last executing test programs: 2m49.577714604s ago: executing program 3 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21373}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x40080) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x20, @mcast2}, 0x1c) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x440, 0x0) getdents64(r4, &(0x7f0000000300)=""/121, 0x79) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x8001, 0x122c42) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) socket$packet(0x11, 0x2, 0x300) r7 = socket(0x2, 0x80805, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) gettid() write$binfmt_format(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x2) sendmmsg$inet(r7, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x20040040) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={r9, 0x8, 0x2}, 0x8) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000500)=0x3, 0x4) 2m47.516646163s ago: executing program 3 (id=726): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) fsync(r0) unshare(0x24020400) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0010820}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x450}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x6000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x10000400) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(0x0, 0x108843, 0x190) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000200)) 2m45.413612828s ago: executing program 3 (id=731): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x43000002) r0 = socket$inet_sctp(0x2, 0x1, 0x84) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 2m41.560476853s ago: executing program 3 (id=737): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000004e40)={0x40, 0x1, 0xfffc, 0x0, "17465be1d348f5bb0900000002010005000801000140009500000000000100"}) 2m39.036782019s ago: executing program 1 (id=744): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) (fail_nth: 13) 2m37.423737901s ago: executing program 3 (id=746): socket$inet6(0xa, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0xf5c, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x10000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800200601fe800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0xc8, 0x40, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@generic="c2b0965a938f2b39b8368fe9029c1aaa13593dba4f29ab30fe6d184fec1ce48f4f1f767b69c535ad1efdd092e939518013f1d26bb80416dbac687aaff4b64fbcdebd748a65d4f5ca3be02055f3c39a137c858c10b2e6551c1466ed5a95489c15bd08f3663b4d08c98f27aeee394758f01544cd3c86d7b131596a2c8faf04b6c4ef58fb7e9d21e2bd279a8eba7dbe8ad9", @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @pid}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m37.025222455s ago: executing program 1 (id=747): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x1, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x80040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000540)={{0x0, 0x0, 0x3ddf, 0x0, 0x7}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x0, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2m35.88590551s ago: executing program 3 (id=750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x9a, 0x5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="baf80c66b8e26af18066efbafc0cb80200ef360fc75800b803000f00d0440f20c0663502000000440f22c0f646e2cd0f033c360f7926c400660f080f21c50f01dc", 0x41}], 0x1, 0x10, &(0x7f0000000240)=[@cstype0={0x4, 0xe}, @dstype3={0x7, 0xf}], 0x2) socket(0x10, 0x803, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x280800, 