b673faa90d61251577bfbd6b79ae9536b503a7e992", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000f0ffffff7a0a00fe1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000000)={0x7, 0xab, 0x7, 0x8, 0x0, "6482b5a065ad4bbe6191c998b3f8a123dadf58", 0x7, 0xd}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 3.628694386s ago: executing program 1 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) eventfd2(0x4, 0x80000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, 0x0) r2 = io_uring_setup(0x168, &(0x7f0000000180)={0x0, 0xd9eb, 0x40, 0x8d79, 0x400015f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0xc1205531, &(0x7f0000002680)=""/4078) 2.00552967s ago: executing program 3 (id=481): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/205, 0xcd}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x2801410, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0xec, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_USERDATA={0xbd, 0xd, 0x1, 0x0, "ac1ef115e5fd3671ca6acfc483b3e61e9f3d09cfe84ce6fa4212a91dd59437b94c946f70f22b47bc609e2a2b26373cebe6ddc32b90d454ac4d4013162330f7892437949acfd7c1f6487c2875a6a58a567ba323a0047a1ab66c7769e71011d704b8134bb0360343402ec1a6c2567ee3e06298a87465489d02b095c94364c980af877097abbd01c448b2c923944d3fc30bd4217a48ee6fdb49e2cbb47931b88672eafa88400529939b49e124ffe10fbeadda835a1dfd16ca81fc"}]}, @NFT_MSG_NEWSETELEM={0x2710, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x118, 0x3, 0x0, 0x1, [{0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "5e6ffd122b2943c5e7f438c6136515b8db388e008a4ded630d0355e0eda747e10e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7b}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4a, 0x6, 0x1, 0x0, "bfe5354f24f70558d9b0575104edf892a6279186b043c8196d83c98cf6cc1d00f2797bd7cabc6b648cb32fecf7458fb40d000fbc91760b4c5562eb96baa619e9bbdfd9bba216"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x25ac, 0x3, 0x0, 0x1, [{0x25a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_KEY_END={0x249c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "d315d72dc587cbb2dd855b87af408e37ceecff53d8ccf451ff8ecc41a8e9854e8c1f5e91e9a0d1466f996135298f93e3177f64404f1563ccb4db466e01748a8c73544f0004870863a9b30ef870c7342edeb4f938b1832737d38bb153d43c39ab0fab957b24de748c0bcecc8f7dda86e4cf539be1244ea91ec3057111219b14fcdb126b08af74592c053b172651e84e49ffe5dec3eff038c82d26db3f4620fb5a4a5e5d6686b6a01802dffd8bef5c15ab562afaba05ac50ea8e0f98196358df3116c51e7a46154e1d441bee"}, @NFTA_DATA_VALUE={0xdf, 0x1, "eea650eb8dce7defebbb576db4495d4baabe5e50c74d191ed981da7b22deff45904d9581752bdb202c6b389707aa0a8d7d3875b937edbe129418590e4b4944341c9f727c0b3d0e898f4afa8ba9a421fd0e91a3a1f7dec51ed832c0ccda26799786752abd5be08b30dd4208b7ca360b9c3a9a2ff06a33713fb4e7e97019704df867db753852dbdc71597457e5eb8bf965cd288db3981a8ca7aa1d3e5a1e3e789503f2b0cca288831a46990a1b2829927c49758beeeb6f088ec0179d3b6460fcf013d87e6dc52c3565933ca1743e4c5c4d54c6cb6b36d2471041c55e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "b647fcb7d8a0da6834a76e1822a48c7ac7138c9c13a70dc66ddc15a6be51a58a5caf5968f32eb801bcd2e6b966d9da3062237769caa823a69252da726669f810a2b24dd7e947797a439d7ad866f5ccafadbea0c9f2fc008bf4640d1f22f52fd955c8935ec4da35b53f961acff010685e73024b19cdab648b3e3758129adcb91cc80c836ccf5ee58355fb5a9c8310bed8e1b1bcecd0e3950ac09bedb7e3067cd0f81d77b5d5220aa79f66c83828c30b953a5829e6c1b411c36574bfa64f517f0237c75b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "f21a48053d7a59c0182bcdfa5b32fd4185642188d1d793eb7682b7d1abb7a253b11fd1ee825643dee3e91da07125229bfb8989874206ed26a243d84db191adfd367d9f210037f2e1cb0a53c1d53c0362e8ced1b705f3ca339314029af4a2bc70cceb9a12fa7a96ca6d0b8efa4dd84845f61966720eab74d2dace74dd75d3ec0e077a9ef1875f60d8c19851f7a49a1b6bf47b7ea02618db77c8be2c9f9fb923289d1058c65f4d7835ad887b39c32268c70cfcd9c21ca6780c890457f9086c0a95778c7a05e3ec8bcb529852e2aaa4f7f2cef7c8482344082b76d3c0f36028548e840e343b79ac8d4946f0c50a7272cd1ac6c4ee8078dbc29f4db5d05cab75b2c9eb98fe0b4d566f572eea5eac31d19c4d6aadfc93eacf0da8174972767cd0c549f52355fd17a527952e4f73d2525c4b4616fea63b525675baaa96e60602e996e5a63c5ea58d32006e7090611f50179bfdd55c6a727273526cc1a0deed127997e4d44a8caf962168e9fe1a4c5d436ac70b320fe3a002713b4575af04efeca05524e9cf204aa848d9f552fb5bf95cb3561494abdb190a4a16a7d47971f2d20dcfc3d90d9d222da1e0ee0365d2d3ac6626ff3d44cfaa6be9aa278f157caaf2c4df3baec662b29c4c099b83f3ceff1daeff5d70e9f2e4fdf38f3d192a829a5b24e8956da75dbe15d2f2c7cc40c5bdf4ec1db89ba4312a6a520156dda5b4a03f28b2643495b5fee9d74ec5eb66827cc136b4e922fd32dbc4691f7cda9ab9bc91b42798a707300d52c2b0be65041a560c86916036ac065c7ae79e450de42596ddf9fbb10e4f266947e891cee390579a18c64f0aa54d8caf248f69c7c94cbc7424859e8e181e61a8edcc336a988e9b392010bb1c49f5d25d862a0cde6cb5ecf815e5bd792b04fd66f746501e2f935076150e3b50ae73576250956f7b392a490c8a09b08c9233ccdc50fc2ce2b1273a462fd56fb891abc4a216f8d573030600c77669d6f3ebd857c92401b417331e0fc9823a09d5541438705e111fe369f8d044d309bc06d70eda7a435ecb50d66b2226357790dc10eb4884d6f049bb85f8df65761714bac8f36a9077e388aedf59df77c2a8efbf600e58d1a561e3d8ca42608be9cccc2b769c0316c7503472152d7d646188a7f690704f53525aee279225f87b7f6014166f6be87f080831e436d2ee9809aa13c276fcd09f450a87df83b4ed0310ca903aa2a358d90694e797b127f8ed46c1d2083b15b24c77fa754ab40b051809e659b03f9ef2ea02aec03b2ee0873e54602bd477d13f50bc6d00fab4159a525fabf3e18d0c18e4955104e00c9a4a9924260786e9fda63f4fa369ed838f154dc0c6ba43031e5a5bc37ee2d38e4f6343313e750902cf79593a5f462ac7380dfc69d85ff3a5755ee1b9370671dfc5f22df7291e51b2b327e5c55a05a0c9475df433053a6ae9ae0e7526b6de4d2058cc8ccb9d1751ff979dd679210b17c35b03d13ba1e39d85c2c1f51eaefd67cc99427d39e8293c1469810109568e4e9c97c8d988491e159ded2f64254421ba6758e3ec679c18afbaa19553d2095e0f8aea722ec0bc0f47582bfbb97694d073450630af3ac5b4b238d57f1d422510c2326be48aa26d5a7a106c23040f28b9da4fce61119e9a47905d46fa6cd2a0f4cd1f5477643850123a239d3b87384e3be48b0cafb219afb5982e19bc3d74ff18cd2dc80e6f1ec3b51fa54ba5940c820e027c1ec8365d7be20439d67be185d05d4e887b487929efb7a10d0035709f8a7e75bd17ae230aa5280d66fcd8af7729b33f9c29d17d37a7b5b0857e8f78e2f13cb7c8048e8ccaa3bdcb15ae50246efc2ae154211f42f5a290032a5661c2d72e393e36d325860c457738b2be3320063d92665f9cdd1587f6ef004aefe3c45fd5a764b9bebefd5019262e00e57205546f00a7b346bd59047b57e1a325310c365ab73d686a6235d6b07b6f56b0fda01b5a6d9ab6a691197b06f02b4f3ceb466d779725f0b0cf46134963eaeb5fbf755ffd504b004749e171b3b0b6fb46c6027403852aa00eec800e4b128837f43c8191c02dbf98790fc07daaea583c87f2c2d15c97caf526b55431f1ccf13558971d8f81cdc20d8137d21cb72b22a22bc07e90450c8c2f10b99dda54c32e734d51f2dda085338b586a0ecefd87b5197fe06d007b09bfdae6c3f6a43e2e9fae2bbede1b4bdebf46dd514f5385e7c0ea700914a350d0b831b86451806bac92d2a3af9b221e58007644cf8f5e6b391cad109fed580daf712b51cad43ea647a1b372d4a91f657671ac17b3f1028a830fdc0f5b99bc33bd20ff7fd389f61ccd567940fbab2e42727a996c3b9ed7ba4e003217a51c4e18c13934f823cb02a4420594d03ef59dfbc534bdb889588f315e01d81ac4e5ba81b7b8a4e334b17e8a626b589099980cd3121015133cad3d1e936ab432adb315613473c5c9284985315d222ebba435e8e21eca35dab057c28b6cdc5d585ca646485c1c916f93d56d644789699d98921f84132ce0a674f2edec8fe7ccaed48940198410403a0b83bd8495b5cfd6bd546d18493687e856e1b9595ed4ea53bfca60294e5ade0f14aeca3589209666518fe5019f593379318d40380cb99307144f26a19416182467d9348778a01886bf16160b4d4b9afdcf017cf456cc2042eab69a5b1c3e753ba37d95c05698bd2d33c995e71511421fc2c82b871ff7acda03d3d96880a84ebef247e44ef200bf6637ab5ae07f21d6120dabc2f2a58df478959dcb44607ef27bb6d971b6605fe64a201955ba286aff613d382cd56b0590899dd0f3c3107b7a7848135db88ee91bb2d3c90d82fcea1957e3a350765cad5f190112ac80070f7a0520c3a12675573c1dcdbca396945c63db5004881d1a42cf30a00d96a5afb33acd27833d0075c7db0930664a6ed81d8950fb882ea7dcd23dc2998eb004e33e5d3d3d87d3864b932c81704e4b2eec5bdc15e13065f6582c4b57e5e2d5f28dce69ed170ce204677f07e4f9f1efabd41f6f823335d7bb3d9220f9f3c0921fca27325df47340ab9304f8de210602791b631cc68af7027c804008c742d719659f46c9a6704234d81af19b5c7625f23268f7ec1d4e51b31e6aa0105f5390b90952ab73a0e74b51099458ffc921b50341b60d95a66db963f5c63d6e42e4dd4d12db28ead2ea3454fa2ce5468c35cc12653eaae7b6171fceacb9c001c0ce21e1cfbb30e23d23e648927bf17e9d0f9f0d72b4c4c7035db0f500274d720002873d5b4e3840988cce8feb8973d368c9ace0a9b6c5c6777a64a1d06b2afa89bc45c77ee19ee7b29a81b98bca0b8de1f78170cfce18190d9400123f62a9eb8828b697a84a7dcb6feb4f94ad7fc1c9e3ea0466e81e6e75dddf05f872eb332edc6e3a0a74bc155a7a06f0b96d710c68dd4e60d9db565210883faecc9e7f7d58b8a8822f50d4f9723075552d8c9c17a65a5628d8b9bed3c0fb34b17b4091adf9afac9cc78749801c53f782d92bbe8326d076699b0654eda842a1643fa8d6b49be97fbc111f802b4839230279b98e836ba20b79c462241d48ac9a16bb74f2d9bf4a600f34930e8c69dafefb6dc0ac7827396c290161f09143efe8e5d8ed1f706a143bdae46ef1a73f7ddccf6655600e98921a574166c64d9a7dd0b9a4fbf119fc7039bc6ff124313d0e8ad81c2fba86dccd52cac7c468fbf5ca56eaf716382a258ef3a40278de481e39d1352688979ec6b845cc4d2c05ae581c74746caff04ef16af080aa169b583b9c611d056e39c73d5e42b8a9e291466556023498963faecf016cff65bc1ab38f4e0f13341831abffc907f4b01bacb00f5461db4b85b8e76f8b3c2b1a668728c1d70716b5e2c09992f2a09b489ba7b8034f89cf3e16bede7c1a900889662d874b9cb5e10fd3adce93bcf082352c839cf2d330267efafa964bae7925df64a8eec3b8efcfeed5658d36367052419d8afaaab72cb119d861bdd77ac92532540c64322a3b3aef6c461e3a8cc93f1c9a7b864ead3740c42c92ce507d6f676a1d8eb01f84b125b3d1e038a6313d4b22ae9b0ce7542e5884d6f0bb47abee349a83f54b3819b09f7d7307b6c7342e0116b73da64b7ceac6364ed6099fc84082279b644546e4ea035ff522c3b7ba16d12960db62cfb60103ed71993350faa409378a8178f8ffd7bbbf62a2cc90c683ddce33d533c1244e225396c11d3428809e9dfb99771ffaa4f688cb4782cb5990a31438d4fd05a1dc0088a116ef75002dab1004b00133093f433caf2327bbca7b6ae4e0b83d0f8b4b82808f5105873c3e1fd20925f6cd68285db31b12a1f1a2d652de9e3769e9f7696a0f80825e3ce2d337da8b1ea64ea23a05ddd85b888e4de4642c8741b5a6d48e7be2c521e208b948da5e9cc6c4c071afb0f952b0fe715cf733c98e3ad65cba9b6c99a6aaa082064071de303a05e7e5509b19314f18f5b4d4f0958a15383b21fe898c9ce471ca030f1270085f7d24284c511c965c6f9cb92082e8ede8fec2179e8fff510f1f34f07785c24e9218715a8e1e33a8f87600a3c46bcda08677434feacfd1f88cc75b846b8655ad7bf36d935a75aaea3587d679f4cdcaa2aaf193946e10a6791a39ecbcd93bb9af91109a67bfe26fc268534db7b9d68ea24b1658353ed8da7b5ef22927c9e026fe94488c1f9e7f9ab13a50cf8e31ef3b7eb9344b2f4373e36b03812d2ecdf1b866c6f941f00e1f4cd01a1451dd7d1bd2814421f6d871781c9bb6d7a31f566dcb590e8c525cb59d4f8f94b59ef83c7d06e239b898f1982eaaf4e9fcaceb81d697727cfe8f4b898a42ff33e0d6f359820e692be5bc139769737bee2692beda0744a1ee4762765bedf6d3bb1efd93422bacec8fad2a5b68107eaf65adec0b208b9f779d0883743d5160df8ab551713c99345d5b796d9fb312f423633f22efd75eefc2ebbe90f4ee6742d9ae54fb8986823e9354c76f585a90c380f4d45016fc1b682fe7f1d67e97ce06c93cd1f4028d039c941261c69b6aac5408f5b94df2c1f0610f1b44162ff1fd3a7c48eeb9ac049814fb32556cda41f2155ccf6f784f2cceead5f6d92fef25cc3f2aeecfdabdd1e2298d63cc9b1df197c062bf8f157e888e208383772b361bad283fc272a21e893a4d83971e189dde362ca0951bf1dd180e872cd80720c04f4b49bc95db9e823d5f75cfdb66f6f9b6990ac45e6fc2aa2a330d2d107a87f7197442ce037d747623068e8656951bf0f23db317b5c4d8466ea1c872b14f1fda0c62632fadd609e33fea19da4efac21fe1d7f80a800dbc91e31bca6f63425fbd3bcc44433c59f3f7df6ce904fb26e08f7d7b03264b78570a9bf68a9d1079f0bbaa762620ef908e7199e509512eaa08740d972016e971c26b8850522ead83bb54b99d554c7ef65d125d8f91e7865e9300fec3f5c743a37224335a4690eea0e8c64fecdd4be4a5e96d1cf67094c6896e9d00cc455963da8bb4f98b91bb9dfd335a00605929b60d46ce5417306c9adbac690ef5298632eb9a6bffaf39e1cc243eb61c79e867f064a923cd548d40612336643433b74c3ec2096c74f6c63bc91c560418026924d9af4d40c6fdb4514e0652f970350ff9a6a69ccbe4ee609d13a8f1d18e41cd48cd54bd14c37483022b4941b808b7564d2b59c28abad75c96d8dd464ca923d72beb57001514f284f5542056f627ae47326ace17cefe240ed84c5d9d3b7d734ebf45490c9a3648e2194b3bd458cc28268ccddc9caffc395ca75ab11e46c66e76aacc3ae2ff04bcaeaea81a236e67aec1b88ba0"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x158, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "ca92d654028e11159d8c1d7ef3edc3656a0bc4cd28d7b9533c5ca0e6453f175d97519dadaa44b009615d10b414e710ccfa4ba39a0c20ff4e6c857db95dbfd7cfcd624cf00c882e132776cdc180a7cd7966e05922273c"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2824}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat(r1, &(0x7f00000002c0)='./proc\x00', 0x880cc2, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8044) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = accept4$inet6(r8, 0x0, &(0x7f0000000180), 0x80800) sendto$inet6(r9, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast2, 0x40}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 1.860314201s ago: executing program 1 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x13}, [@generic={0x91, 0x1, 0x1, 0x63}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) write(r0, &(0x7f0000000000)='7', 0x1) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000200)={0x0, 0x100000001, 0x5, 0x4000000000003, 0x4, 0x10, 0x0, 0x9}, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 1.70439605s ago: executing program 1 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd37caee30804ec6"], 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000000400)=0x4, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="63000000020601030000000000000000050000002400078008000840000000521800018014000240fe8000000000000000d23cb8ae6718605e40020073797a3100000000050004000000000005000500e86173683a6e54742c69666163650000"], 0x70}}, 0x4080) write(0xffffffffffffffff, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x203, 0x33ba8, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0xffff, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000bc0)={0x0, &(0x7f0000000780)=[@nested_load_syzos={0x136, 0x120, {0x3, 0x4, [@nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x72b6}}, @wrmsr={0x65, 0x20, {0x31a, 0x8000}}, @nested_vmresume={0x130, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x7cfd, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0xfffffffe, 0x1}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb1, 0x3, 0x5dcc, 0x2}}, @wr_drn={0x68, 0x20, {0x4, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x6dd5}}, @code={0xa, 0x51, {"48b806000000000000000f23c80f21f8350c0090000f23f8f2a60f0137640f01c466660fc773000f00d1f3440fe660c366b886000f00d867430f07c422a14528"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @code={0xa, 0x40, {"c4e1f9f7c6c4e1c1e03e0f20d835080000000f22d866ba6100b0e6ee410fc73bdb077500460f923f430f65d9460f30"}}, @code={0xa, 0x66, {"3e0f07c7442400bdd40000c74424029012c9b1c7442406000000000f011c24b805000000b9df0000000f01c1430f01cb66bad00466ed66baf80cb86fd48286ef66bafc0cec460f01c4c4a211cf31d916c481915dc0"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0xfffffffffffffffb, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x2c, 0x100000001, 0x200, 0xffffffffffff2d0b}}, @nested_load_code={0x12e, 0x7d, {0x0, "c7442400f5000000c744240235000000ff2c2466430f1bf76436660f73db0066430f38813bb8010000000f01c1c744240008000000c744240296000000c7442406000000000f011c24c4a219b95a0065660f3882947e0500000047dbe30f38f9950c000000"}}, @wrmsr={0x65, 0x20, {0xaf3, 0x8}}, @cpuid={0x64, 0x18, {0x1, 0x200000}}], 0x3f4}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000c00)={{0xdddd1000, 0x50000, 0xa164322afdb1c09e, 0x6, 0xb, 0x4, 0x6, 0x40, 0x2, 0x9, 0xe, 0x4}, {0xd000, 0x200000, 0xa, 0x41, 0x6, 0x5, 0x4, 0xfe, 0x3, 0x6, 0x3, 0x2}, {0xeeeecff9, 0xffc, 0x0, 0xfe, 0x8e, 0xb3, 0xe4, 0xc, 0x1, 0x8, 0x8, 0x1}, {0x1ff8, 0x5000, 0xd, 0x1, 0x7, 0x8, 0x8, 0x4, 0x65, 0x2, 0x1, 0x8}, {0x30000, 0x58000, 0x3, 0x9, 0xff, 0x6, 0x80, 0x8, 0x8, 0x7, 0x7, 0x1}, {0xffff1000, 0x2000, 0x3, 0x3, 0x7, 0x10, 0x8, 0x1, 0x7, 0x9, 0xb, 0x9}, {0xeeeed000, 0x2ffc, 0xf, 0x8, 0x4, 0x7, 0x8, 0x8, 0xca, 0x5, 0x3, 0x9}, {0xdddd1000, 0xeeeea004, 0x4, 0x8, 0xf9, 0x7b, 0x21, 0xd1, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x8f34}, {0xa000, 0xd6bd}, 0x10000, 0x0, 0x40000, 0x0, 0xa, 0x1400, 0xffffffff, [0xb, 0xa, 0x8, 0xfffffffffffffff7]}) 766.660828ms ago: executing program 1 (id=484): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 609.250886ms ago: executing program 1 (id=485): r0 = socket(0x28, 0x801, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xcbca, 0x200, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) socket$inet6(0xa, 0x2, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa14c31ed56ad59300", 0x23}, 0x48, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="28d4f6ae107b9254004008", @ANYRES16=0x0, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd6000fbdbdf25720000000c009900040000003b000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4004040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080)={0x300}, 0x8) request_key(0x0, &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) keyctl$clear(0x7, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f00000006c0)) socket$inet6(0xa, 0x80000, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x4, 0x2, 0xc}]}, 0x10) 219.212863ms ago: executing program 1 (id=486): syz_ublk_setup_io_uring(0x33ea, &(0x7f0000000080)={0x0, 0xf812, 0x801, 0x1, 0x3ba}, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000180)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x2020) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f00000014c0)={&(0x7f00000004c0)=[0x7, 0x3, 0x5, 0x1, 0x7, 0x5323, 0x6, 0xde5, 0x5eb, 0x0, 0x6, 0x1, 0x5, 0xffffffc0, 0x6, 0xf, 0x139, 0x0, 0xfffff801, 0x6, 0x8, 0x4, 0xd, 0x2, 0x8, 0x9, 0x4, 0x68, 0x0, 0x7048, 0xd60, 0x90f, 0x3, 0x86, 0x80000001, 0x7ff, 0x4, 0x5, 0x8, 0x9, 0xb00, 0x4, 0xa67, 0x5, 0x7, 0x8000, 0x2, 0x5, 0x5, 0xcdac, 0xf, 0x7fffffff, 0x7, 0x40, 0x4, 0x2, 0x9, 0x1, 0x651222f7, 0xf2, 0x3, 0x800, 0x2, 0x80, 0x8, 0xfffeffff, 0x4, 0x80000000, 0x3, 0x4, 0x8dd, 0x5, 0x6, 0x5, 0x6, 0x0, 0x400, 0x0, 0x1, 0x6, 0x8, 0x3, 0x3, 0x40, 0x80000001, 0xaa12, 0x7ff, 0x13f, 0xd, 0x3, 0x81, 0x900, 0x2, 0x4, 0xe, 0x14dd, 0x10001, 0x10, 0x7, 0x6c, 0x2, 0x81, 0x0, 0x9, 0x3, 0x81, 0x40, 0x8, 0x0, 0x10000, 0x2, 0x8, 0x8, 0x2, 0x80, 0x8, 0x3, 0x7, 0x0, 0xce0000, 0xd83, 0xb000, 0x7, 0xfffffff6, 0x0, 0x1, 0x70000, 0x8001, 0x2a9, 0x9fc2, 0x10, 0x9, 0x8, 0x473, 0x5, 0x2, 0xffff, 0xce, 0x7fffffff, 0x7, 0x477, 0xbb, 0x8, 0x4fc, 0xb424, 0x3, 0x6, 0x5, 0x1000, 0x2, 0x8, 0x0, 0x1, 0x8, 0x9, 0x1, 0x4, 0x0, 0x80000000, 0x400, 0x5b, 0x9, 0x4, 0x7f, 0x4, 0x16, 0x6, 0x1ff, 0x9, 0x7fff, 0x9, 0x70f1, 0x7, 0x8001, 0x800, 0x401, 0x2, 0x4, 0xfff, 0xbbb4, 0xe128, 0x3, 0x4, 0x5, 0xdd32, 0x9, 0x1, 0xf224, 0x1, 0x3, 0x3, 0xba, 0x8d4d, 0x9, 0x3d024228, 0xfffffff8, 0x6, 0x0, 0x9, 0x4e5, 0x40, 0x3, 0x7, 0x9, 0xffff0222, 0xfffffff4, 0x7fffffff, 0x6, 0x8, 0x1, 0x15a, 0xe91d, 0x3ff, 0x4, 0x400, 0x3, 0x2, 0xf, 0x8, 0x0, 0x2, 0x9, 0x8000, 0x8, 0x15, 0x9, 0x5, 0x7fff, 0x7, 0x1, 0x9, 0x800, 0x12b3, 0x2, 0x4ffa328b, 0x5b3f, 