0x150) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat(r3, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24881, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xffffffffffffff00}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) read$msr(r4, &(0x7f0000009b80)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000000400)=ANY=[@ANYBLOB="b2f4a20f09c50180c20000018847000000006d528241004011fffe80000000000000000000000000004400000000000000000000ffffe00000015c05000000000000071000000001020202000900000000000000000100000100c20400000db3070800000001008305000401de00000000004e234e24000c9078"], 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="c4fedf168ca72147c8540b577064ab529a", 0x11}, {&(0x7f0000000400)="61d5c6de5bb54abdffe817689bd233b7b2951146acf76cf4072c5dffd60a3659ed28219daed436980ebb1259b0757d4274fcde9152db779e4697aca418d4d9ac09548394e6042edc01a99abeaa181b3f14534e0792037652f3b1de4577b67ed46c0dbaac4cb1d44f", 0x68}, {&(0x7f0000000480)="a98d54ca23f269ee707ff74e4817707c2ef4057f28800fc79b7719d0eb32dfaf860a1af0acd21bdba2d9eadf45a88f06634e048ac4daf3a0561bcc348668f0aa32a9", 0x42}, {&(0x7f0000000dc0)="145468282ea6dd328cee3c8c4bc1d2fcaf20bdf95156bb63637685157a7b2d297c6887bf18549d5edfbcd3afe7ea2fa3fbe48be8255f6f02cc3f4a7b0dc239f85632b1ea0a2a7d02edd85954be50a46f01bcc0f7ce2ce8323de13cf281613996cd61a30a729cfb0fabcb2b46926ac3710eb10deb72d517b446b2e775ac99bb82a6902c87dc3c2a668d43f1124b2f062f2d043b7b0b4ef49148a8aade23c4ef050dd436620320b51cbfd3a91c16d79b64f8d1251f160291100f", 0xb9}, {&(0x7f00000008c0)="c51cc67f183dc201a59b0d653d61447762a04cb9087573", 0x17}, {&(0x7f0000000900)="88ecba2316f1a2f1", 0x8}, {&(0x7f0000000940)="6ee3bffeb2bdbd650a512dbeacf7ed1f0297", 0x12}, {&(0x7f0000000980)="862e67f804d507fcf00bd578275d795d8d765f54aeff91f9d651674e55f59dbd1f1fa16026aa7540223f9b179640ffa4b11436e3db285aca26909e8e98a8ad15a35d04d2eb1f21496c3c3a4a71249ea77bea80fa1b1d2139dddb5b478cf34b4645b440791a0dd8112b0072db4deb84f6d2fe1c5875b0256a01fd3614bfd7687b95ab", 0x82}], 0x8, &(0x7f0000000ac0)=ANY=[], 0x128}}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004040)="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", 0xdd9}], 0x1, &(0x7f0000002380)=ANY=[], 0x88}}], 0x2, 0x4048814) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x5, r1, 0x1}) writev(r5, &(0x7f0000000580)=[{&(0x7f00000002c0)="8070a8a50107777e47a2741fa2caa0cb72159e9bd857e760633de8237ac8d50e6716eb5921668a84273d1e88f5fb369172895019166c62023db7b1602f63d624ab9cf518ad0219c87fba7382cb020c1994e78da73fb60bd00ae27bf7e93922c853c9f7a12f6d31eb6e8668b0238283f446f409df4f6bafd9d2fe1c66984f45631ae924357a855d99e8d57b048d7599be58a61bb005491b5c0763de2db3842d95bf96e4cbef", 0xa5}, {&(0x7f0000000380)="edec4e4ef7c53e8434907d7b0abf3e4820044f6ad52c49006cf99b6b9197861d75cdc2681b92bbf0cb3c002440d1f9a5", 0x30}, {&(0x7f0000000500)="3f6f5704046529b40f99a9b53dfbf8d82d9d0a1d854dde066d08e39333f392677bb83dad04533b283e0e01c6117e2a0e1ffd415ee007f697810bb56b4f20268ef94a0550d1745f2418d02fcb2f6525fda2264a0f042f023d43ef8fd4", 0x5c}], 0x3) 2m32.489588421s ago: executing program 1 (id=753): socket$inet6(0xa, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0xf5c, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x10000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m30.281011851s ago: executing program 1 (id=758): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000620030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e24, 0x6, @mcast1, 0x4}, 0x1c) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000500000000000000000000ff020000000000220000000000000001e800c2"], 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x804) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x39, 0x2, 0x70bd28, 0x25dfdbfc, {0x1c}, [@typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x200488c1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="070000000000faffffffffffffff04000180"], 0x18}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @local}, &(0x7f0000000080)=0xc) accept4$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14, 0x400) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x27}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x72}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x41}, 0x80) 2m29.648661906s ago: executing program 1 (id=761): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0xfff) poll(&(0x7f0000000240)=[{r2, 0x8000}], 0x1, 0x81) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, &(0x7f0000000380)) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x243d63c, 0x2, 0x81}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r1, 0x0, 0xf003, 0x1f5, 0x1, 0x0, {0x4, 0x101, 0x0, 0x0, 0x0, 0xfffc, 0x9, 0x0, 0x8, 0x0, 0x0, 0x800, 0x8001, 0xfffffffc, "b4bc323ef77d1a53140300000000000000000000000000d3f1beed2f9000a500"}}) 2m28.404771159s ago: executing program 1 (id=763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x50, r0, 0x9c530000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000000c0)={0x2, 0x8}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x456, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x83, 0x8e, 0xb0, 0x8, 0x8fd, 0x2, 0xefa5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x444, 0x3, 0x49, 0x5, 0xb0, 0x9, "", [{{0x9, 0x4, 0x96, 0xf7, 0x5, 0x64, 0xa6, 0xb8, 0x1, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x7, 0x80, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x600}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x2, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x40}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x2, 0x0, 0xb3, [@generic={0xd1, 0x7, "782b26e7d9e8372093ae5b7549a0d00f6de52331be0ffc660831337b400f0cd7c9f78c06b14b3710d76d84c694f41d1f169bb6cb15df632cfc1d0be474e3b03b2156a517e7d592b7b02a9e292f80fe6e896d28a7892a4c2e1ca8c4570c224a9bb1240bfaca988727ad69ff9ce57572af1585d57e1cd5a5209a6159edae247cffbf39c1479f240315229011eb96cb9dd2640ea8834bd56ea91ec65829973283f66ac7afe13eeecec8d4bfa1fb0d87682a22ae666993ad8392df4d0fb7b677b29175bf72afcd2d5f703172da0c01b5af"}]}}, {{0x9, 0x5, 0xc87d46583c559722, 0x10, 0x3ff, 0xf7, 0x8, 0x4}}]}}, {{0x9, 0x4, 0xa5, 0x2, 0x3, 0x21, 0xc0, 0xe8, 0x5, [], [{{0x9, 0x5, 0x1, 0x11, 0x400, 0xe3, 0x9, 0x5c}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x1, 0x8, 0x7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x16, 0x2}}]}}, {{0x9, 0x4, 0x2, 0x4, 0xd, 0x66, 0xaa, 0x3d, 0x8, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x7ff, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xf, 0x4}]}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1000, 0x2f, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x3, "6d4855ef5f1d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8, 0x81, 0x7}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0xfff7, 0xf7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1000, 0x57f5, 0x2, 'KFJ'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0x2, 0x26, 0x5}]}], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x8, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8001}, @generic={0xf2, 0x2, "4e40a30562e9114ffe3591c8d621911752e7d4ec7738891f1ee2a3560d6909cd8921d22b3eda2154b7a45a9933845ac815f68af5786398ceb1b297c9c132637bfdc6d17f1da75635ae3a43594a1891a85410e552de0407361ca9e7dde7d25602e7d1467ceef376631396cce2ded5b1b7d214d80f76de7d6ed71005d09e0c4b281c49d230ca712c3b05fb6809a24f2573c2c44e3ae0b9c7dcde8a6aaed947d4fa76a7aca9cd1de62b35bf980f2e4a14c453ece42c136d0a3fa8545d7542d40376d83af218bd4ac526f464a420d2d358a7258050e06cc36bc29a702b31ec9800d1961f6758d6eb1f6c7b6ec7bc1e04fda3"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x7, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1ff}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x5, 