0x1, 0x0, 0x7fffffff, 0xf, 0xb, 0x4, 0x64c, 0x2, 0x7254, 0x101, 0x0, 0x800, 0xffff7a0e, 0x15f16288, 0x6, 0x1ff, 0x4, 0x5, 0x1ff, 0xfffffff7, 0x1006, 0x6, 0x3210, 0x3, 0x3, 0x2, 0x8001, 0xfff, 0xffffd5b4, 0x7ff, 0x1ff, 0x8000, 0x1, 0x10001, 0x8, 0x7e, 0x4, 0x7, 0x0, 0x6, 0x4, 0x1b5, 0x81, 0xffffc88c, 0x0, 0x0, 0x3, 0x9, 0x6, 0x4, 0xd4, 0x6, 0x0, 0x1, 0x81, 0x6, 0x800, 0x5, 0x0, 0xa1b, 0x4, 0x100, 0x8, 0xfff, 0x2, 0x5758, 0x2358, 0xb00, 0xd, 0x2, 0x2, 0x20000000, 0x9, 0x8, 0x6, 0x18d2, 0x8, 0x80000001, 0x905a, 0x2, 0x7, 0x3, 0x5, 0xb2, 0x4, 0x0, 0xea5b49a, 0xd62f, 0xfff, 0x0, 0x5, 0x9, 0x7, 0xff, 0x8, 0x4, 0x1, 0x2388, 0x8001, 0x4, 0x1d, 0x8, 0xf54, 0x22, 0x7, 0x0, 0x8, 0x8000, 0x8, 0xe5, 0x17e, 0x1000, 0x7, 0x8, 0x9, 0x5, 0x5, 0x7, 0x8, 0x4410, 0x3c, 0x7, 0xeb, 0x1, 0x3, 0xffffff4b, 0x10, 0xc, 0x7, 0x4, 0x640e, 0x7, 0xc2, 0x6a31075a, 0x7, 0xd51, 0x9, 0x0, 0xfffffb02, 0x0, 0x6, 0x7, 0x41, 0x1000, 0xc, 0xf, 0xb43, 0x100, 0x3, 0x4, 0x9, 0x2, 0x8, 0x0, 0x4, 0x40, 0x9, 0x2c, 0x9, 0x9, 0xd19, 0x9, 0xfdf, 0x1, 0x4, 0x200, 0x8, 0x401, 0x7, 0x3, 0x5b, 0x9000000, 0x4, 0x6, 0x80, 0xffff, 0x7e6, 0x10, 0x2, 0x6, 0x7, 0x80, 0xfffffff9, 0x7, 0x5, 0xfea2, 0xfffffffa, 0xfffffffb, 0x100, 0x401, 0x2, 0x3, 0x1000, 0x80000000, 0x9, 0x67, 0x7, 0x9, 0xea8, 0x16000, 0x800, 0x5, 0x3, 0x548, 0x80000001, 0x8, 0x1e4, 0x6, 0x6, 0x1, 0x6, 0x7, 0x4, 0x81, 0x81, 0xffffffed, 0x8000, 0xe2b, 0x0, 0x9, 0x2, 0xf42d, 0x3, 0xe, 0xb865, 0x2, 0x4, 0x0, 0x7, 0x9, 0x3, 0xff, 0xffffffff, 0xf1b4, 0xb1, 0x2, 0x10, 0x2, 0xb3, 0x100ec01, 0x1ff, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0xffffff7f, 0x7fff, 0x186, 0xc4, 0x7, 0x1, 0x8, 0x2, 0xb4, 0x1, 0x0, 0x5, 0x3, 0x0, 0x5cfa, 0x7, 0x18, 0x4b, 0x4709, 0x1ff, 0x0, 0x8, 0xffffffff, 0x3f, 0x7ec9, 0x9, 0xd2, 0x1, 0x6, 0xca3, 0x74, 0x2, 0x6, 0x9, 0x5, 0x6, 0x3f3c, 0x3, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x7f, 0x9, 0x9, 0x8, 0x4, 0x2, 0x4, 0x7, 0x95, 0x3, 0x2, 0x0, 0x401, 0x401, 0x7, 0x92fd, 0x4, 0x60c, 0x5, 0x0, 0x92, 0x5, 0x0, 0x1, 0xed0b, 0x6, 0x5, 0x5, 0x101, 0x7fffffff, 0x3b, 0x666a, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0xfffffffd, 0x8282, 0x8, 0x2, 0x8000, 0x7, 0x80000000, 0x10001, 0x8001, 0xffff3416, 0x3, 0x8001, 0xd1, 0x8, 0x7, 0x3, 0x5a, 0x400, 0xff, 0x5, 0x400, 0x0, 0xe, 0xa00000, 0x4, 0xd9b, 0x7, 0x3, 0xfffffa3f, 0x3, 0x3, 0x2, 0x5, 0x4, 0xa, 0x15c, 0x1, 0x1, 0x401, 0x7, 0x3, 0x3, 0xf4700000, 0x3, 0x2, 0xe8, 0x5, 0xda8, 0x5, 0x9, 0x6, 0xb, 0x8, 0x9, 0x4, 0x101, 0x89, 0x2, 0x83, 0x0, 0x141, 0x0, 0xfd8, 0x3, 0xffffffff, 0x3, 0x0, 0x6, 0x0, 0x2, 0x675, 0x3cee8f1e, 0x80, 0x6, 0xc30, 0x0, 0x3, 0x6, 0x9, 0x2, 0x9, 0x5, 0xffff, 0x1cd, 0x800, 0x4, 0x8, 0x1, 0x3, 0x5, 0x6, 0x3, 0x4, 0xff, 0x2, 0x9, 0x9, 0xa9, 0x7, 0x88, 0xffffffff, 0x7, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0x9f7, 0x9, 0xffffffff, 0x1ff, 0x32e, 0x81, 0x0, 0x9, 0x80000000, 0x9, 0x40, 0x5, 0x4, 0xfffeffff, 0x6, 0x5, 0x1, 0x3, 0x101, 0xb54, 0x4, 0x0, 0x5f, 0x0, 0x5, 0x5, 0xb0c8, 0xcff, 0x6a, 0x0, 0x3a, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8, 0xd29, 0xfffff103, 0x7, 0x3, 0x6, 0x0, 0x7ff, 0x4, 0x1621, 0x3, 0x2, 0x3, 0xffff, 0x1, 0x8, 0x53a3079, 0x0, 0x7, 0x6, 0x4, 0x8, 0x2, 0x5, 0x48225044, 0x6, 0x6, 0x3, 0x0, 0xb6, 0x9a, 0x10, 0x5, 0x10, 0x4, 0x7ff, 0x9, 0x1, 0x9, 0x6, 0x8, 0x1, 0x3, 0x7, 0x1ff, 0x7c21, 0x2, 0x2, 0x8, 0x6, 0x5, 0x2, 0x1, 0x200, 0x71ac4689, 0xdd, 0xff, 0x7, 0x3, 0x3, 0x4, 0x5, 0xc1e6, 0x4, 0x1, 0xfffffeff, 0x4, 0x8, 0xffffffff, 0x80, 0x0, 0xc, 0x5, 0x81, 0x7, 0x3d9d, 0x4, 0xfe68, 0x261, 0x80, 0x7, 0xd, 0x401, 0x411, 0x3ff, 0xe, 0x4, 0xfffff001, 0x0, 0xfffffff8, 0x8, 0x9, 0x0, 0x1, 0x4, 0x1000, 0x1, 0x1a, 0x5c143a52, 0x10001, 0x7ff, 0x5, 0x2, 0x6, 0x3ff, 0x2, 0x2ad, 0x5, 0x2, 0x3b8, 0x1, 0x0, 0x2, 0x2, 0x40, 0x8, 0xf, 0x948, 0x7, 0x6, 0xc306, 0x1, 0xfffff801, 0xffffff5e, 0x7f, 0x1ff, 0x3, 0x7, 0x9c0d, 0x7f9, 0xfffffffc, 0x9, 0x4, 0xffffffff, 0xfffffff7, 0x7d, 0x8, 0x6, 0x3, 0xfb7, 0xff, 0x5, 0x81, 0x5, 0x6, 0x7869, 0x10001, 0xc, 0xc79, 0xe, 0x6, 0x8000, 0x46, 0x1e5b, 0x400, 0x99, 0x7, 0x7, 0x0, 0x5, 0x3, 0x5, 0x8001, 0xffffffff, 0x2, 0x3, 0x4, 0x9, 0x8001, 0x401, 0x4, 0xb2, 0x5, 0x1, 0x4, 0x1, 0x161, 0x2, 0xef18, 0x2, 0x9, 0x7721, 0x8, 0x5, 0x378, 0xc0000000, 0xff, 0x9, 0x7, 0x3, 0xfffffff9, 0x2, 0x4, 0x1, 0xe879, 0x4, 0x0, 0x6, 0x33d7478f, 0x5e, 0x5, 0x0, 0x101, 0xc9, 0x6, 0x3, 0x0, 0x5, 0x1, 0x5, 0x5, 0x7, 0x401000, 0xee03, 0x7, 0xb33, 0x0, 0xfffeffff, 0x3, 0x8, 0x8, 0x0, 0x7, 0x7142, 0xbea7, 0xfff, 0x9, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x52b, 0x6, 0x6, 0x8, 0x30, 0xffffffff, 0x473, 0x1, 0x80000003, 0x9, 0x2, 0xf5b8, 0x7, 0x77a, 0x0, 0x1, 0x3, 0xdfe9, 0x6, 0x8, 0x0, 0x5, 0x10001, 0x0, 0xf68, 0xfffffff0, 0x3, 0x9, 0x3c, 0x1, 0xe, 0x4, 0x400, 0x5, 0x7fff, 0x8, 0xc06, 0x28, 0xffff, 0x0, 0xd1bb, 0x4, 0x2, 0x9, 0x100, 0x0, 0xfffffffa, 0x5, 0x66, 0x7, 0xe6a6, 0x5, 0x4, 0x4, 0xf30c, 0x5, 0x3, 0x3, 0x7, 0x2, 0x1, 0x6, 0x9, 0x8, 0x1, 0x1, 0x81, 0x4, 0x5, 0x4c, 0x2, 0x3, 0x401, 0x6, 0x0, 0x9fe, 0xb31, 0xfffffffc, 0x3, 0xe, 0x0, 0x0, 0x5, 0xffffffff, 0x8], 0x2, 0x400, 0x3}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0xb0f1, 0x80, 0x1, 0x2fb}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7956, 0x10, 0x1, 0x1fc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdcec, 0x400, 0x1, 0x177}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d12, 0x1, 0x3, 0x16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3274, 0x1, 0x0, 0x2a9}}], 0x4, &(0x7f00000018c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff3}, 0x0, 0x0, '\x00', {0x1, 0x287, 0x0, &(0x7f00000008c0)=@buf_max_buf="8a2da64716516296706aa4158a56fdf12eff6851f85c8454fab28ee9a0d2500aefd0a98c7d5342ddbae5fc7a4092eac149b1994c1003f1bffcfc20cfa33ebd6b9e117778676186b978c2a35390919530d8c9f1a3b4bef241d348c72fb8a2df68503d50ce90cc08b3badcab9e13bec73b6407a62d8d4d671739355e3696395a987b02a28d8d6e5e6c55c9ba8af1e793f82a159be5e55dad7c617a0a71075e86cca07464f88351ac674abd459a99db302ffa1007c51af496f563cd61c631b585cbdd831d1da3ca503dfc1b59b65b4fa994c1e833b9385655509a8b497b1244f45d462156066a0d2aeb40d2d0abb4641d19bf72aee6e6ce69687b4921017fc2a01dbeb0d167e5aa483cd92e9a2b0ceceeb261604e5beb7c5e5410e31b0be981d54d06db281fee9959fd3b3518f5836d0023de411943c94536faa9a4e461d79b24c7fd1220bd11412ec0dee36cf82a699cd04e511392b1c212cc85575134d7cf1d8b4f76ab30afff66d14b188e77c1d84e308d09cbf717f187caffc398c915be208927cc578db9e33cc9f865a21410219a613613a9e984c0d67a36a25a1f1f39f121bb9d625ed757b5d3830af8056150d0e73d11293f73f239c93a6d3764a7d012b567239373885105929a56f2b92ba34fc27efdffed8aae85d0c36f863324e9968b11db403a3eec7a61f8b4cc4e289b41dc1fbfc3c606fa9396e4c8bb61345cefbef908d49154a7b13df231b37bc8122bd798cf901635d2d492506e969381f0c4204df41c3aec9cd6057b30972df0854af28d25713ab75715e3b65d052fc8c03adc7a1b98b308c3d2fbb4aa5934364a737b416580a93772da2fe8456ca44aa75e26fef49929e4135983362a6cdc8ad5c04c8bb7c7a48c34536084da022f4911e33e003695494b59cf41b0fb3dd85bff7f6a3bc1196890aaa339c519344653ce8c3972ae8b114a0a794e3ddaf6eab1b569caeaac40171dca98891b4a39b0a740b920248edfb90c7ca6f4a6e60c4a226e0c77bd0d5021c1ef683fc7f98c89f2863bcbc5208a8c5ce81bdb997dfa771ab8e2c0a0acc12697ec68dbdb0225d4acae68e15084b74718b362de542962553d658ceace00ceee86eb9c150a53f8e5314edd095ab6ed33e0850fd1adaa25f1e32a85850980ad559041ed7090c4aba971e4e29014e42bdb47e14256b58609b993e5d9f94e28027e82712c4e45d6abd9f7d667312c13cc655480aeb35d83717990385abf874c5084a6426869665235555e6022c628b4d7b63ee6318e969dcf859c4a35c280197a5f8f815379e6955c157480c67d7c5b7e2aaabe6b811c32125eb0ef9eda8a85413cd35dd6fea58e0ecdb9cf41b84096dcf016849be4a1aac1fb89f671462af086f7ab9347a5b73eb0210842f83444149a0a04fdb961a46a0d9daa8de772de6e090e4c3263527ef39d1ab00cda9d5e030b987e4dbfebe6d40886257d95a5f279c32b39517c9d4c8b8d0a26501bf30d6274563f8b7d376bfd0d248881105c065aa377e26656d34133dd4adb79b596614abaec410aa2e5255d13d344b3c00250d7aa31d6db78271e71e83d1682a4d30222ba562633ae1e80f95274eb22ae0001bc2901372812fe22f316f2695459a8b4a4863c217c47e399fd8026dba853afec99ee8e0e53c9e7ec9bcc9846d626afdd18cd8222617d082340c9925fe7fc08e2fc05b69d84ed53c789d65c060e169dcf23af25502de00d29126a99a37a1bcd70083a692469e41fbea3d90b0d6d35727dc03ad1507ad5f7a1f5170c2188ac33f55d7d2bb4a8367e7bd9b0616c37c65a216a7f5419c680a02c74de4fcf1ad6c5499f1a286217d6db361f85b0c7de9dba34d232d0a8e045238458d5b07832c7d8005e833646a8cb4530f886ffaac44cd57c91e7ff60fd42ef513cabf703bd3a5642227152d9aae67ee84a32c082ac951186081ec2e539bacc5181c626a3a26c73d4d0114142c249b97278de83c2c92c09b6eef0098747fac0a848e4fa1defda622861f9177d0eedd8a845a7f10abe3967941774367050a97e6ef5555f7d20d074d8df974ff44eb0c2dfce1ac069c619281baf6259364b384ad63802669461cd9ee91fa85568b99647605f68c8fac641438148be784f56f87bbc8e297555422fb58bf71fc952a3f3bb8cfd0a8c8ce705298f748827e91f2953b08d3860510a1250e062a753b2efc5262f3b42981e10d3175b269030adfdfb7885f81b0ea73825c7abbac9de63ef85fd623579ddf370670bed9b688833ff0970af3e95318d91372b4486a03431c34fc1e3ef575c04de5b99594ebaefa09995cc52f1d1583d1852888a4a33581461d60657df8bec76be957ad5482650cdc0f9b4b67f9c6705d22532635a66d270dd1a3cf48693c074d2853bade34e3b2120f41236bb19eca4cbc0893f3e494b12e978c8f056336be222f3d2979336bd83a26d30bb314205e317c61be444b19a82494a5b3eed2b6cbbed098243705ccad2b09d3045e08544704d762ddc70d6cccc183de4178827704b7cf20dce597a422acfac16fc5590697488f0e826942a25acd773f1dc86e93f6e67a8e1748f87f88193fdee3999d5e51239de431f968fb49a911dba1c5e03287cdcaaa287e58b1a5839e626f279419a65a0a45d696ac61d306a7d85495f9f016853ec5896c4dab9fab2647c35c23e2776daa3a53873771d067674ccecd7a19836dad2865abd1adb3859855b5e2d8f041e3e9796d8587e6df8980529ad3d7f462c52a8a1c44a59c6cfb3cd6c789f7d967eae29c85e1e3627e5079fdd5c697c9b9839dd46915e012f84ccb6c94ab67dd60d4f95c7a3a8d47980cc5ce0a99ab505cf0f207d0ad54e39e17c09f3a322e7485b955032e43d87dad8bf884676edd28f02aab50a4551a6471d7697acd96ce8a4901bf1cbed66a96e91db928be51616fa308eb10b9888ed6171e4214a29deed7da03c0691011ce5f0b218da5e4da162cfac537d5f8bde0fdf0b930dd94945d4596bac91369aa7aeddbe4bf47324fc06cd826bc934d1f291b03c5abe2e1282c0f00c7aa4ccba3e188ca9bfd993b7785a5c3849f2ffcbc8a3241b02eefac407e648d15ca27d40249c7ecabe57e790d80a8275864a843241e1b26c0208b467436f0cd8637ded28647e8b8a1f74b15bd0fc8175d9478217180ed6c07bd3f2ce2ec1b9b3ebc16790c4b715905bd30ea8d6a2f395a3c96a10c9f9a1397981125f4501bad8f54183d770a7bf17fcb8fe7937e35b1be1d1fd153278a8facdd1bf028fd9765bc233f5488f9db831953e87020cd8cbc783ee885f24232c11ff0b4ebd281cf911f6a996504a236fabbb405f37554aa86baabe49025ee6b7a04f48203fd2e5d31d228159d062abdbf84877246270b51fd55eb9609015e9d9ad6a62f1c8b5667a567354efc8fc173e87af4b9bb4fbc12e58b45c185c4236991fa7ad122d8c5e6c96168d12955b7d3eb638bd0b59c83063257cfe2a62cb3ff4b7b1e44a60d17370231ae3b3eef95e111dea8752140745d75fc5bc14b1021d783eef9baa7399f7735c187e80f58e36144d3547c0ca70c7f89486721c25aba0ef6f16b6323b38dac1312c3aa2c38f37f23a3ea32f50df8c2d0c819705ce30367772e468319ef7ce610a44aa2f1c4c595eb09aaa2e287e2b72b03808c4544abe2185e75f893e7fe3e51a5c4b9131339da4f96ddfb4e8722deb083173b36b9f8305ecb5afe4821f9ea63ebcdca2868938bf762995bf0d1162e77dd32cc7ab76aac9528ff551904b15463bc62aa6c639837ab440f64707dfaf9608077eec78b55e8923a9fa7579a279626b5e465e354232e9b1fa05fab3905b0ac0137519f0a53a88d1c31206502e219c0fb7b399d110a9fd40ac240946679ff6dbec4eb5a580a99b6cdc189ad5d4f7515204917652ca8fc73817825222cdf62fbd4e184a4899b351173c2f0bc8b1b998543703b341c1296badc6fd460b46ba50477cb06ce4a441a3f443f30b72bfeb65918a6ebf6a4cbcc196e695c4019a79433a52c7c1482a2219d9848c795cea37de5d72a099890b5f4f7c58f5075fe0737889e4c65b5b2ad5d71e7b803ffaea2d05e14ab54a23125e9a02a5b3291b667bb9870fb9f2d4ff32328d48e8974ee688bdaab0c87556482fdb5f9117f75e6916dcc92a4e89caea669579bf8eb37023d8c08db29ecf379c250a45630931cbc44be50c2aa749bc1cf9d338fa1b44cd9963782c426d457c9c8032d149e77477064ef6fbc81743aebbe95768a29dedbeade1f6692fdc16b2bdbe304bb777cd9696034f06af1cedb98963af6ee529b0df813a8d454b61ada5c5d76989d44789d3f814de155361667f80b6e11d92105e187eb6de6a2b2f9f6542b65f8d7c960812b7974b2a4d9e20c187c5fbb03190095df80dd65bb9d2bc4f7e3f6f4f204456e923e3cb64d08fc6452aface65338b303f3aa2a5a4c4878aea921c0f16c1aad11e87183a86784f847b5a89d17f6bd75120e9c785fe313fd63e2e5de3cc37761116795838f5b2751cbf146ab5c3be1a5577414f313815bb80bd688e5f02597476269d0fe0f20065096ebba112bff4478c51696b89a1e9cc2ed2f4dc70fcceb928562f81e04c590919bc2765d3c2c69b78bf8d4d89bd256fdd7c32369e975eeaa5cc6d43eafee81c55cc1046e1da452df06f10f96fad4d0d522fec7215aa74e0dd403a8bfba1bb645153e04da92c9bdb97b7f5952495c8ed3377297df78e419b57c5b77591cab8e0d51f0fde223ba5166bdc0a09e94fbbc4f1ea514efd123384b3d75428cb2573031b5603d056ab7e2c0c07a2bc38026883d0876f96a895627a9676fa8aea2155306c2e2c36115309cd1c9009eca9c5f537b9d1381c20b7152fd8ec9a2c02d8c5f288006148376859b0d3fc4d58b6ab954cff271e64e60db8c57936ebbad816ff7017aa923facdb83986f6054a3f02aa84b891ccd55a3b7721d62f2cc23f2995bdba12d052769b9e466070fdeec2b9114ce5f62ec03c464dabdf9e1d66916b40caf3ac8e2c7b05e26125bc9a52ed09c9cb754f1f21a8b45e377f8b5baf505995596ca6f29bfab0fc5b8ad77a3b3b83e0f01e1eed3121ef21410529e05ec90ecac0c9cee6180e69a2b2f5a05a7aedec1a7cf9293de4029dab272ad02e05910996ca97d7b4e00bde33ce4633412e26d168621a8e02e6c5a2af20800051c81d28c64cf03513e50b33aa6c192142cd8f41551f496aee58bc38ee911e0d3285517f76415f9419633cc51481e8dd1fa7088bcaa8242063fd09757adb09af7df18bd863a5b912a22edc91a99e805b3d9905f9c9d895ba9c7a2556e8554b7f6788f2a687a2cc7e3a59ed50e8ec43e4bba512124d8311ad08be9f4a130f67d816717e2de07318d74cca1c6827e2f353b3007a22c6f8c6ca35642ca09d39c38f9d88521d102a5260f9204da808c70c861204397ef668369be4b9abb7ac8ed0fddf884ff114728bd0954a7d5e48e8dd0dfeb8fa9b65c8a89ce25ff184484d1fcc74891acc6defc9ba3dac01a6f07a3e1bdfb4f075da6bed969ed63aa31c419249ec00d83287bd874892ed799f6058abff59b40169b7997462ccf35def5d6fe864a89bea3adf62614a68d07c769a454eeebdd11a4d3bb55004a90944600d6fbf5e2f9c595fbbfc6d845d7957c1684b9b83cb4171b260a0ae301c0ca832c942f5fff3ec3b2b4cd09b887dfd8f65f3ca2e4c1e3225420a034fd00ffc556ea3d67b1d878bd29e71761327b18c2514d5203f2cad91dc2782b0759acd9b2af7e48f86621f6091da29c8736"}}, &(0x7f0000001940)) r8 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 0s ago: executing program 3 (id=487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0xc, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES64, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="d2950000040000c55f000400000002000004000000c7877a3dd50aa76f25477234042482625c47f5c35f88dc0e190e0523a2464a14c7bd61e92786fe5ff80a35d31831d74f0d62958bb3a0", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000009b9fa2dc04d462ac080386b5ad016d7765fe38e83d6252d073fcb9fcffafc8b248ff0f522d31d782ef882f1cafad7f2ea7211750a8a37d0e7da2a0526e3ccdfa0069782c572986125ade4ab4a1d6526c3bc4b9cad30bcb8f5b46131cd60af9692749e279fe1b3f59ea882470ec6f2a1f38a4a029e3b7f2a9048963a8db52f87443d55a476d574acce58458df73379825af6b1877c990e77dd158ce0f2dd089bce31e34e8baa0797a1c54a7881abd6039207209cbd86f45abca2eaf499f6c94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000190001f973a72427b6db6d001c140000fe00000100000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000740)={[{@noprefix}, {@cpuset_v2_mode}, {@cpuset_v2_mode}], [{@smackfsfloor={'smackfsfloor', 0x3d, '*\''}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_role}, {@subj_user={'subj_user', 0x3d, '//{.'}}, {@euid_gt}]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000083900000008000300eda66811e95535dbb8419fcdc661d90105daae206db319f78dc7e703c58dea7370db2ee7eb6365476a39b9d1279560f4bfd33144607745cd13fc230b0956ec3494c2", @ANYRES32=r4, @ANYBLOB="30005a802c0001801400050001000f007f000400880005000f00d0001400030000001703020003000900010008000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r8, &(0x7f0000000400)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x1, 0x2}, 0xe) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000e0001006172705f636163686500000000000000000000e6ffffffffffffff00"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): Product: syz [ 281.567290][ T6347] usb 2-1: Manufacturer: syz [ 281.567308][ T6347] usb 2-1: SerialNumber: syz [ 281.630656][ T6347] usb 2-1: config 0 descriptor?? [ 281.670694][ T6347] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 281.670810][ T6347] usb 2-1: selecting invalid altsetting 1 [ 281.845942][ T6347] gspca_stk014: reg_r err -71 [ 281.846046][ T6347] stk014 2-1:0.0: probe with driver stk014 failed with error -71 [ 281.927445][ T6347] usb 2-1: USB disconnect, device number 13 [ 282.769504][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5 [ 283.129908][ T6734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.193'. [ 284.643446][ T6385] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.773737][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.804773][ T6385] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.948627][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.717895][ T6744] input: syz1 as /devices/virtual/input/input17 [ 287.907754][ T6385] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.968955][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 288.116298][ T6385] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.151912][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 288.264628][ T3390] bridge_slave_1: left allmulticast mode [ 288.264672][ T3390] bridge_slave_1: left promiscuous mode [ 288.270885][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.457217][ T3390] bridge_slave_0: left allmulticast mode [ 288.457263][ T3390] bridge_slave_0: left promiscuous mode [ 288.457550][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.948623][ T3390] bridge_slave_1: left allmulticast mode [ 288.948664][ T3390] bridge_slave_1: left promiscuous mode [ 288.948990][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.126103][ T3390] bridge_slave_0: left allmulticast mode [ 289.126143][ T3390] bridge_slave_0: left promiscuous mode [ 289.126410][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.361430][ T5593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.399788][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.401180][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.454462][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.463185][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.586309][ T5707] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 289.634687][ T3390] bridge_slave_1: left allmulticast mode [ 289.634728][ T3390] bridge_slave_1: left promiscuous mode [ 289.634983][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.739466][ T5707] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 289.742680][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.742706][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.742742][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.782056][ T5707] usb 2-1: config 0 descriptor?? [ 289.836450][ T3390] bridge_slave_0: left allmulticast mode [ 289.836485][ T3390] bridge_slave_0: left promiscuous mode [ 289.836722][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.417015][ T5707] usb 2-1: language id specifier not provided by device, defaulting to English [ 291.065980][ T5707] uclogic 0003:256C:006D.0003: v1 frame probing failed: -71 [ 291.066099][ T5707] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 291.066242][ T5707] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 291.119215][ T5707] usb 2-1: USB disconnect, device number 14 [ 291.658755][ T4902] Bluetooth: hci1: command tx timeout [ 291.785449][ T6761] MTD: Couldn't look up './dev/mtdblock0': -2 [ 291.972848][ T3390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.998035][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.037033][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.066397][ T3390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.072325][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.084951][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.118098][ T3390] bond0 (unregistering): Released all slaves [ 292.198470][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.497856][ T3390] bond0 (unregistering): Released all slaves [ 293.304902][ T3390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.415179][ T3390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.456924][ T3390] bond0 (unregistering): Released all slaves [ 293.475385][ T6385] kthread_run failed with err -4 [ 293.500302][ T6750] netlink: 'syz.3.199': attribute type 2 has an invalid length. [ 293.729710][ T4902] Bluetooth: hci1: command tx timeout [ 294.298773][ T4902] Bluetooth: hci5: command tx timeout [ 294.939329][ T6782] netlink: 76 bytes leftover after parsing attributes in process `syz.1.204'. [ 295.405719][ T6394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 295.695244][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.728423][ T6394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 295.805838][ T4902] Bluetooth: hci1: command tx timeout [ 295.978927][ T6802] MTD: Couldn't look up './dev/mtdblock0': -2 [ 295.981126][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.524050][ T4902] Bluetooth: hci5: command tx timeout [ 297.770092][ T6806] input: syz1 as /devices/virtual/input/input18 [ 297.936243][ T4902] Bluetooth: hci1: command tx timeout [ 298.613167][ T4902] Bluetooth: hci5: command tx timeout [ 298.837131][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 298.979878][ T6824] tmpfs: Bad value for 'nr_inodes' [ 299.010065][ T5593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.039931][ T5593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.042721][ T5593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.062362][ T5593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.073233][ T5593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.082480][ T6394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 299.244183][ T5714] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 299.270585][ T6394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.395627][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 299.396344][ T5714] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 299.397597][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.402227][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.402257][ T5714] usb 4-1: Product: syz [ 299.402273][ T5714] usb 4-1: Manufacturer: syz [ 299.402289][ T5714] usb 4-1: SerialNumber: syz [ 299.488700][ T5714] usb 4-1: config 0 descriptor?? [ 299.522641][ T5714] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 299.522749][ T5714] usb 4-1: selecting invalid altsetting 1 [ 299.699406][ T5714] gspca_stk014: reg_r err -71 [ 299.699512][ T5714] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 299.725385][ T5714] usb 4-1: USB disconnect, device number 5 [ 300.051562][ T5248] 8021q: adding VLAN 0 to HW filter on device eth6 [ 300.416107][ T6831] netlink: 48 bytes leftover after parsing attributes in process `syz.1.209'. [ 300.684131][ T5593] Bluetooth: hci5: command tx timeout [ 301.244686][ T5593] Bluetooth: hci3: command tx timeout [ 305.069060][ T6856] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 305.166142][ T5593] Bluetooth: hci3: command tx timeout [ 307.259202][ T5593] Bluetooth: hci3: command tx timeout [ 307.341250][ T6863] input: syz1 as /devices/virtual/input/input19 [ 307.727157][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 307.843056][ T6868] tmpfs: Bad value for 'nr_inodes' [ 308.089129][ T1578] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 308.266419][ T1578] usb 2-1: Using ep0 maxpacket: 8 [ 308.267171][ T1578] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 308.268380][ T1578] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.270756][ T1578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.270784][ T1578] usb 2-1: Product: syz [ 308.270800][ T1578] usb 2-1: Manufacturer: syz [ 308.270816][ T1578] usb 2-1: SerialNumber: syz [ 308.305899][ T1578] usb 2-1: config 0 descriptor?? [ 308.349371][ T1578] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 308.349494][ T1578] usb 2-1: selecting invalid altsetting 1 [ 308.517013][ T1578] gspca_stk014: reg_r err -71 [ 308.517112][ T1578] stk014 2-1:0.0: probe with driver stk014 failed with error -71 [ 308.561604][ T1578] usb 2-1: USB disconnect, device number 15 [ 309.262494][ T6885] netlink: 48 bytes leftover after parsing attributes in process `syz.3.218'. [ 309.346476][ T5593] Bluetooth: hci3: command tx timeout [ 312.971829][ T5248] 8021q: adding VLAN 0 to HW filter on device eth7 [ 314.698969][ T6913] input: syz1 as /devices/virtual/input/input20 [ 314.702162][ T3390] hsr_slave_0: left promiscuous mode [ 314.736985][ T3390] hsr_slave_1: left promiscuous mode [ 314.761662][ T3390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.761698][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.809707][ T3390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.809732][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.176029][ T3390] hsr_slave_0: left promiscuous mode [ 315.254275][ T3390] hsr_slave_1: left promiscuous mode [ 315.255672][ T3390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.255699][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.304635][ T6919] netlink: 48 bytes leftover after parsing attributes in process `syz.1.227'. [ 315.305520][ T3390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.305540][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.430981][ T3390] veth1_macvtap: left promiscuous mode [ 315.431061][ T3390] veth0_macvtap: left promiscuous mode [ 315.431247][ T3390] veth1_vlan: left promiscuous mode [ 315.432243][ T3390] veth0_vlan: left promiscuous mode [ 315.584380][ T3390] veth1_macvtap: left promiscuous mode [ 315.584493][ T3390] veth0_macvtap: left promiscuous mode [ 315.584670][ T3390] veth1_vlan: left promiscuous mode [ 315.584844][ T3390] veth0_vlan: left promiscuous mode [ 316.686527][ T3390] team0 (unregistering): Port device team_slave_1 removed [ 316.729829][ T3390] team0 (unregistering): Port device team_slave_0 removed [ 319.053350][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.053430][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.398130][ T3390] team0 (unregistering): Port device team_slave_1 removed [ 320.466151][ T3390] team0 (unregistering): Port device team_slave_0 removed [ 322.873566][ T6940] input: syz1 as /devices/virtual/input/input21 [ 325.928210][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.928438][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.928650][ T6754] bridge_slave_0: entered allmulticast mode [ 325.955643][ T6754] bridge_slave_0: entered promiscuous mode [ 326.181607][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.181749][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.181956][ T6754] bridge_slave_1: entered allmulticast mode [ 326.185031][ T6754] bridge_slave_1: entered promiscuous mode [ 326.368449][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.368584][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.368785][ T6764] bridge_slave_0: entered allmulticast mode [ 326.401808][ T6764] bridge_slave_0: entered promiscuous mode [ 326.468879][ T6764] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.469044][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.469289][ T6764] bridge_slave_1: entered allmulticast mode [ 326.496396][ T6764] bridge_slave_1: entered promiscuous mode [ 326.647136][ T6754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.723009][ T6754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.723541][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.723685][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.723873][ T6823] bridge_slave_0: entered allmulticast mode [ 326.759634][ T6823] bridge_slave_0: entered promiscuous mode [ 326.793916][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.794033][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.794212][ T6823] bridge_slave_1: entered allmulticast mode [ 326.824367][ T6823] bridge_slave_1: entered promiscuous mode [ 326.829570][ T6764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.894030][ T6764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.399930][ T6975] syz.1.235 (6975): drop_caches: 2 [ 329.856254][ T6754] team0: Port device team_slave_0 added [ 329.876693][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.022125][ T5248] 8021q: adding VLAN 0 to HW filter on device eth8 [ 330.042691][ T6754] team0: Port device team_slave_1 added [ 330.104963][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.130304][ T6764] team0: Port device team_slave_0 added [ 330.271643][ T6764] team0: Port device team_slave_1 added [ 330.455773][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.455797][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.455830][ T6754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.484854][ T6823] team0: Port device team_slave_0 added [ 330.574055][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 330.636285][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.636307][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.636339][ T6754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.692450][ T6823] team0: Port device team_slave_1 added [ 330.705865][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.705885][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.705917][ T6764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.775044][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 330.776625][ T31] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.776662][ T31] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.778958][ T31] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 330.778988][ T31] usb 4-1: Product: syz [ 330.779005][ T31] usb 4-1: Manufacturer: syz [ 330.875283][ T31] hub 4-1:4.0: USB hub found [ 331.066281][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.066304][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.066336][ T6764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.189665][ T6994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.264523][ T6994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.783415][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.783437][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.783469][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.840977][ T31] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 331.853785][ T7016] ubi: mtd0 is already attached to ubi0 [ 331.957464][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.957485][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.957525][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.042852][ T31] usb 4-1: USB disconnect, device number 6 [ 332.344254][ T6754] hsr_slave_0: entered promiscuous mode [ 332.350704][ T6754] hsr_slave_1: entered promiscuous mode [ 332.351833][ T6754] debugfs: 'hsr0' already exists in 'hsr' [ 332.351864][ T6754] Cannot create hsr debugfs directory [ 333.715214][ T6764] hsr_slave_0: entered promiscuous mode [ 333.716321][ T6764] hsr_slave_1: entered promiscuous mode [ 333.718055][ T6764] debugfs: 'hsr0' already exists in 'hsr' [ 333.718075][ T6764] Cannot create hsr debugfs directory [ 333.890572][ T7022] input: syz1 as /devices/virtual/input/input22 [ 334.351633][ T7029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.243'. [ 336.590760][ T6823] hsr_slave_0: entered promiscuous mode [ 336.592256][ T6823] hsr_slave_1: entered promiscuous mode [ 336.593247][ T6823] debugfs: 'hsr0' already exists in 'hsr' [ 336.593274][ T6823] Cannot create hsr debugfs directory [ 336.735516][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.245'. [ 337.435765][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 337.604918][ T6347] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 337.754145][ T6347] usb 2-1: device descriptor read/64, error -71 [ 337.784113][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 337.934071][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 337.935687][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 337.936905][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.978885][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.978914][ T9] usb 4-1: Product: syz [ 337.978930][ T9] usb 4-1: Manufacturer: syz [ 337.978945][ T9] usb 4-1: SerialNumber: syz [ 338.044873][ T9] usb 4-1: config 0 descriptor?? [ 338.082177][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 338.082268][ T9] usb 4-1: selecting invalid altsetting 1 [ 338.086310][ T6347] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 338.215670][ T6347] usb 2-1: device descriptor read/64, error -71 [ 338.261758][ T9] gspca_stk014: reg_r err -71 [ 338.261839][ T9] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 338.289845][ T9] usb 4-1: USB disconnect, device number 7 [ 338.325519][ T6347] usb usb2-port1: attempt power cycle [ 338.677127][ T6347] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 338.708833][ T6347] usb 2-1: device descriptor read/8, error -71 [ 338.965571][ T6347] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 338.995504][ T6347] usb 2-1: device descriptor read/8, error -71 [ 339.105786][ T6347] usb usb2-port1: unable to enumerate USB device [ 339.879758][ T5593] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 341.559750][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 342.825699][ T7112] input: syz1 as /devices/virtual/input/input23 [ 344.285676][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 344.654041][ T6347] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 344.824873][ T6347] usb 4-1: Using ep0 maxpacket: 8 [ 344.825736][ T6347] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 344.826956][ T6347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.831827][ T6347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.831855][ T6347] usb 4-1: Product: syz [ 344.831872][ T6347] usb 4-1: Manufacturer: syz [ 344.831888][ T6347] usb 4-1: SerialNumber: syz [ 344.903133][ T6347] usb 4-1: config 0 descriptor?? [ 344.961239][ T6347] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 344.961350][ T6347] usb 4-1: selecting invalid altsetting 1 [ 345.112384][ T6347] gspca_stk014: reg_r err -71 [ 345.112507][ T6347] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 345.147130][ T6347] usb 4-1: USB disconnect, device number 8 [ 345.413561][ T5248] 8021q: adding VLAN 0 to HW filter on device eth10 [ 347.122293][ T5248] 8021q: adding VLAN 0 to HW filter on device eth11 [ 347.576360][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 347.691877][ T7186] FAULT_INJECTION: forcing a failure. [ 347.691877][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 347.691919][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.3.268 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 347.691945][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 347.691959][ T7186] Call Trace: [ 347.691968][ T7186] [ 347.691978][ T7186] dump_stack_lvl+0xe8/0x150 [ 347.692025][ T7186] should_fail_ex+0x46b/0x600 [ 347.692062][ T7186] should_failslab+0xa8/0x100 [ 347.692100][ T7186] __kmalloc_noprof+0xfb/0x790 [ 347.692133][ T7186] ? tomoyo_encode+0x2ad/0x570 [ 347.692174][ T7186] ? tomoyo_encode+0x2ad/0x570 [ 347.692214][ T7186] tomoyo_encode+0x2ad/0x570 [ 347.692255][ T7186] tomoyo_realpath_from_path+0x5fa/0x640 [ 347.692302][ T7186] ? tomoyo_path_number_perm+0x219/0x5f0 [ 347.692332][ T7186] tomoyo_path_number_perm+0x246/0x5f0 [ 347.692364][ T7186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 347.692393][ T7186] ? __lock_acquire+0x747/0x2de0 [ 347.692436][ T7186] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 347.692460][ T7186] ? hook_file_ioctl+0x1f5/0x610 [ 347.692506][ T7186] ? __fget_files+0x2a/0x420 [ 347.692532][ T7186] ? __fget_files+0x2a/0x420 [ 347.692560][ T7186] ? __fget_files+0x3a8/0x420 [ 347.692582][ T7186] ? __fget_files+0x2a/0x420 [ 347.692610][ T7186] security_file_ioctl+0xc3/0x2a0 [ 347.692642][ T7186] __se_sys_ioctl+0x47/0x170 [ 347.692676][ T7186] do_syscall_64+0x166/0x520 [ 347.692698][ T7186] ? trace_irq_disable+0x3b/0x140 [ 347.692727][ T7186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.692752][ T7186] ? clear_bhb_loop+0x70/0xc0 [ 347.692780][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.692805][ T7186] RIP: 0033:0x7f905f18e159 [ 347.692827][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.692848][ T7186] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.692874][ T7186] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 347.692892][ T7186] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 347.692908][ T7186] RBP: 00007f905d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.692923][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.692937][ T7186] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 347.692975][ T7186] [ 347.693027][ T7186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 348.369493][ T7196] FAULT_INJECTION: forcing a failure. [ 348.369493][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 348.369533][ T7196] CPU: 0 UID: 0 PID: 7196 Comm: syz.3.272 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.369558][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 348.369573][ T7196] Call Trace: [ 348.369582][ T7196] [ 348.369592][ T7196] dump_stack_lvl+0xe8/0x150 [ 348.369630][ T7196] should_fail_ex+0x46b/0x600 [ 348.369667][ T7196] should_failslab+0xa8/0x100 [ 348.369706][ T7196] __kmalloc_noprof+0xfb/0x790 [ 348.369737][ T7196] ? tomoyo_encode+0x2ad/0x570 [ 348.369768][ T7196] ? tomoyo_encode+0x2ad/0x570 [ 348.369809][ T7196] tomoyo_encode+0x2ad/0x570 [ 348.369848][ T7196] tomoyo_realpath_from_path+0x5fa/0x640 [ 348.369894][ T7196] ? tomoyo_path_number_perm+0x219/0x5f0 [ 348.369923][ T7196] tomoyo_path_number_perm+0x246/0x5f0 [ 348.369954][ T7196] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 348.369983][ T7196] ? __lock_acquire+0x747/0x2de0 [ 348.370028][ T7196] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 348.370050][ T7196] ? hook_file_ioctl+0x1f5/0x610 [ 348.370095][ T7196] ? __fget_files+0x2a/0x420 [ 348.370123][ T7196] ? __fget_files+0x2a/0x420 [ 348.370146][ T7196] ? __fget_files+0x3a8/0x420 [ 348.370169][ T7196] ? __fget_files+0x2a/0x420 [ 348.370198][ T7196] security_file_ioctl+0xc3/0x2a0 [ 348.370232][ T7196] __se_sys_ioctl+0x47/0x170 [ 348.370266][ T7196] do_syscall_64+0x166/0x520 [ 348.370287][ T7196] ? trace_irq_disable+0x3b/0x140 [ 348.370316][ T7196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.370339][ T7196] ? clear_bhb_loop+0x70/0xc0 [ 348.370367][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.370392][ T7196] RIP: 0033:0x7f905f18e159 [ 348.370412][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.370441][ T7196] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.370466][ T7196] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 348.370484][ T7196] RDX: 00002000000000c0 RSI: 00000000400865fe RDI: 0000000000000003 [ 348.370499][ T7196] RBP: 00007f905d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 348.370514][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.370528][ T7196] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 348.370565][ T7196] [ 348.604016][ T7196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 349.058374][ T7211] trusted_key: encrypted_key: insufficient parameters specified [ 349.160740][ T7213] snd_aloop snd_aloop.0: control 0:129:-2:syz1:245 is already present [ 349.220496][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.276'. [ 349.245314][ T5707] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 349.374222][ T5707] usb 2-1: device descriptor read/64, error -71 [ 349.614084][ T5707] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 349.744175][ T5707] usb 2-1: device descriptor read/64, error -71 [ 349.991314][ T5707] usb usb2-port1: attempt power cycle [ 350.018720][ T4902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.068213][ T4902] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.071341][ T4902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.103649][ T4902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.112865][ T4902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.455690][ T5707] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 350.477785][ T5707] usb 2-1: device descriptor read/8, error -71 [ 350.714083][ T5707] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 350.735931][ T5707] usb 2-1: device descriptor read/8, error -71 [ 350.779966][ T3390] bridge_slave_1: left allmulticast mode [ 350.780009][ T3390] bridge_slave_1: left promiscuous mode [ 350.780272][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.849128][ T5707] usb usb2-port1: unable to enumerate USB device [ 350.946179][ T3390] bridge_slave_0: left allmulticast mode [ 350.946222][ T3390] bridge_slave_0: left promiscuous mode [ 350.946526][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.614295][ T3390] bridge_slave_1: left allmulticast mode [ 351.614336][ T3390] bridge_slave_1: left promiscuous mode [ 351.614615][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.784639][ T3390] bridge_slave_0: left allmulticast mode [ 351.784682][ T3390] bridge_slave_0: left promiscuous mode [ 351.784944][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.814828][ T7268] FAULT_INJECTION: forcing a failure. [ 351.814828][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 351.814868][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.3.282 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 351.814895][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 351.814909][ T7268] Call Trace: [ 351.814918][ T7268] [ 351.814928][ T7268] dump_stack_lvl+0xe8/0x150 [ 351.814967][ T7268] should_fail_ex+0x46b/0x600 [ 351.815005][ T7268] should_failslab+0xa8/0x100 [ 351.815042][ T7268] kmem_cache_alloc_node_noprof+0xac/0x660 [ 351.815074][ T7268] ? __alloc_skb+0x1db/0x7a0 [ 351.815106][ T7268] ? __alloc_skb+0x1db/0x7a0 [ 351.815140][ T7268] __alloc_skb+0x1db/0x7a0 [ 351.815167][ T7268] netlink_sendmsg+0x5d4/0xb40 [ 351.815207][ T7268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.815236][ T7268] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 351.815290][ T7268] ? __kernel_text_address+0xd/0x30 [ 351.815320][ T7268] ? unwind_get_return_address+0x4d/0x90 [ 351.815358][ T7268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.815386][ T7268] sock_sendmsg_nosec+0x13a/0x180 [ 351.815421][ T7268] ____sys_sendmsg+0x565/0x870 [ 351.815457][ T7268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.815491][ T7268] ? import_iovec+0x73/0xa0 [ 351.815528][ T7268] ___sys_sendmsg+0x2a5/0x360 [ 351.815552][ T7268] ? __lock_acquire+0x747/0x2de0 [ 351.815586][ T7268] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.815646][ T7268] ? __fget_files+0x2a/0x420 [ 351.815669][ T7268] ? __fget_files+0x3a8/0x420 [ 351.815705][ T7268] __x64_sys_sendmsg+0x1b7/0x290 [ 351.815733][ T7268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.815779][ T7268] do_syscall_64+0x166/0x520 [ 351.815803][ T7268] ? trace_irq_disable+0x3b/0x140 [ 351.815832][ T7268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.815856][ T7268] ? clear_bhb_loop+0x70/0xc0 [ 351.815884][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.815906][ T7268] RIP: 0033:0x7f905f18e159 [ 351.815928][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.815947][ T7268] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.815972][ T7268] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 351.815990][ T7268] RDX: 0000000000040000 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 351.816004][ T7268] RBP: 00007f905d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 351.816019][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.816032][ T7268] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 351.816065][ T7268] [ 352.204199][ T5593] Bluetooth: hci2: command tx timeout [ 352.371241][ T3390] bridge_slave_1: left allmulticast mode [ 352.371281][ T3390] bridge_slave_1: left promiscuous mode [ 352.371624][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.490577][ T4902] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 352.555471][ T4902] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 352.559242][ T4902] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 352.560413][ T4902] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 352.572982][ T4902] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.636643][ T3390] bridge_slave_0: left allmulticast mode [ 352.636688][ T3390] bridge_slave_0: left promiscuous mode [ 352.655398][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.750196][ T7294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.290'. [ 353.776821][ T3390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.924937][ T3390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.966749][ T3390] bond0 (unregistering): Released all slaves [ 354.287814][ T3390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.294180][ T5593] Bluetooth: hci2: command tx timeout [ 354.344960][ T3390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.385861][ T3390] bond0 (unregistering): Released all slaves [ 354.684188][ T5593] Bluetooth: hci6: command tx timeout [ 354.735150][ T3390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.794924][ T3390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.839225][ T3390] bond0 (unregistering): Released all slaves [ 355.265925][ T5248] 8021q: adding VLAN 0 to HW filter on device eth12 [ 356.955600][ T5593] Bluetooth: hci2: command tx timeout [ 356.955646][ T5593] Bluetooth: hci6: command tx timeout [ 358.805694][ T7318] input: syz1 as /devices/virtual/input/input25 [ 359.004176][ T4902] Bluetooth: hci6: command tx timeout [ 359.004218][ T4902] Bluetooth: hci2: command tx timeout [ 359.304386][ T7339] FAULT_INJECTION: forcing a failure. [ 359.304386][ T7339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.304451][ T7339] CPU: 0 UID: 0 PID: 7339 Comm: syz.3.299 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 359.304483][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 359.304505][ T7339] Call Trace: [ 359.304516][ T7339] [ 359.304528][ T7339] dump_stack_lvl+0xe8/0x150 [ 359.304574][ T7339] should_fail_ex+0x46b/0x600 [ 359.304616][ T7339] _copy_from_user+0x2d/0xb0 [ 359.304657][ T7339] get_itimerspec64+0x1ca/0x310 [ 359.304700][ T7339] ? __pfx_get_itimerspec64+0x10/0x10 [ 359.304742][ T7339] ? __pfx_do_futex+0x10/0x10 [ 359.304776][ T7339] __x64_sys_timerfd_settime+0x149/0x240 [ 359.304809][ T7339] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 359.304864][ T7339] do_syscall_64+0x166/0x520 [ 359.304890][ T7339] ? trace_irq_disable+0x3b/0x140 [ 359.304926][ T7339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.304953][ T7339] ? clear_bhb_loop+0x70/0xc0 [ 359.304984][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.305017][ T7339] RIP: 0033:0x7f905f18e159 [ 359.305042][ T7339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.305067][ T7339] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 359.305105][ T7339] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 359.305125][ T7339] RDX: 0000200000000380 RSI: 0000000000000005 RDI: 0000000000000005 [ 359.305143][ T7339] RBP: 00007f905f22506b R08: 0000000000000000 R09: 0000000000000000 [ 359.305160][ T7339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.305176][ T7339] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 359.305215][ T7339] [ 359.538049][ T7339] IPv6: Can't replace route, no match found [ 359.687212][ T3390] hsr_slave_0: left promiscuous mode [ 359.730557][ T3390] hsr_slave_1: left promiscuous mode [ 359.731498][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.767881][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.880204][ T4902] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.962244][ T4902] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.978841][ T4902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.980566][ T4902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.981291][ T4902] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.214093][ T3390] hsr_slave_0: left promiscuous mode [ 360.254145][ T3390] hsr_slave_1: left promiscuous mode [ 360.256823][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.307017][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.480438][ T7354] netlink: 60 bytes leftover after parsing attributes in process `syz.3.303'. [ 360.537311][ T3390] hsr_slave_0: left promiscuous mode [ 360.814063][ T3390] hsr_slave_1: left promiscuous mode [ 360.817554][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.854895][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.976612][ T7361] MTD: Couldn't look up './dev/mtdblock0': -2 [ 361.087143][ T5593] Bluetooth: hci6: command tx timeout [ 361.304707][ T3390] team0 (unregistering): Port device team_slave_1 removed [ 361.342790][ T3390] team0 (unregistering): Port device team_slave_0 removed [ 361.765324][ T3390] team0 (unregistering): Port device team_slave_1 removed [ 361.814600][ T3390] team0 (unregistering): Port device team_slave_0 removed [ 362.141061][ T5593] Bluetooth: hci7: command tx timeout [ 362.282606][ T3390] team0 (unregistering): Port device team_slave_1 removed [ 362.354322][ T3390] team0 (unregistering): Port device team_slave_0 removed [ 362.668415][ T5248] 8021q: adding VLAN 0 to HW filter on device eth13 [ 364.940095][ T5593] Bluetooth: hci7: command tx timeout [ 367.004727][ T5593] Bluetooth: hci7: command tx timeout [ 367.576070][ T6754] netdevsim netdevsim6: probe with driver netdevsim failed with error -12 [ 367.988835][ T6764] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 369.084264][ T5593] Bluetooth: hci7: command tx timeout [ 369.153522][ T7401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.313'. [ 370.116640][ T7406] nfs4: Bad value for 'source' [ 370.121263][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 370.121863][ T7406] xt_cgroup: path and classid specified [ 373.636947][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.637046][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.637206][ T7229] bridge_slave_0: entered allmulticast mode [ 373.648169][ T7229] bridge_slave_0: entered promiscuous mode [ 373.833453][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.843562][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.843790][ T7229] bridge_slave_1: entered allmulticast mode [ 373.870419][ T7229] bridge_slave_1: entered promiscuous mode [ 374.689996][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.790356][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.205561][ T7229] team0: Port device team_slave_0 added [ 376.284798][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.285003][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.285331][ T7273] bridge_slave_0: entered allmulticast mode [ 376.321041][ T7273] bridge_slave_0: entered promiscuous mode [ 376.354190][ T7229] team0: Port device team_slave_1 added [ 376.444005][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.444184][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.444389][ T7273] bridge_slave_1: entered allmulticast mode [ 376.449013][ T7273] bridge_slave_1: entered promiscuous mode [ 378.741076][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.741102][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.741123][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.808626][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.932807][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.932894][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.968446][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.968471][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.968507][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.035873][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.561196][ T3390] bridge_slave_1: left allmulticast mode [ 379.561248][ T3390] bridge_slave_1: left promiscuous mode [ 379.561546][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.718011][ T3390] bridge_slave_0: left allmulticast mode [ 379.718058][ T3390] bridge_slave_0: left promiscuous mode [ 379.718367][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.943692][ T7490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.329'. [ 380.020557][ T3390] bridge_slave_1: left allmulticast mode [ 380.020596][ T3390] bridge_slave_1: left promiscuous mode [ 380.020871][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.319333][ T7496] FAULT_INJECTION: forcing a failure. [ 380.319333][ T7496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.319379][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz.3.330 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.319415][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 380.319427][ T7496] Call Trace: [ 380.319435][ T7496] [ 380.319443][ T7496] dump_stack_lvl+0xe8/0x150 [ 380.319476][ T7496] should_fail_ex+0x46b/0x600 [ 380.319505][ T7496] _copy_from_user+0x2d/0xb0 [ 380.319534][ T7496] get_itimerspec64+0x1ca/0x310 [ 380.319567][ T7496] ? __pfx_get_itimerspec64+0x10/0x10 [ 380.319598][ T7496] ? __pfx_do_futex+0x10/0x10 [ 380.319621][ T7496] __x64_sys_timerfd_settime+0x149/0x240 [ 380.319644][ T7496] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 380.319666][ T7496] ? __pfx___se_sys_futex+0x10/0x10 [ 380.319696][ T7496] do_syscall_64+0x166/0x520 [ 380.319714][ T7496] ? trace_irq_disable+0x3b/0x140 [ 380.319738][ T7496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.319756][ T7496] ? clear_bhb_loop+0x70/0xc0 [ 380.319779][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.319836][ T7496] RIP: 0033:0x7f905f18e159 [ 380.319853][ T7496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.319869][ T7496] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 380.319990][ T7496] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 380.320008][ T7496] RDX: 0000200000000380 RSI: 0000000000000005 RDI: 0000000000000005 [ 380.320021][ T7496] RBP: 00007f905f22506b R08: 0000000000000000 R09: 0000000000000000 [ 380.320033][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.320045][ T7496] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 380.320078][ T7496] [ 380.503733][ T7498] IPv6: Can't replace route, no match found [ 380.546640][ T3390] bridge_slave_0: left allmulticast mode [ 380.546687][ T3390] bridge_slave_0: left promiscuous mode [ 380.546963][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.728146][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 380.785542][ T3390] bridge_slave_1: left allmulticast mode [ 380.785589][ T3390] bridge_slave_1: left promiscuous mode [ 380.785767][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.895242][ T3390] bridge_slave_0: left allmulticast mode [ 380.895283][ T3390] bridge_slave_0: left promiscuous mode [ 380.895479][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.677540][ T3390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.736447][ T3390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.781608][ T3390] bond0 (unregistering): Released all slaves [ 383.094950][ T3390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.175962][ T3390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.399502][ T3390] bond0 (unregistering): Released all slaves [ 383.830067][ T7520] FAULT_INJECTION: forcing a failure. [ 383.830067][ T7520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.830108][ T7520] CPU: 0 UID: 0 PID: 7520 Comm: syz.3.338 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 383.830141][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 383.830152][ T7520] Call Trace: [ 383.830159][ T7520] [ 383.830166][ T7520] dump_stack_lvl+0xe8/0x150 [ 383.830195][ T7520] should_fail_ex+0x46b/0x600 [ 383.830222][ T7520] _copy_from_user+0x2d/0xb0 [ 383.830247][ T7520] get_itimerspec64+0x1ca/0x310 [ 383.830275][ T7520] ? __pfx_get_itimerspec64+0x10/0x10 [ 383.830302][ T7520] ? __pfx_do_futex+0x10/0x10 [ 383.830323][ T7520] __x64_sys_timerfd_settime+0x149/0x240 [ 383.830343][ T7520] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 383.830363][ T7520] ? __pfx___se_sys_futex+0x10/0x10 [ 383.830390][ T7520] do_syscall_64+0x166/0x520 [ 383.830405][ T7520] ? trace_irq_disable+0x3b/0x140 [ 383.830427][ T7520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.830443][ T7520] ? clear_bhb_loop+0x70/0xc0 [ 383.830463][ T7520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.830504][ T7520] RIP: 0033:0x7f905f18e159 [ 383.830519][ T7520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.830533][ T7520] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 383.830551][ T7520] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 383.830569][ T7520] RDX: 0000200000000380 RSI: 0000000000000005 RDI: 0000000000000005 [ 383.830580][ T7520] RBP: 00007f905f22506b R08: 0000000000000000 R09: 0000000000000000 [ 383.830590][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.830600][ T7520] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 383.830626][ T7520] [ 383.843370][ T7520] IPv6: Can't replace route, no match found [ 383.985507][ T3390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.155870][ T3390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.647052][ T3390] bond0 (unregistering): Released all slaves [ 384.810096][ T7273] team0: Port device team_slave_0 added [ 385.126320][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.126492][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.126669][ T7344] bridge_slave_0: entered allmulticast mode [ 385.136015][ T7344] bridge_slave_0: entered promiscuous mode [ 385.212839][ T7273] team0: Port device team_slave_1 added [ 385.299838][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.299994][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.300223][ T7344] bridge_slave_1: entered allmulticast mode [ 385.326497][ T7344] bridge_slave_1: entered promiscuous mode [ 385.457587][ T7229] hsr_slave_0: entered promiscuous mode [ 385.460873][ T7229] hsr_slave_1: entered promiscuous mode [ 385.461839][ T7229] debugfs: 'hsr0' already exists in 'hsr' [ 385.461865][ T7229] Cannot create hsr debugfs directory [ 385.510961][ T7530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.341'. [ 386.967649][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.967671][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.967703][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.049600][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.114151][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.114173][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.114204][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.119101][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.321930][ T7538] FAULT_INJECTION: forcing a failure. [ 387.321930][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 387.321972][ T7538] CPU: 1 UID: 0 PID: 7538 Comm: syz.3.344 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.321999][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 387.322013][ T7538] Call Trace: [ 387.322023][ T7538] [ 387.322032][ T7538] dump_stack_lvl+0xe8/0x150 [ 387.322077][ T7538] should_fail_ex+0x46b/0x600 [ 387.322114][ T7538] should_failslab+0xa8/0x100 [ 387.322153][ T7538] __kmalloc_cache_noprof+0xa1/0x680 [ 387.322188][ T7538] ? __kthread_create_on_node+0x115/0x3d0 [ 387.322221][ T7538] ? __kthread_create_on_node+0x115/0x3d0 [ 387.322257][ T7538] ? __init_swait_queue_head+0xa8/0x150 [ 387.322279][ T7538] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 387.322320][ T7538] __kthread_create_on_node+0x115/0x3d0 [ 387.322361][ T7538] ? __pfx___kthread_create_on_node+0x10/0x10 [ 387.322410][ T7538] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 387.322440][ T7538] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 387.322470][ T7538] kthread_create_on_node+0xeb/0x140 [ 387.322505][ T7538] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 387.322542][ T7538] ? __pfx_kthread_create_on_node+0x10/0x10 [ 387.322577][ T7538] ? rt_spin_unlock+0x159/0x200 [ 387.322618][ T7538] rxrpc_lookup_local+0xfb5/0x1640 [ 387.322649][ T7538] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 387.322682][ T7538] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 387.322713][ T7538] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 387.322741][ T7538] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 387.322779][ T7538] ? __local_bh_enable+0x1e3/0x2f0 [ 387.322816][ T7538] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 387.322858][ T7538] rxrpc_sendmsg+0x34b/0x6b0 [ 387.322893][ T7538] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 387.322921][ T7538] sock_sendmsg_nosec+0x13a/0x180 [ 387.322957][ T7538] ____sys_sendmsg+0x565/0x870 [ 387.322993][ T7538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.323030][ T7538] ? import_iovec+0x73/0xa0 [ 387.323069][ T7538] ___sys_sendmsg+0x2a5/0x360 [ 387.323093][ T7538] ? __lock_acquire+0x747/0x2de0 [ 387.323129][ T7538] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.323159][ T7538] ? futex_wait+0x2a2/0x390 [ 387.323220][ T7538] ? __fget_files+0x2a/0x420 [ 387.323244][ T7538] ? __fget_files+0x3a8/0x420 [ 387.323281][ T7538] __x64_sys_sendmsg+0x1b7/0x290 [ 387.323318][ T7538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.323369][ T7538] do_syscall_64+0x166/0x520 [ 387.323392][ T7538] ? trace_irq_disable+0x3b/0x140 [ 387.323422][ T7538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.323446][ T7538] ? clear_bhb_loop+0x70/0xc0 [ 387.323474][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.323506][ T7538] RIP: 0033:0x7f905f18e159 [ 387.323528][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.323548][ T7538] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.323574][ T7538] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 387.323592][ T7538] RDX: 00000000200008c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 387.323608][ T7538] RBP: 00007f905f22506b R08: 0000000000000000 R09: 0000000000000000 [ 387.323635][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.323650][ T7538] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 387.323688][ T7538] [ 387.798974][ T7344] team0: Port device team_slave_0 added [ 387.844911][ T7544] netlink: Invalid conntrack helper [ 387.844937][ T7544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.929794][ T7546] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 389.094306][ T7344] team0: Port device team_slave_1 added [ 389.439085][ T7273] hsr_slave_0: entered promiscuous mode [ 389.440115][ T7273] hsr_slave_1: entered promiscuous mode [ 389.440878][ T7273] debugfs: 'hsr0' already exists in 'hsr' [ 389.440899][ T7273] Cannot create hsr debugfs directory [ 389.552282][ T7548] Attempt to restore checkpoint with obsolete wellknown handles [ 389.583547][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.583563][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.583583][ T7344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.800208][ T3390] hsr_slave_0: left promiscuous mode [ 389.847815][ T3390] hsr_slave_1: left promiscuous mode [ 389.849198][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.905112][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.157050][ T3390] hsr_slave_0: left promiscuous mode [ 390.195614][ T3390] hsr_slave_1: left promiscuous mode [ 390.196799][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.259234][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.808979][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 390.978076][ T3390] hsr_slave_0: left promiscuous mode [ 390.997119][ T3390] hsr_slave_1: left promiscuous mode [ 390.998400][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.035879][ T3390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.374187][ T5707] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 391.534139][ T5707] usb 4-1: Using ep0 maxpacket: 8 [ 391.535038][ T5707] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 391.536521][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.539483][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.539510][ T5707] usb 4-1: Product: syz [ 391.539527][ T5707] usb 4-1: Manufacturer: syz [ 391.539544][ T5707] usb 4-1: SerialNumber: syz [ 391.602016][ T5707] usb 4-1: config 0 descriptor?? [ 391.624072][ T5707] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 391.624171][ T5707] usb 4-1: selecting invalid altsetting 1 [ 391.844797][ T3390] team0 (unregistering): Port device team_slave_1 removed [ 391.884783][ T7582] netlink: 96 bytes leftover after parsing attributes in process `syz.1.354'. [ 391.913029][ T3390] team0 (unregistering): Port device team_slave_0 removed [ 392.141118][ T5707] gspca_stk014: reg_r err -110 [ 392.141248][ T5707] stk014 4-1:0.0: probe with driver stk014 failed with error -110 [ 392.143257][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.354'. [ 392.414663][ T6347] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 392.572036][ T6347] usb 2-1: device descriptor read/64, error -71 [ 392.581919][ T3390] team0 (unregistering): Port device team_slave_1 removed [ 392.626105][ T3390] team0 (unregistering): Port device team_slave_0 removed [ 392.943980][ T6347] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 393.064630][ T3390] team0 (unregistering): Port device team_slave_1 removed [ 393.094682][ T3390] team0 (unregistering): Port device team_slave_0 removed [ 393.312748][ T6347] usb 2-1: device descriptor read/64, error -71 [ 393.424430][ T6347] usb usb2-port1: attempt power cycle [ 393.479657][ T5780] usb 4-1: USB disconnect, device number 9 [ 393.503305][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.503321][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.503341][ T7344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.906726][ T6347] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 394.702605][ T6347] usb 2-1: device descriptor read/8, error -71 [ 394.934150][ T6347] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 394.955415][ T6347] usb 2-1: device descriptor read/8, error -71 [ 395.064411][ T6347] usb usb2-port1: unable to enumerate USB device [ 396.039432][ T7344] hsr_slave_0: entered promiscuous mode [ 396.040937][ T7344] hsr_slave_1: entered promiscuous mode [ 396.043535][ T7344] debugfs: 'hsr0' already exists in 'hsr' [ 396.043558][ T7344] Cannot create hsr debugfs directory [ 397.738265][ T7229] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 399.351631][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.414407][ T7229] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 399.501577][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.581035][ T7229] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 399.680704][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.909318][ T7229] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.019822][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.427206][ T5780] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 400.584100][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 400.585063][ T5780] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 400.588799][ T5780] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 400.588829][ T5780] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 400.588852][ T5780] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 400.588874][ T5780] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 400.588895][ T5780] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 400.588919][ T5780] usb 4-1: config 0 has no interface number 0 [ 400.588966][ T5780] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 400.588997][ T5780] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 400.589023][ T5780] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 400.589062][ T5780] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.589092][ T5780] usb 4-1: config 0 interface 125 has no altsetting 0 [ 400.589113][ T5780] usb 4-1: config 0 interface 125 has no altsetting 2 [ 400.592033][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.592060][ T5780] usb 4-1: Product: syz [ 400.592076][ T5780] usb 4-1: Manufacturer: syz [ 400.592091][ T5780] usb 4-1: SerialNumber: syz [ 400.687221][ T5780] usb 4-1: config 0 descriptor?? [ 400.880483][ T5780] usb 4-1: selecting invalid altsetting 2 [ 401.846672][ T7273] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.045622][ T5780] get_1284_register timeout [ 402.052101][ C0] usb 4-1: async_complete: urb error -71 [ 402.052221][ C0] usb 4-1: async_complete: urb error -71 [ 402.052315][ C0] usb 4-1: async_complete: urb error -71 [ 402.081368][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.097292][ T7273] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.245989][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.268099][ T7273] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 402.384105][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.434832][ T7273] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 402.497770][ T5780] usb 4-1: USB disconnect, device number 10 [ 402.581240][ T6973] udevd[6973]: setting mode of /dev/bus/usb/004/010 to 020664 failed: No such file or directory [ 402.581439][ T6973] udevd[6973]: setting owner of /dev/bus/usb/004/010 to uid=0, gid=0 failed: No such file or directory [ 402.583393][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.982933][ T7344] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 406.070439][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.143592][ T7344] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 406.311875][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.348035][ T7344] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 407.412764][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.611728][ T7344] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 407.931847][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.960382][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.271694][ T7229] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.034325][ T3390] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.034468][ T3390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.172926][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.173067][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.844989][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.153193][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.240382][ T4902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.329777][ T4902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.331099][ T4902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.352665][ T4902] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.362686][ T4902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.532222][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.566777][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.566949][ T1453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.663735][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.673829][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.920410][ T7344] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.537297][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.537441][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.640126][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.640309][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.854266][ T4902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 412.890335][ T4902] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 412.891809][ T4902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 412.912740][ T4902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 412.929424][ T4902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.485878][ T5593] Bluetooth: hci1: command tx timeout [ 413.840802][ T7762] ubi: mtd0 is already attached to ubi0 [ 415.084206][ T5593] Bluetooth: hci2: command tx timeout [ 415.571304][ T5593] Bluetooth: hci1: command tx timeout [ 415.614174][ T1578] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 415.784919][ T1578] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 415.786482][ T1578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.891989][ T1578] usb 2-1: config 0 descriptor?? [ 415.951504][ T7777] FAULT_INJECTION: forcing a failure. [ 415.951504][ T7777] name failslab, interval 1, probability 0, space 0, times 0 [ 415.951549][ T7777] CPU: 0 UID: 0 PID: 7777 Comm: syz.3.377 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 415.951577][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 415.951593][ T7777] Call Trace: [ 415.951614][ T7777] [ 415.951625][ T7777] dump_stack_lvl+0xe8/0x150 [ 415.951667][ T7777] should_fail_ex+0x46b/0x600 [ 415.951708][ T7777] should_failslab+0xa8/0x100 [ 415.951748][ T7777] __kmalloc_noprof+0xfb/0x790 [ 415.951785][ T7777] ? udp_init_sock+0x1a9/0x3c0 [ 415.951822][ T7777] ? udp_init_sock+0x1a9/0x3c0 [ 415.951872][ T7777] udp_init_sock+0x1a9/0x3c0 [ 415.951916][ T7777] inet_create+0xd2c/0x1000 [ 415.951950][ T7777] ? inet_create+0x9d/0x1000 [ 415.951987][ T7777] __sock_create+0x4b3/0x9d0 [ 415.952034][ T7777] udp_sock_create4+0xc5/0x480 [ 415.952068][ T7777] ? __pfx_udp_sock_create4+0x10/0x10 [ 415.952124][ T7777] rxrpc_lookup_local+0xd75/0x1640 [ 415.952159][ T7777] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 415.952196][ T7777] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 415.952240][ T7777] ? __local_bh_enable+0x1e3/0x2f0 [ 415.952282][ T7777] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 415.952330][ T7777] rxrpc_sendmsg+0x34b/0x6b0 [ 415.952368][ T7777] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 415.952397][ T7777] sock_sendmsg_nosec+0x13a/0x180 [ 415.952436][ T7777] ____sys_sendmsg+0x565/0x870 [ 415.952474][ T7777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.952514][ T7777] ? import_iovec+0x73/0xa0 [ 415.952555][ T7777] ___sys_sendmsg+0x2a5/0x360 [ 415.952581][ T7777] ? __lock_acquire+0x747/0x2de0 [ 415.952618][ T7777] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.952650][ T7777] ? futex_wait+0x2a2/0x390 [ 415.952715][ T7777] ? __fget_files+0x2a/0x420 [ 415.952742][ T7777] ? __fget_files+0x3a8/0x420 [ 415.952782][ T7777] __x64_sys_sendmsg+0x1b7/0x290 [ 415.952816][ T7777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.952870][ T7777] do_syscall_64+0x166/0x520 [ 415.952894][ T7777] ? trace_irq_disable+0x3b/0x140 [ 415.952925][ T7777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.952952][ T7777] ? clear_bhb_loop+0x70/0xc0 [ 415.952983][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.953008][ T7777] RIP: 0033:0x7f905f18e159 [ 415.953031][ T7777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.953053][ T7777] RSP: 002b:00007f905d3a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.953081][ T7777] RAX: ffffffffffffffda RBX: 00007f905f416180 RCX: 00007f905f18e159 [ 415.953100][ T7777] RDX: 00000000200008c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 415.953144][ T7777] RBP: 00007f905f22506b R08: 0000000000000000 R09: 0000000000000000 [ 415.953161][ T7777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.953176][ T7777] R13: 00007f905f416218 R14: 00007f905f416180 R15: 00007ffea56aa818 [ 415.953217][ T7777] [ 416.361250][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.392144][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.164122][ T5593] Bluetooth: hci2: command tx timeout [ 417.644079][ T5593] Bluetooth: hci1: command tx timeout [ 419.245055][ T5593] Bluetooth: hci2: command tx timeout [ 419.724108][ T5593] Bluetooth: hci1: command tx timeout [ 419.724742][ T1578] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 419.725245][ T1578] [drm:udl_init] *ERROR* Selecting channel failed [ 420.714863][ T4902] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.784631][ T4902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.806401][ T4902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.834168][ T4902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.839525][ T4902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.404642][ T5593] Bluetooth: hci2: command tx timeout [ 422.888779][ T1578] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 422.888817][ T1578] [drm] Initialized udl on minor 1 [ 423.204732][ T1578] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 423.326649][ T1578] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 423.521948][ T1578] usb 2-1: USB disconnect, device number 28 [ 424.364913][ T5593] Bluetooth: hci3: command tx timeout [ 424.571025][ T7822] FAULT_INJECTION: forcing a failure. [ 424.571025][ T7822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.571068][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 424.571094][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 424.571109][ T7822] Call Trace: [ 424.571118][ T7822] [ 424.571128][ T7822] dump_stack_lvl+0xe8/0x150 [ 424.571170][ T7822] should_fail_ex+0x46b/0x600 [ 424.571207][ T7822] _copy_to_user+0x31/0xb0 [ 424.571250][ T7822] simple_read_from_buffer+0xe1/0x170 [ 424.571283][ T7822] proc_fail_nth_read+0x1be/0x230 [ 424.571317][ T7822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.571350][ T7822] ? rw_verify_area+0x250/0x4d0 [ 424.571380][ T7822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.571409][ T7822] vfs_read+0x219/0xa90 [ 424.571446][ T7822] ? __pfx_vfs_read+0x10/0x10 [ 424.571476][ T7822] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 424.571503][ T7822] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 424.571527][ T7822] ? mutex_lock_nested+0x152/0x1d0 [ 424.571556][ T7822] ? fdget_pos+0x252/0x320 [ 424.571592][ T7822] ksys_read+0x156/0x270 [ 424.571622][ T7822] ? __pfx_ksys_read+0x10/0x10 [ 424.571662][ T7822] do_syscall_64+0x166/0x520 [ 424.571685][ T7822] ? trace_irq_disable+0x3b/0x140 [ 424.571716][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.571749][ T7822] ? clear_bhb_loop+0x70/0xc0 [ 424.571779][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.571803][ T7822] RIP: 0033:0x7f905f14e98e [ 424.571825][ T7822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 424.571845][ T7822] RSP: 002b:00007f905d3e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.571870][ T7822] RAX: ffffffffffffffda RBX: 00007f905d3e66c0 RCX: 00007f905f14e98e [ 424.571888][ T7822] RDX: 000000000000000f RSI: 00007f905d3e60a0 RDI: 0000000000000005 [ 424.571903][ T7822] RBP: 00007f905d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.571919][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.571933][ T7822] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 424.571971][ T7822] [ 426.445965][ T4902] Bluetooth: hci3: command tx timeout [ 426.737630][ T7847] netlink: 43 bytes leftover after parsing attributes in process `syz.3.391'. [ 427.630538][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 428.524049][ T4902] Bluetooth: hci3: command tx timeout [ 430.605268][ T4902] Bluetooth: hci3: command tx timeout [ 433.504611][ T36] bridge_slave_1: left allmulticast mode [ 433.504654][ T36] bridge_slave_1: left promiscuous mode [ 433.504933][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.701215][ T36] bridge_slave_0: left allmulticast mode [ 433.701278][ T36] bridge_slave_0: left promiscuous mode [ 433.701543][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.737879][ T7914] FAULT_INJECTION: forcing a failure. [ 434.737879][ T7914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.737925][ T7914] CPU: 0 UID: 0 PID: 7914 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 434.737955][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 434.737979][ T7914] Call Trace: [ 434.737989][ T7914] [ 434.737999][ T7914] dump_stack_lvl+0xe8/0x150 [ 434.738041][ T7914] should_fail_ex+0x46b/0x600 [ 434.738080][ T7914] _copy_from_user+0x2d/0xb0 [ 434.738117][ T7914] get_itimerspec64+0x1ca/0x310 [ 434.738158][ T7914] ? __pfx_get_itimerspec64+0x10/0x10 [ 434.738197][ T7914] ? __pfx_do_futex+0x10/0x10 [ 434.738228][ T7914] __x64_sys_timerfd_settime+0x149/0x240 [ 434.738258][ T7914] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 434.738305][ T7914] do_syscall_64+0x166/0x520 [ 434.738328][ T7914] ? trace_irq_disable+0x3b/0x140 [ 434.738358][ T7914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.738382][ T7914] ? clear_bhb_loop+0x70/0xc0 [ 434.738409][ T7914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.738432][ T7914] RIP: 0033:0x7fc8569ae159 [ 434.738455][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.738476][ T7914] RSP: 002b:00007fc854c06028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 434.738502][ T7914] RAX: ffffffffffffffda RBX: 00007fc856c35fa0 RCX: 00007fc8569ae159 [ 434.738520][ T7914] RDX: 0000200000000380 RSI: 0000000000000005 RDI: 0000000000000005 [ 434.738536][ T7914] RBP: 00007fc856a4506b R08: 0000000000000000 R09: 0000000000000000 [ 434.738551][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.738566][ T7914] R13: 00007fc856c36038 R14: 00007fc856c35fa0 R15: 00007ffe952d4f78 [ 434.738603][ T7914] [ 434.942593][ T7914] IPv6: Can't replace route, no match found [ 435.821054][ T7923] FAULT_INJECTION: forcing a failure. [ 435.821054][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.821103][ T7923] CPU: 0 UID: 0 PID: 7923 Comm: syz.3.402 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 435.821133][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 435.821149][ T7923] Call Trace: [ 435.821160][ T7923] [ 435.821171][ T7923] dump_stack_lvl+0xe8/0x150 [ 435.821214][ T7923] should_fail_ex+0x46b/0x600 [ 435.821254][ T7923] _copy_to_user+0x31/0xb0 [ 435.821294][ T7923] rng_dev_read+0x3ed/0x7c0 [ 435.821336][ T7923] ? __pfx_rng_dev_read+0x10/0x10 [ 435.821379][ T7923] ? bpf_lsm_file_permission+0x9/0x20 [ 435.821405][ T7923] ? security_file_permission+0x75/0x260 [ 435.821439][ T7923] ? rw_verify_area+0x250/0x4d0 [ 435.821475][ T7923] vfs_readv+0x588/0x850 [ 435.821513][ T7923] ? __pfx_rng_dev_read+0x10/0x10 [ 435.821558][ T7923] ? __pfx_vfs_readv+0x10/0x10 [ 435.821611][ T7923] ? __fget_files+0x2a/0x420 [ 435.821643][ T7923] ? __fget_files+0x3a8/0x420 [ 435.821668][ T7923] ? __fget_files+0x2a/0x420 [ 435.821704][ T7923] __x64_sys_preadv+0x19f/0x2c0 [ 435.821740][ T7923] ? __pfx___x64_sys_preadv+0x10/0x10 [ 435.821795][ T7923] do_syscall_64+0x166/0x520 [ 435.821820][ T7923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.821846][ T7923] ? clear_bhb_loop+0x70/0xc0 [ 435.821877][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.821903][ T7923] RIP: 0033:0x7f905f18e159 [ 435.821926][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.821949][ T7923] RSP: 002b:00007f905d3c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 435.821976][ T7923] RAX: ffffffffffffffda RBX: 00007f905f416090 RCX: 00007f905f18e159 [ 435.821995][ T7923] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 435.822011][ T7923] RBP: 00007f905f22506b R08: 0000000000000000 R09: 0000000000000000 [ 435.822027][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.822042][ T7923] R13: 00007f905f416128 R14: 00007f905f416090 R15: 00007ffea56aa818 [ 435.822083][ T7923] [ 437.560342][ T7923] input: syz1 as /devices/virtual/input/input29 [ 440.366543][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.366596][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.506343][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.674999][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.784876][ T36] bond0 (unregistering): Released all slaves [ 441.135230][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.135409][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.135706][ T7733] bridge_slave_0: entered allmulticast mode [ 441.196580][ T7733] bridge_slave_0: entered promiscuous mode [ 441.359564][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.359728][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.359939][ T7733] bridge_slave_1: entered allmulticast mode [ 441.388958][ T7733] bridge_slave_1: entered promiscuous mode [ 441.904960][ T36] hsr_slave_0: left promiscuous mode [ 441.954128][ T36] hsr_slave_1: left promiscuous mode [ 441.959064][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.177115][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.236288][ T36] team0 (unregistering): Port device team_slave_1 removed [ 444.282690][ T7963] FAULT_INJECTION: forcing a failure. [ 444.282690][ T7963] name failslab, interval 1, probability 0, space 0, times 0 [ 444.282730][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: syz.1.410 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.282758][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 444.282773][ T7963] Call Trace: [ 444.282781][ T7963] [ 444.282792][ T7963] dump_stack_lvl+0xe8/0x150 [ 444.282832][ T7963] should_fail_ex+0x46b/0x600 [ 444.282870][ T7963] should_failslab+0xa8/0x100 [ 444.282910][ T7963] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 444.282944][ T7963] ? __lock_acquire+0x747/0x2de0 [ 444.282975][ T7963] ? __kernfs_new_node+0xac/0xa70 [ 444.283003][ T7963] ? __kernfs_new_node+0xac/0xa70 [ 444.283040][ T7963] kstrdup+0x42/0x100 [ 444.283066][ T7963] __kernfs_new_node+0xac/0xa70 [ 444.283106][ T7963] ? __pfx___kernfs_new_node+0x10/0x10 [ 444.283142][ T7963] ? kernfs_root+0x1c/0x230 [ 444.283177][ T7963] ? kernfs_root+0x1c/0x230 [ 444.283214][ T7963] ? kernfs_root+0x1c/0x230 [ 444.283241][ T7963] ? kernfs_root+0x1c/0x230 [ 444.283273][ T7963] kernfs_create_dir_ns+0xfe/0x230 [ 444.283312][ T7963] sysfs_create_dir_ns+0x12f/0x2a0 [ 444.283343][ T7963] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 444.283376][ T7963] ? rt_spin_unlock+0x165/0x200 [ 444.283409][ T7963] kobject_add_internal+0x62c/0xce0 [ 444.283453][ T7963] kobject_add+0x163/0x240 [ 444.283488][ T7963] ? __pfx_kobject_add+0x10/0x10 [ 444.283518][ T7963] ? bus_get_dev_root+0x12d/0x160 [ 444.283552][ T7963] ? get_device_parent+0x396/0x3a0 [ 444.283584][ T7963] ? __pfx_klist_children_get+0x10/0x10 [ 444.283615][ T7963] device_add+0x3fa/0xb80 [ 444.283651][ T7963] iommu_mock_device_add+0x83/0x1e0 [ 444.283689][ T7963] iommufd_test+0x38d9/0x6370 [ 444.283723][ T7963] ? __lock_acquire+0x747/0x2de0 [ 444.283753][ T7963] ? __pfx_iommufd_test+0x10/0x10 [ 444.283791][ T7963] ? tomoyo_path_number_perm+0x219/0x5f0 [ 444.283823][ T7963] ? tomoyo_path_number_perm+0x219/0x5f0 [ 444.283855][ T7963] ? lock_acquire+0x115/0x350 [ 444.283910][ T7963] iommufd_fops_ioctl+0x468/0x600 [ 444.283946][ T7963] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 444.283990][ T7963] ? __fget_files+0x2a/0x420 [ 444.284020][ T7963] ? bpf_lsm_file_ioctl+0x9/0x20 [ 444.284046][ T7963] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 444.284075][ T7963] __se_sys_ioctl+0xff/0x170 [ 444.284108][ T7963] do_syscall_64+0x166/0x520 [ 444.284131][ T7963] ? trace_irq_disable+0x3b/0x140 [ 444.284161][ T7963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.284186][ T7963] ? clear_bhb_loop+0x70/0xc0 [ 444.284224][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.284247][ T7963] RIP: 0033:0x7fc8569ae159 [ 444.284270][ T7963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.284291][ T7963] RSP: 002b:00007fc854c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.284316][ T7963] RAX: ffffffffffffffda RBX: 00007fc856c35fa0 RCX: 00007fc8569ae159 [ 444.284334][ T7963] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 444.284350][ T7963] RBP: 00007fc856a4506b R08: 0000000000000000 R09: 0000000000000000 [ 444.284366][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.284380][ T7963] R13: 00007fc856c36038 R14: 00007fc856c35fa0 R15: 00007ffe952d4f78 [ 444.284418][ T7963] [ 444.294378][ T7963] kobject: kobject_add_internal failed for iommufd_mock0 (error: -12 parent: devices) [ 444.704703][ T36] team0 (unregistering): Port device team_slave_0 removed [ 444.931442][ T7966] netlink: 'syz.1.411': attribute type 2 has an invalid length. [ 445.837497][ T7733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.872752][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.872885][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.873133][ T7752] bridge_slave_0: entered allmulticast mode [ 445.912340][ T7752] bridge_slave_0: entered promiscuous mode [ 445.964784][ T7733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.966279][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.966495][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.966705][ T7752] bridge_slave_1: entered allmulticast mode [ 445.969617][ T7752] bridge_slave_1: entered promiscuous mode [ 446.292459][ T7733] team0: Port device team_slave_0 added [ 446.508852][ T7752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.725728][ T7733] team0: Port device team_slave_1 added [ 447.868718][ T7752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.574117][ T5714] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 448.778491][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.778513][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.778545][ T7733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.787002][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 448.787948][ T5714] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 448.789439][ T5714] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 448.789484][ T5714] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 448.789508][ T5714] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 448.789531][ T5714] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 448.789553][ T5714] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 448.789576][ T5714] usb 2-1: config 0 has no interface number 0 [ 448.789626][ T5714] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 448.789659][ T5714] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 448.789685][ T5714] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 448.789725][ T5714] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.789757][ T5714] usb 2-1: config 0 interface 125 has no altsetting 0 [ 448.789777][ T5714] usb 2-1: config 0 interface 125 has no altsetting 2 [ 448.792996][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.793025][ T5714] usb 2-1: Product: syz [ 448.793042][ T5714] usb 2-1: Manufacturer: syz [ 448.793059][ T5714] usb 2-1: SerialNumber: syz [ 448.824783][ T5714] usb 2-1: config 0 descriptor?? [ 449.099270][ T5714] usb 2-1: selecting invalid altsetting 2 [ 449.187541][ T7752] team0: Port device team_slave_0 added [ 449.188554][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.188571][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.188604][ T7733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.447716][ T7752] team0: Port device team_slave_1 added [ 449.916494][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.916517][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.916547][ T7752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.082934][ T7795] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.083084][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.083297][ T7795] bridge_slave_0: entered allmulticast mode [ 450.108941][ T7795] bridge_slave_0: entered promiscuous mode [ 450.152658][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.152681][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.152714][ T7752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.204677][ T5714] get_1284_register timeout [ 450.216431][ C0] usb 2-1: async_complete: urb error -104 [ 450.225036][ C0] usb 2-1: async_complete: urb error -104 [ 450.225145][ C0] usb 2-1: async_complete: urb error -104 [ 450.225244][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 450.303084][ T7733] hsr_slave_0: entered promiscuous mode [ 450.318309][ T7733] hsr_slave_1: entered promiscuous mode [ 450.338154][ T7733] debugfs: 'hsr0' already exists in 'hsr' [ 450.338185][ T7733] Cannot create hsr debugfs directory [ 450.339581][ T7795] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.339682][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.339853][ T7795] bridge_slave_1: entered allmulticast mode [ 450.400950][ T7795] bridge_slave_1: entered promiscuous mode [ 450.464612][ T5714] usb 2-1: USB disconnect, device number 29 [ 451.092579][ T7795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.752896][ T8011] FAULT_INJECTION: forcing a failure. [ 451.752896][ T8011] name failslab, interval 1, probability 0, space 0, times 0 [ 451.752940][ T8011] CPU: 0 UID: 0 PID: 8011 Comm: syz.3.418 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 451.752968][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 451.752983][ T8011] Call Trace: [ 451.752999][ T8011] [ 451.753008][ T8011] dump_stack_lvl+0xe8/0x150 [ 451.753047][ T8011] should_fail_ex+0x46b/0x600 [ 451.753083][ T8011] should_failslab+0xa8/0x100 [ 451.753127][ T8011] ? __kernfs_new_node+0xe7/0xa70 [ 451.753157][ T8011] kmem_cache_alloc_noprof+0x9e/0x690 [ 451.753196][ T8011] ? __kernfs_new_node+0xe7/0xa70 [ 451.753232][ T8011] __kernfs_new_node+0xe7/0xa70 [ 451.753270][ T8011] ? __pfx___kernfs_new_node+0x10/0x10 [ 451.753301][ T8011] ? kernfs_root+0x1c/0x230 [ 451.753335][ T8011] ? kernfs_root+0x1c/0x230 [ 451.753364][ T8011] ? kernfs_root+0x1c/0x230 [ 451.753591][ T8011] ? kernfs_root+0x1c/0x230 [ 451.753637][ T8011] kernfs_create_dir_ns+0xfe/0x230 [ 451.753680][ T8011] sysfs_create_dir_ns+0x12f/0x2a0 [ 451.753714][ T8011] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 451.753752][ T8011] ? rt_spin_unlock+0x165/0x200 [ 451.753785][ T8011] kobject_add_internal+0x62c/0xce0 [ 451.753822][ T8011] kobject_add+0x163/0x240 [ 451.753856][ T8011] ? __pfx_kobject_add+0x10/0x10 [ 451.753887][ T8011] ? bus_get_dev_root+0x12d/0x160 [ 451.753982][ T8011] ? get_device_parent+0x396/0x3a0 [ 451.754018][ T8011] ? __pfx_klist_children_get+0x10/0x10 [ 451.754050][ T8011] device_add+0x3fa/0xb80 [ 451.754101][ T8011] iommu_mock_device_add+0x83/0x1e0 [ 451.754139][ T8011] iommufd_test+0x38d9/0x6370 [ 451.754176][ T8011] ? __lock_acquire+0x747/0x2de0 [ 451.754207][ T8011] ? __pfx_iommufd_test+0x10/0x10 [ 451.754248][ T8011] ? tomoyo_path_number_perm+0x219/0x5f0 [ 451.754281][ T8011] ? tomoyo_path_number_perm+0x219/0x5f0 [ 451.754316][ T8011] ? lock_acquire+0x115/0x350 [ 451.754376][ T8011] iommufd_fops_ioctl+0x468/0x600 [ 451.754416][ T8011] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 451.754468][ T8011] ? __fget_files+0x2a/0x420 [ 451.754503][ T8011] ? bpf_lsm_file_ioctl+0x9/0x20 [ 451.754532][ T8011] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 451.754566][ T8011] __se_sys_ioctl+0xff/0x170 [ 451.754603][ T8011] do_syscall_64+0x166/0x520 [ 451.754629][ T8011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.754657][ T8011] ? clear_bhb_loop+0x70/0xc0 [ 451.754688][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.754713][ T8011] RIP: 0033:0x7f905f18e159 [ 451.754736][ T8011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.754760][ T8011] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 451.754802][ T8011] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 451.754821][ T8011] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 451.754838][ T8011] RBP: 00007f905f22506b R08: 0000000000000000 R09: 0000000000000000 [ 451.754854][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.754870][ T8011] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 451.754910][ T8011] [ 452.104911][ T8011] kobject: kobject_add_internal failed for iommufd_mock0 (error: -12 parent: devices) [ 452.791567][ T7795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.964777][ T5248] 8021q: adding VLAN 0 to HW filter on device eth13 [ 453.164792][ T7752] hsr_slave_0: entered promiscuous mode [ 453.166255][ T7752] hsr_slave_1: entered promiscuous mode [ 453.167192][ T7752] debugfs: 'hsr0' already exists in 'hsr' [ 453.167217][ T7752] Cannot create hsr debugfs directory [ 453.446657][ T8014] Attempt to restore checkpoint with obsolete wellknown handles [ 453.903635][ T7795] team0: Port device team_slave_0 added [ 454.169204][ T7795] team0: Port device team_slave_1 added [ 455.060961][ T7795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.060985][ T7795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.061017][ T7795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.190015][ T7795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.190037][ T7795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.190069][ T7795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.249522][ T7795] hsr_slave_0: entered promiscuous mode [ 456.259873][ T7795] hsr_slave_1: entered promiscuous mode [ 456.262721][ T7795] debugfs: 'hsr0' already exists in 'hsr' [ 456.262748][ T7795] Cannot create hsr debugfs directory [ 456.414003][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 456.567411][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 456.568692][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 456.568736][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 456.571431][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 456.571461][ T9] usb 4-1: config 1 has no interface number 0 [ 456.571511][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 456.571545][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 456.571577][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 456.571626][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 456.571658][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x3 has invalid wMaxPacketSize 0 [ 456.571684][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.571714][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 456.723053][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.723088][ T9] usb 4-1: Product: syz [ 456.723105][ T9] usb 4-1: Manufacturer: syz [ 456.723121][ T9] usb 4-1: SerialNumber: syz [ 456.761537][ T8041] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 456.761797][ T8041] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.456739][ T9] ums-usbat 4-1:1.116: USB Mass Storage device detected [ 457.603172][ T9] ums-usbat 4-1:1.116: probe with driver ums-usbat failed with error -5 [ 457.649478][ T9] usb 4-1: USB disconnect, device number 11 [ 458.664755][ T7967] syz.1.411 (7967) used greatest stack depth: 18488 bytes left [ 458.866614][ T8073] FAULT_INJECTION: forcing a failure. [ 458.866614][ T8073] name failslab, interval 1, probability 0, space 0, times 0 [ 458.866656][ T8073] CPU: 1 UID: 0 PID: 8073 Comm: syz.1.426 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 458.866685][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 458.866700][ T8073] Call Trace: [ 458.866709][ T8073] [ 458.866719][ T8073] dump_stack_lvl+0xe8/0x150 [ 458.866760][ T8073] should_fail_ex+0x46b/0x600 [ 458.866799][ T8073] should_failslab+0xa8/0x100 [ 458.866838][ T8073] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 458.866871][ T8073] ? __lock_acquire+0x747/0x2de0 [ 458.866901][ T8073] ? __kernfs_new_node+0xac/0xa70 [ 458.866930][ T8073] ? __kernfs_new_node+0xac/0xa70 [ 458.866967][ T8073] kstrdup+0x42/0x100 [ 458.866991][ T8073] __kernfs_new_node+0xac/0xa70 [ 458.867031][ T8073] ? __pfx___kernfs_new_node+0x10/0x10 [ 458.867062][ T8073] ? kernfs_root+0x1c/0x230 [ 458.867098][ T8073] ? kernfs_root+0x1c/0x230 [ 458.867125][ T8073] ? kernfs_root+0x1c/0x230 [ 458.867151][ T8073] ? kernfs_root+0x1c/0x230 [ 458.867184][ T8073] kernfs_create_dir_ns+0xfe/0x230 [ 458.867219][ T8073] sysfs_create_dir_ns+0x12f/0x2a0 [ 458.867249][ T8073] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.867282][ T8073] ? rt_spin_unlock+0x165/0x200 [ 458.867317][ T8073] kobject_add_internal+0x62c/0xce0 [ 458.867355][ T8073] kobject_add+0x163/0x240 [ 458.867388][ T8073] ? __pfx_kobject_add+0x10/0x10 [ 458.867416][ T8073] ? bus_get_dev_root+0x12d/0x160 [ 458.867464][ T8073] ? get_device_parent+0x396/0x3a0 [ 458.867496][ T8073] ? __pfx_klist_children_get+0x10/0x10 [ 458.867527][ T8073] device_add+0x3fa/0xb80 [ 458.867563][ T8073] iommu_mock_device_add+0x83/0x1e0 [ 458.867602][ T8073] iommufd_test+0x38d9/0x6370 [ 458.867637][ T8073] ? __lock_acquire+0x747/0x2de0 [ 458.867666][ T8073] ? __pfx_iommufd_test+0x10/0x10 [ 458.867702][ T8073] ? tomoyo_path_number_perm+0x219/0x5f0 [ 458.867733][ T8073] ? tomoyo_path_number_perm+0x219/0x5f0 [ 458.867765][ T8073] ? lock_acquire+0x115/0x350 [ 458.867822][ T8073] iommufd_fops_ioctl+0x468/0x600 [ 458.867863][ T8073] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 458.867908][ T8073] ? __fget_files+0x2a/0x420 [ 458.867937][ T8073] ? bpf_lsm_file_ioctl+0x9/0x20 [ 458.867964][ T8073] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 458.867994][ T8073] __se_sys_ioctl+0xff/0x170 [ 458.868027][ T8073] do_syscall_64+0x166/0x520 [ 458.868050][ T8073] ? trace_irq_disable+0x3b/0x140 [ 458.868080][ T8073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.868104][ T8073] ? clear_bhb_loop+0x70/0xc0 [ 458.868132][ T8073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.868156][ T8073] RIP: 0033:0x7fc8569ae159 [ 458.868178][ T8073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.868199][ T8073] RSP: 002b:00007fc854c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.868225][ T8073] RAX: ffffffffffffffda RBX: 00007fc856c35fa0 RCX: 00007fc8569ae159 [ 458.868243][ T8073] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 458.868260][ T8073] RBP: 00007fc856a4506b R08: 0000000000000000 R09: 0000000000000000 [ 458.868274][ T8073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.868289][ T8073] R13: 00007fc856c36038 R14: 00007fc856c35fa0 R15: 00007ffe952d4f78 [ 458.868327][ T8073] [ 458.883751][ T8073] kobject: kobject_add_internal failed for iommufd_mock0 (error: -12 parent: devices) [ 461.185442][ T8031] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 461.375138][ T8031] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 461.376527][ T8031] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.376584][ T8031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.457353][ T8096] FAULT_INJECTION: forcing a failure. [ 461.457353][ T8096] name failslab, interval 1, probability 0, space 0, times 0 [ 461.457391][ T8096] CPU: 0 UID: 0 PID: 8096 Comm: syz.1.434 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.457417][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 461.457432][ T8096] Call Trace: [ 461.457442][ T8096] [ 461.457451][ T8096] dump_stack_lvl+0xe8/0x150 [ 461.457490][ T8096] should_fail_ex+0x46b/0x600 [ 461.457528][ T8096] should_failslab+0xa8/0x100 [ 461.457566][ T8096] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 461.457598][ T8096] ? __lock_acquire+0x747/0x2de0 [ 461.457626][ T8096] ? __kernfs_new_node+0xac/0xa70 [ 461.457654][ T8096] ? __kernfs_new_node+0xac/0xa70 [ 461.457688][ T8096] kstrdup+0x42/0x100 [ 461.457711][ T8096] __kernfs_new_node+0xac/0xa70 [ 461.457760][ T8096] ? __pfx___kernfs_new_node+0x10/0x10 [ 461.457791][ T8096] ? kernfs_root+0x1c/0x230 [ 461.457825][ T8096] ? kernfs_root+0x1c/0x230 [ 461.457853][ T8096] ? kernfs_root+0x1c/0x230 [ 461.457874][ T8096] ? kernfs_root+0x1c/0x230 [ 461.457903][ T8096] kernfs_create_dir_ns+0xfe/0x230 [ 461.457938][ T8096] sysfs_create_dir_ns+0x12f/0x2a0 [ 461.457968][ T8096] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 461.458001][ T8096] ? rt_spin_unlock+0x165/0x200 [ 461.458035][ T8096] kobject_add_internal+0x62c/0xce0 [ 461.458071][ T8096] kobject_add+0x163/0x240 [ 461.458105][ T8096] ? __pfx_kobject_add+0x10/0x10 [ 461.458136][ T8096] ? bus_get_dev_root+0x12d/0x160 [ 461.458171][ T8096] ? get_device_parent+0x396/0x3a0 [ 461.458206][ T8096] ? __pfx_klist_children_get+0x10/0x10 [ 461.458247][ T8096] device_add+0x3fa/0xb80 [ 461.458285][ T8096] iommu_mock_device_add+0x83/0x1e0 [ 461.458326][ T8096] iommufd_test+0x38d9/0x6370 [ 461.458362][ T8096] ? __lock_acquire+0x747/0x2de0 [ 461.458393][ T8096] ? __pfx_iommufd_test+0x10/0x10 [ 461.458431][ T8096] ? tomoyo_path_number_perm+0x219/0x5f0 [ 461.458465][ T8096] ? tomoyo_path_number_perm+0x219/0x5f0 [ 461.458500][ T8096] ? lock_acquire+0x115/0x350 [ 461.458557][ T8096] iommufd_fops_ioctl+0x468/0x600 [ 461.458594][ T8096] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 461.458644][ T8096] ? __fget_files+0x2a/0x420 [ 461.458675][ T8096] ? bpf_lsm_file_ioctl+0x9/0x20 [ 461.458701][ T8096] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 461.458749][ T8096] __se_sys_ioctl+0xff/0x170 [ 461.458786][ T8096] do_syscall_64+0x166/0x520 [ 461.458809][ T8096] ? trace_irq_disable+0x3b/0x140 [ 461.458839][ T8096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.458864][ T8096] ? clear_bhb_loop+0x70/0xc0 [ 461.458893][ T8096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.458915][ T8096] RIP: 0033:0x7fc8569ae159 [ 461.458938][ T8096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.458959][ T8096] RSP: 002b:00007fc854c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.458985][ T8096] RAX: ffffffffffffffda RBX: 00007fc856c35fa0 RCX: 00007fc8569ae159 [ 461.459003][ T8096] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 461.459019][ T8096] RBP: 00007fc856a4506b R08: 0000000000000000 R09: 0000000000000000 [ 461.459035][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.459050][ T8096] R13: 00007fc856c36038 R14: 00007fc856c35fa0 R15: 00007ffe952d4f78 [ 461.459087][ T8096] [ 461.462976][ T8096] kobject: kobject_add_internal failed for iommufd_mock0 (error: -12 parent: devices) [ 462.101179][ T8088] tmpfs: Unknown parameter 'ge' [ 462.266248][ T8031] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 462.464017][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 462.484795][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.485533][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.572610][ T8031] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 462.627492][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 462.629968][ T9] usb 2-1: config 1 has an invalid interface number: 27 but max is 1 [ 462.629997][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.630019][ T9] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 462.630104][ T9] usb 2-1: config 1 has no interface number 2 [ 462.630196][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 462.630284][ T9] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.630315][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 462.768037][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.768134][ T9] usb 2-1: Product: syz [ 462.768151][ T9] usb 2-1: Manufacturer: syz [ 462.768167][ T9] usb 2-1: SerialNumber: syz [ 463.252764][ T8031] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0004/input/input30 [ 463.391628][ T8104] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 463.759967][ T5248] 8021q: adding VLAN 0 to HW filter on device eth15 [ 463.958824][ T8031] usb 4-1: USB disconnect, device number 12 [ 464.110965][ C0] usbatm_complete: 24 callbacks suppressed [ 464.110993][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0500 failed (-71)! [ 464.111939][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0400 failed (-71)! [ 464.111998][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0c00 failed (-71)! [ 464.170318][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0300 failed (-71)! [ 464.278673][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0500 failed (-71)! [ 464.278755][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0400 failed (-71)! [ 464.278811][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0c00 failed (-71)! [ 464.278862][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0300 failed (-71)! [ 464.319259][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 464.319725][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 464.320155][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 464.320596][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 464.321041][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 464.321479][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 464.321658][ T9] speedtch 2-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 464.321683][ T9] speedtch 2-1:1.27: usbatm_usb_probe: bind failed: -16! [ 464.321758][ T9] speedtch 2-1:1.27: probe with driver speedtch failed with error -16 [ 464.384763][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0500 failed (-71)! [ 464.384842][ C0] ATM dev 0: usbatm_complete: urb 0xffff88804caf0400 failed (-71)! [ 464.501260][ T7688] syz.1.371 (7688) used greatest stack depth: 18064 bytes left [ 464.562027][ T9] usb 2-1: USB disconnect, device number 30 [ 465.150495][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 465.409279][ T8137] netlink: 48 bytes leftover after parsing attributes in process `syz.3.438'. [ 467.538588][ T5248] 8021q: adding VLAN 0 to HW filter on device eth16 [ 468.186667][ T5780] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 468.360312][ T5780] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 468.363627][ T5780] usb 4-1: config 1 has an invalid interface number: 27 but max is 1 [ 468.363721][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.363745][ T5780] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 468.363770][ T5780] usb 4-1: config 1 has no interface number 2 [ 468.364167][ T5780] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 468.364199][ T5780] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.364230][ T5780] usb 4-1: config 1 interface 1 has no altsetting 0 [ 468.445968][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.446004][ T5780] usb 4-1: Product: syz [ 468.446022][ T5780] usb 4-1: Manufacturer: syz [ 468.446039][ T5780] usb 4-1: SerialNumber: syz [ 468.967325][ T8146] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 469.275055][ T36] bridge_slave_1: left allmulticast mode [ 469.275086][ T36] bridge_slave_1: left promiscuous mode [ 469.275278][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.426057][ T36] bridge_slave_0: left allmulticast mode [ 469.426103][ T36] bridge_slave_0: left promiscuous mode [ 469.426416][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.580789][ C0] usbatm_complete: 6 callbacks suppressed [ 469.580813][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285e900 failed (-71)! [ 469.580882][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285e400 failed (-71)! [ 469.580943][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285e600 failed (-71)! [ 469.581005][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285ea00 failed (-71)! [ 469.684154][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285e900 failed (-71)! [ 469.684236][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285e400 failed (-71)! [ 469.684299][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285e600 failed (-71)! [ 469.684362][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285ea00 failed (-71)! [ 469.806084][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285e900 failed (-71)! [ 469.806171][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803285e400 failed (-71)! [ 469.806930][ T5780] speedtch 4-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 469.806975][ T5780] speedtch 4-1:1.27: usbatm_usb_probe: bind failed: -16! [ 469.807044][ T5780] speedtch 4-1:1.27: probe with driver speedtch failed with error -16 [ 469.892987][ T36] bridge_slave_1: left allmulticast mode [ 469.893026][ T36] bridge_slave_1: left promiscuous mode [ 469.893276][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.942723][ T5780] usb 4-1: USB disconnect, device number 13 [ 470.105902][ T36] bridge_slave_0: left allmulticast mode [ 470.105933][ T36] bridge_slave_0: left promiscuous mode [ 470.106111][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.938720][ T8182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 471.241586][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 471.258424][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 471.260654][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 471.286040][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.301680][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 471.302521][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 471.439973][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.472070][ T36] bond0 (unregistering): Released all slaves [ 471.995437][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.034802][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.057133][ T36] bond0 (unregistering): Released all slaves [ 473.527854][ T4902] Bluetooth: hci5: command tx timeout [ 473.741935][ T8206] FAULT_INJECTION: forcing a failure. [ 473.741935][ T8206] name failslab, interval 1, probability 0, space 0, times 0 [ 473.741976][ T8206] CPU: 1 UID: 0 PID: 8206 Comm: syz.1.447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 473.742002][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 473.742017][ T8206] Call Trace: [ 473.742026][ T8206] [ 473.742036][ T8206] dump_stack_lvl+0xe8/0x150 [ 473.742084][ T8206] should_fail_ex+0x46b/0x600 [ 473.742124][ T8206] should_failslab+0xa8/0x100 [ 473.742159][ T8206] ? inet_bind2_bucket_create+0x34/0x510 [ 473.742201][ T8206] kmem_cache_alloc_noprof+0x9e/0x690 [ 473.742234][ T8206] ? inet_bind2_bucket_create+0x34/0x510 [ 473.742276][ T8206] inet_bind2_bucket_create+0x34/0x510 [ 473.742318][ T8206] inet_csk_get_port+0xf19/0x16e0 [ 473.742361][ T8206] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 473.742394][ T8206] ? lockdep_hardirqs_on+0x7b/0x110 [ 473.742425][ T8206] __inet_bind+0x5e0/0xaa0 [ 473.742463][ T8206] __sys_bind+0x2e9/0x410 [ 473.742506][ T8206] ? __pfx___sys_bind+0x10/0x10 [ 473.742554][ T8206] ? __pfx_ksys_write+0x10/0x10 [ 473.742592][ T8206] __x64_sys_bind+0x7a/0x90 [ 473.742627][ T8206] do_syscall_64+0x166/0x520 [ 473.742649][ T8206] ? trace_irq_disable+0x3b/0x140 [ 473.742680][ T8206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.742704][ T8206] ? clear_bhb_loop+0x70/0xc0 [ 473.742734][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.742758][ T8206] RIP: 0033:0x7fc8569ae159 [ 473.742780][ T8206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.742800][ T8206] RSP: 002b:00007fc854c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 473.742826][ T8206] RAX: ffffffffffffffda RBX: 00007fc856c35fa0 RCX: 00007fc8569ae159 [ 473.742843][ T8206] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 473.742859][ T8206] RBP: 00007fc854c06090 R08: 0000000000000000 R09: 0000000000000000 [ 473.742874][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.742888][ T8206] R13: 00007fc856c36038 R14: 00007fc856c35fa0 R15: 00007ffe952d4f78 [ 473.742927][ T8206] [ 473.874830][ T8202] Attempt to restore checkpoint with obsolete wellknown handles [ 474.478954][ T5593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 474.524881][ T5593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 474.529287][ T5593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 474.530664][ T5593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 474.531405][ T5593] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 474.599528][ T8216] FAULT_INJECTION: forcing a failure. [ 474.599528][ T8216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.599568][ T8216] CPU: 1 UID: 0 PID: 8216 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 474.599595][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 474.599610][ T8216] Call Trace: [ 474.599618][ T8216] [ 474.599628][ T8216] dump_stack_lvl+0xe8/0x150 [ 474.599668][ T8216] should_fail_ex+0x46b/0x600 [ 474.599705][ T8216] strncpy_from_user+0x36/0x2c0 [ 474.599739][ T8216] do_getname+0x77/0x250 [ 474.599778][ T8216] __se_sys_symlinkat+0x2e/0x2b0 [ 474.599816][ T8216] do_syscall_64+0x166/0x520 [ 474.599838][ T8216] ? trace_irq_disable+0x3b/0x140 [ 474.599868][ T8216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.599900][ T8216] ? clear_bhb_loop+0x70/0xc0 [ 474.599927][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.599958][ T8216] RIP: 0033:0x7f905f18e159 [ 474.599979][ T8216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.599999][ T8216] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 474.600024][ T8216] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 474.600042][ T8216] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000580 [ 474.600059][ T8216] RBP: 00007f905d3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 474.600074][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.600089][ T8216] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 474.600125][ T8216] [ 474.955236][ T36] hsr_slave_0: left promiscuous mode [ 475.024828][ T36] hsr_slave_1: left promiscuous mode [ 475.026226][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.034008][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 475.088078][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.244397][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 475.246750][ T10] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 475.247982][ T10] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 475.248010][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 475.248032][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 475.248056][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 475.248071][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 475.248086][ T10] usb 2-1: config 0 has no interface number 0 [ 475.248119][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 475.248140][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 475.248157][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 475.248182][ T10] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.248225][ T10] usb 2-1: config 0 interface 125 has no altsetting 0 [ 475.248245][ T10] usb 2-1: config 0 interface 125 has no altsetting 2 [ 475.250961][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.250988][ T10] usb 2-1: Product: syz [ 475.251004][ T10] usb 2-1: Manufacturer: syz [ 475.251026][ T10] usb 2-1: SerialNumber: syz [ 475.290436][ T10] usb 2-1: config 0 descriptor?? [ 475.412115][ T10] usb 2-1: selecting invalid altsetting 2 [ 475.434022][ T36] hsr_slave_0: left promiscuous mode [ 475.474078][ T36] hsr_slave_1: left promiscuous mode [ 475.475758][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.505803][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.566284][ T4902] Bluetooth: hci5: command tx timeout [ 476.083718][ T8232] netlink: 43 bytes leftover after parsing attributes in process `syz.3.453'. [ 476.443986][ T10] get_1284_register timeout [ 476.445414][ C0] usb 2-1: async_complete: urb error -104 [ 476.445924][ C0] usb 2-1: async_complete: urb error -104 [ 476.446111][ C0] usb 2-1: async_complete: urb error -104 [ 476.446496][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 476.731167][ T8029] usb 2-1: USB disconnect, device number 31 [ 476.930758][ T4902] Bluetooth: hci6: command tx timeout [ 477.256877][ T36] team0 (unregistering): Port device team_slave_1 removed [ 477.614715][ T36] team0 (unregistering): Port device team_slave_0 removed [ 477.644746][ T4902] Bluetooth: hci5: command tx timeout [ 478.293946][ T8028] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 478.463999][ T8028] usb 2-1: Using ep0 maxpacket: 16 [ 478.464859][ T8028] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 478.467141][ T8028] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 478.467170][ T8028] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 478.467193][ T8028] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 478.467215][ T8028] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 478.467237][ T8028] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 478.467260][ T8028] usb 2-1: config 0 has no interface number 0 [ 478.467309][ T8028] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 478.467340][ T8028] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 478.467366][ T8028] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 478.467404][ T8028] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.467433][ T8028] usb 2-1: config 0 interface 125 has no altsetting 0 [ 478.467453][ T8028] usb 2-1: config 0 interface 125 has no altsetting 2 [ 478.472704][ T8028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.472734][ T8028] usb 2-1: Product: syz [ 478.472751][ T8028] usb 2-1: Manufacturer: syz [ 478.472768][ T8028] usb 2-1: SerialNumber: syz [ 478.631022][ T36] team0 (unregistering): Port device team_slave_1 removed [ 478.683651][ T8028] usb 2-1: config 0 descriptor?? [ 478.721207][ T8028] usb 2-1: selecting invalid altsetting 2 [ 478.740613][ T36] team0 (unregistering): Port device team_slave_0 removed [ 479.003933][ T4902] Bluetooth: hci6: command tx timeout [ 479.734066][ T4902] Bluetooth: hci5: command tx timeout [ 479.762591][ T8248] kthread_run failed with err -4 [ 479.805720][ T8028] get_1284_register timeout [ 479.805890][ C1] usb 2-1: async_complete: urb error -104 [ 479.805997][ C1] usb 2-1: async_complete: urb error -104 [ 479.806093][ C1] usb 2-1: async_complete: urb error -104 [ 479.857781][ T8028] usb 2-1: USB disconnect, device number 32 [ 480.712834][ T8267] netlink: 43 bytes leftover after parsing attributes in process `syz.3.461'. [ 481.083985][ T4902] Bluetooth: hci6: command tx timeout [ 481.587087][ T5593] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 481.614708][ T5593] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 481.616021][ T5593] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 481.618242][ T5593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 481.662501][ T5593] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 482.968847][ T8301] FAULT_INJECTION: forcing a failure. [ 482.968847][ T8301] name failslab, interval 1, probability 0, space 0, times 0 [ 482.968889][ T8301] CPU: 1 UID: 0 PID: 8301 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 482.968916][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 482.968931][ T8301] Call Trace: [ 482.968940][ T8301] [ 482.968950][ T8301] dump_stack_lvl+0xe8/0x150 [ 482.968990][ T8301] should_fail_ex+0x46b/0x600 [ 482.969028][ T8301] should_failslab+0xa8/0x100 [ 482.969067][ T8301] __kmalloc_noprof+0xfb/0x790 [ 482.969099][ T8301] ? __register_sysctl_table+0xc02/0x1370 [ 482.969130][ T8301] ? __register_sysctl_table+0xc02/0x1370 [ 482.969168][ T8301] __register_sysctl_table+0xc02/0x1370 [ 482.969211][ T8301] register_pidns_sysctls+0x105/0x1e0 [ 482.969242][ T8301] copy_pid_ns+0x54d/0x940 [ 482.969281][ T8301] ? __pfx_copy_pid_ns+0x10/0x10 [ 482.969313][ T8301] ? rcu_is_watching+0x16/0xb0 [ 482.969348][ T8301] ? __pfx_copy_mnt_ns+0x10/0x10 [ 482.969371][ T8301] ? create_new_namespaces+0x33/0x6b0 [ 482.969408][ T8301] ? copy_ipcs+0x2a9/0x6c0 [ 482.969455][ T8301] ? copy_utsname+0x184/0x620 [ 482.969489][ T8301] create_new_namespaces+0x2ad/0x6b0 [ 482.969524][ T8301] ? security_capable+0x7e/0x2c0 [ 482.969566][ T8301] unshare_nsproxy_namespaces+0x149/0x190 [ 482.969603][ T8301] ksys_unshare+0x5a7/0x950 [ 482.969644][ T8301] ? __pfx_ksys_unshare+0x10/0x10 [ 482.969680][ T8301] ? __pfx_ksys_write+0x10/0x10 [ 482.969718][ T8301] __x64_sys_unshare+0x38/0x50 [ 482.969752][ T8301] do_syscall_64+0x166/0x520 [ 482.969775][ T8301] ? trace_irq_disable+0x3b/0x140 [ 482.969805][ T8301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.969829][ T8301] ? clear_bhb_loop+0x70/0xc0 [ 482.969858][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.969887][ T8301] RIP: 0033:0x7f905f18e159 [ 482.969910][ T8301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.969930][ T8301] RSP: 002b:00007f905d3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 482.969957][ T8301] RAX: ffffffffffffffda RBX: 00007f905f415fa0 RCX: 00007f905f18e159 [ 482.969976][ T8301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 482.969991][ T8301] RBP: 00007f905f22506b R08: 0000000000000000 R09: 0000000000000000 [ 482.970007][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.970022][ T8301] R13: 00007f905f416038 R14: 00007f905f415fa0 R15: 00007ffea56aa818 [ 482.970060][ T8301] [ 482.970071][ T8301] sysctl could not get directory: /kernel -12 [ 483.281384][ T4902] Bluetooth: hci6: command tx timeout [ 483.804000][ T5593] Bluetooth: hci7: command tx timeout [ 485.786313][ T8304] input: syz1 as /devices/virtual/input/input33 [ 485.943494][ T5593] Bluetooth: hci7: command tx timeout [ 486.952498][ T8329] netlink: 43 bytes leftover after parsing attributes in process `syz.3.472'. [ 487.965035][ T5593] Bluetooth: hci7: command tx timeout [ 488.292393][ T5248] 8021q: adding VLAN 0 to HW filter on device eth14 [ 488.859446][ T8353] Attempt to restore checkpoint with obsolete wellknown handles [ 489.265269][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.265535][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.265799][ T8185] bridge_slave_0: entered allmulticast mode [ 489.269663][ T8185] bridge_slave_0: entered promiscuous mode [ 489.290652][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.290808][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.291021][ T8185] bridge_slave_1: entered allmulticast mode [ 489.344108][ T8185] bridge_slave_1: entered promiscuous mode [ 489.552245][ T8362] netlink: 48 bytes leftover after parsing attributes in process `syz.1.478'. [ 489.748319][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.054516][ T5593] Bluetooth: hci7: command tx timeout [ 493.630668][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.764841][ T36] bridge_slave_1: left allmulticast mode [ 493.764945][ T36] bridge_slave_1: left promiscuous mode [ 493.765954][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.836018][ T8380] netlink: 43 bytes leftover after parsing attributes in process `syz.1.483'. [ 493.878987][ T36] bridge_slave_0: left allmulticast mode [ 493.879028][ T36] bridge_slave_0: left promiscuous mode [ 493.879296][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.636141][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.925462][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.128648][ T36] bond0 (unregistering): Released all slaves [ 495.311073][ T8391] Attempt to restore checkpoint with obsolete wellknown handles [ 495.420090][ T8185] team0: Port device team_slave_0 added [ 495.557215][ T8394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.487'. [ 495.895309][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 495.895346][ T8185] team0: Port device team_slave_1 added [ 495.895381][ C1] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 29, name: ktimers/1 [ 495.895404][ C1] preempt_count: 0, expected: 0 [ 495.895416][ C1] RCU nest depth: 2, expected: 0 [ 495.895439][ C1] locks held by ktimers/1/29: 4, last CPU#1: [ 495.895456][ C1] #0: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 495.895535][ C1] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 495.895603][ C1] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 495.895671][ C1] #3: ffff88803d110358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 495.895748][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 495.895776][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 495.895791][ C1] Call Trace: [ 495.895800][ C1] [ 495.895810][ C1] dump_stack_lvl+0xe8/0x150 [ 495.895846][ C1] __might_resched+0x31b/0x470 [ 495.895897][ C1] lock_sock_nested+0x56/0x130 [ 495.895936][ C1] x25_kill_by_neigh+0x134/0x2a0 [ 495.895971][ C1] ? x25_kill_by_neigh+0x2b/0x2a0 [ 495.896011][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 495.896054][ C1] ? netif_receive_skb_core+0x33/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 495.896087][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 495.896118][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 495.896159][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 495.896199][ C1] lapbeth_napi_poll+0x45/0x90 [ 495.896228][ C1] __napi_poll+0xae/0x550 [ 495.896266][ C1] net_rx_action+0x621/0xd70 [ 495.896315][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 495.896384][ C1] handle_softirqs+0x1da/0x6d0 [ 495.896427][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 495.896460][ C1] run_ktimerd+0x6a/0x100 [ 495.896496][ C1] smpboot_thread_fn+0x565/0xa70 [ 495.896535][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 495.896581][ C1] kthread+0x38b/0x470 [ 495.896606][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 495.896642][ C1] ? __pfx_kthread+0x10/0x10 [ 495.896669][ C1] ret_from_fork+0x514/0xb70 [ 495.896698][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 495.896723][ C1] ? __switch_to+0xc89/0x1420 [ 495.896760][ C1] ? __pfx_kthread+0x10/0x10 [ 495.896787][ C1] ret_from_fork_asm+0x1a/0x30 [ 495.896830][ C1] [ 497.323253][ T8214] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 497.725410][ T36] hsr_slave_0: left promiscuous mode [ 497.784212][ T36] hsr_slave_1: left promiscuous mode [ 497.785581][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.895159][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.635909][ T36] team0 (unregistering): Port device team_slave_1 removed [ 498.775544][ T36] team0 (unregistering): Port device team_slave_0 removed [ 501.807063][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.807161][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.112582][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.492224][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.839843][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.206983][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.118738][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.460753][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.852244][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.036669][ T5248] 8021q: adding VLAN 0 to HW filter on device eth13 [ 505.221760][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.818102][ T5248] 8021q: adding VLAN 0 to HW filter on device eth14