0x4, 0x5, [@generic={0xb4, 0x22, "a1ad2062513a97e72c8ef67701fc4f1a15aa369a3b94c7734d8fef10aafb8588366e5b715c143a2cc20192345acf7b54feab4d37e9e0a09ed321ad94054026ef79cefe7d7080195ca9de0afba707a0acf35da8f9fe810313510ae0a9e029abf52a09d4fe27f42ec51716370274d21800c50c152e06fed4825dcd6e4f945398523cfe624439ca90258bda529597b47bf2a31c8ca70df7dcdcce2d1329947346c2b3b5cfe7a9aa91f6b82c36b9987b45a775dd"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xad, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x220f}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x4}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x94, 0x2}}, {{0x9, 0x5, 0x9, 0x1a, 0x10, 0x7, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x1f, 0x400, 0x81, 0x2, 0x5, [@generic={0x28, 0x30, "e952baeb57c7f4e77482edc7f8c0e1051c76316e03f3d1761d48406ea3fab2639a6852883dcb"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x4, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xfffb}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x6, 0x9, 0x5, [@generic={0xa, 0xe, "5d28317d4199f37a"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x80, 0x79, 0xfe}}, {{0x9, 0x5, 0xc, 0x1e, 0x3ff, 0x1, 0x82, 0x3}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x64, 0x6, 0x7}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x9, 0x6, 0x7, 0x20, 0xd2}, 0x19, &(0x7f0000000800)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x5, 0x7a3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xa, 0xc9, 0x2}]}, 0x4, [{0xf4, &(0x7f0000000840)=@string={0xf4, 0x3, "8eeb31c06e17c0adc3e80fd1b058a376a90dbda323d5d900d87678193f2acdaca1e172eef10459454ad173760429ab085cdd30f023995cfb3fa4de93b1b2f43b001ff63c8090308a3047b736cc3c1697156baccb707a02d752889f650ee9c48386deca919326ff08fece838b3882d43fee5233dd8f379de8b2342f5775bb46d7fb437688c87f38d5e819ddf9f224890485925b7755d45b3f8c490583cb1509f4e590e1e8c1f64485baedb0ec20f778a8f1b49861db6b88ca320e23b5405490b5f628bb9a10059f4ead011a13fea00919599776f195d680d14d279fe28e7813dec9ec57d89ce9a20a436390861d391758577f"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x807}}, {0xa6, &(0x7f0000000980)=@string={0xa6, 0x3, "8652e9ccbde6990f113175a94091520010e9d685d9a8c6cb2f3b070250647e258ea981309683f3a2e232135825d62ef18cacda095ebc807e20db591052f5a31417bcacca0bcba63243fc44741252abdc00aee9b494565464b10e722323c26ca65716954aef90bd7a48502d5de7672c51713cd4288ef55561513dafc1aefc0c4e3d7b882090b90d72e478eca022163537a4eb9a32a903b5aaa55407a9467aa6e8ac4bef0c"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1001}}]}) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)={0x80000015}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x1008}) sched_setaffinity(0x0, 0x0, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x106f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/62, &(0x7f0000000140)=0x3e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2001c081) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) 2m18.876716143s ago: executing program 32 (id=750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x9a, 0x5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="baf80c66b8e26af18066efbafc0cb80200ef360fc75800b803000f00d0440f20c0663502000000440f22c0f646e2cd0f033c360f7926c400660f080f21c50f01dc", 0x41}], 0x1, 0x10, &(0x7f0000000240)=[@cstype0={0x4, 0xe}, @dstype3={0x7, 0xf}], 0x2) socket(0x10, 0x803, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x280800, 0x150) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat(r3, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24881, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xffffffffffffff00}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) read$msr(r4, &(0x7f0000009b80)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000000400)=ANY=[@ANYBLOB="b2f4a20f09c50180c20000018847000000006d528241004011fffe80000000000000000000000000004400000000000000000000ffffe00000015c05000000000000071000000001020202000900000000000000000100000100c20400000db3070800000001008305000401de00000000004e234e24000c9078"], 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="c4fedf168ca72147c8540b577064ab529a", 0x11}, {&(0x7f0000000400)="61d5c6de5bb54abdffe817689bd233b7b2951146acf76cf4072c5dffd60a3659ed28219daed436980ebb1259b0757d4274fcde9152db779e4697aca418d4d9ac09548394e6042edc01a99abeaa181b3f14534e0792037652f3b1de4577b67ed46c0dbaac4cb1d44f", 0x68}, {&(0x7f0000000480)="a98d54ca23f269ee707ff74e4817707c2ef4057f28800fc79b7719d0eb32dfaf860a1af0acd21bdba2d9eadf45a88f06634e048ac4daf3a0561bcc348668f0aa32a9", 0x42}, {&(0x7f0000000dc0)="145468282ea6dd328cee3c8c4bc1d2fcaf20bdf95156bb63637685157a7b2d297c6887bf18549d5edfbcd3afe7ea2fa3fbe48be8255f6f02cc3f4a7b0dc239f85632b1ea0a2a7d02edd85954be50a46f01bcc0f7ce2ce8323de13cf281613996cd61a30a729cfb0fabcb2b46926ac3710eb10deb72d517b446b2e775ac99bb82a6902c87dc3c2a668d43f1124b2f062f2d043b7b0b4ef49148a8aade23c4ef050dd436620320b51cbfd3a91c16d79b64f8d1251f160291100f", 0xb9}, {&(0x7f00000008c0)="c51cc67f183dc201a59b0d653d61447762a04cb9087573", 0x17}, {&(0x7f0000000900)="88ecba2316f1a2f1", 0x8}, {&(0x7f0000000940)="6ee3bffeb2bdbd650a512dbeacf7ed1f0297", 0x12}, {&(0x7f0000000980)="862e67f804d507fcf00bd578275d795d8d765f54aeff91f9d651674e55f59dbd1f1fa16026aa7540223f9b179640ffa4b11436e3db285aca26909e8e98a8ad15a35d04d2eb1f21496c3c3a4a71249ea77bea80fa1b1d2139dddb5b478cf34b4645b440791a0dd8112b0072db4deb84f6d2fe1c5875b0256a01fd3614bfd7687b95ab", 0x82}], 0x8, &(0x7f0000000ac0)=ANY=[], 0x128}}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004040)="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", 0xdd9}], 0x1, &(0x7f0000002380)=ANY=[], 0x88}}], 0x2, 0x4048814) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x5, r1, 0x1}) writev(r5, &(0x7f0000000580)=[{&(0x7f00000002c0)="8070a8a50107777e47a2741fa2caa0cb72159e9bd857e760633de8237ac8d50e6716eb5921668a84273d1e88f5fb369172895019166c62023db7b1602f63d624ab9cf518ad0219c87fba7382cb020c1994e78da73fb60bd00ae27bf7e93922c853c9f7a12f6d31eb6e8668b0238283f446f409df4f6bafd9d2fe1c66984f45631ae924357a855d99e8d57b048d7599be58a61bb005491b5c0763de2db3842d95bf96e4cbef", 0xa5}, {&(0x7f0000000380)="edec4e4ef7c53e8434907d7b0abf3e4820044f6ad52c49006cf99b6b9197861d75cdc2681b92bbf0cb3c002440d1f9a5", 0x30}, {&(0x7f0000000500)="3f6f5704046529b40f99a9b53dfbf8d82d9d0a1d854dde066d08e39333f392677bb83dad04533b283e0e01c6117e2a0e1ffd415ee007f697810bb56b4f20268ef94a0550d1745f2418d02fcb2f6525fda2264a0f042f023d43ef8fd4", 0x5c}], 0x3) 2m13.227108186s ago: executing program 33 (id=763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x50, r0, 0x9c530000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000000c0)={0x2, 0x8}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x456, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x83, 0x8e, 0xb0, 0x8, 0x8fd, 0x2, 0xefa5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x444, 0x3, 0x49, 0x5, 0xb0, 0x9, "", [{{0x9, 0x4, 0x96, 0xf7, 0x5, 0x64, 0xa6, 0xb8, 0x1, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x7, 0x80, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x600}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x2, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x40}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x2, 0x0, 0xb3, [@generic={0xd1, 0x7, "782b26e7d9e8372093ae5b7549a0d00f6de52331be0ffc660831337b400f0cd7c9f78c06b14b3710d76d84c694f41d1f169bb6cb15df632cfc1d0be474e3b03b2156a517e7d592b7b02a9e292f80fe6e896d28a7892a4c2e1ca8c4570c224a9bb1240bfaca988727ad69ff9ce57572af1585d57e1cd5a5209a6159edae247cffbf39c1479f240315229011eb96cb9dd2640ea8834bd56ea91ec65829973283f66ac7afe13eeecec8d4bfa1fb0d87682a22ae666993ad8392df4d0fb7b677b29175bf72afcd2d5f703172da0c01b5af"}]}}, {{0x9, 0x5, 0xc87d46583c559722, 0x10, 0x3ff, 0xf7, 0x8, 0x4}}]}}, {{0x9, 0x4, 0xa5, 0x2, 0x3, 0x21, 0xc0, 0xe8, 0x5, [], [{{0x9, 0x5, 0x1, 0x11, 0x400, 0xe3, 0x9, 0x5c}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x1, 0x8, 0x7}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x16, 0x2}}]}}, {{0x9, 0x4, 0x2, 0x4, 0xd, 0x66, 0xaa, 0x3d, 0x8, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x7ff, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xf, 0x4}]}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1000, 0x2f, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x3, "6d4855ef5f1d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8, 0x81, 0x7}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0xfff7, 0xf7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1000, 0x57f5, 0x2, 'KFJ'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0x2, 0x26, 0x5}]}], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x8, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8001}, @generic={0xf2, 0x2, "4e40a30562e9114ffe3591c8d621911752e7d4ec7738891f1ee2a3560d6909cd8921d22b3eda2154b7a45a9933845ac815f68af5786398ceb1b297c9c132637bfdc6d17f1da75635ae3a43594a1891a85410e552de0407361ca9e7dde7d25602e7d1467ceef376631396cce2ded5b1b7d214d80f76de7d6ed71005d09e0c4b281c49d230ca712c3b05fb6809a24f2573c2c44e3ae0b9c7dcde8a6aaed947d4fa76a7aca9cd1de62b35bf980f2e4a14c453ece42c136d0a3fa8545d7542d40376d83af218bd4ac526f464a420d2d358a7258050e06cc36bc29a702b31ec9800d1961f6758d6eb1f6c7b6ec7bc1e04fda3"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x7, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1ff}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x5, 0x4, 0x5, [@generic={0xb4, 0x22, "a1ad2062513a97e72c8ef67701fc4f1a15aa369a3b94c7734d8fef10aafb8588366e5b715c143a2cc20192345acf7b54feab4d37e9e0a09ed321ad94054026ef79cefe7d7080195ca9de0afba707a0acf35da8f9fe810313510ae0a9e029abf52a09d4fe27f42ec51716370274d21800c50c152e06fed4825dcd6e4f945398523cfe624439ca90258bda529597b47bf2a31c8ca70df7dcdcce2d1329947346c2b3b5cfe7a9aa91f6b82c36b9987b45a775dd"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xad, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x220f}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x4}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x94, 0x2}}, {{0x9, 0x5, 0x9, 0x1a, 0x10, 0x7, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x1f, 0x400, 0x81, 0x2, 0x5, [@generic={0x28, 0x30, "e952baeb57c7f4e77482edc7f8c0e1051c76316e03f3d1761d48406ea3fab2639a6852883dcb"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x4, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xfffb}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x6, 0x9, 0x5, [@generic={0xa, 0xe, "5d28317d4199f37a"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x80, 0x79, 0xfe}}, {{0x9, 0x5, 0xc, 0x1e, 0x3ff, 0x1, 0x82, 0x3}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x64, 0x6, 0x7}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x9, 0x6, 0x7, 0x20, 0xd2}, 0x19, &(0x7f0000000800)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x5, 0x7a3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xa, 0xc9, 0x2}]}, 0x4, [{0xf4, &(0x7f0000000840)=@string={0xf4, 0x3, "8eeb31c06e17c0adc3e80fd1b058a376a90dbda323d5d900d87678193f2acdaca1e172eef10459454ad173760429ab085cdd30f023995cfb3fa4de93b1b2f43b001ff63c8090308a3047b736cc3c1697156baccb707a02d752889f650ee9c48386deca919326ff08fece838b3882d43fee5233dd8f379de8b2342f5775bb46d7fb437688c87f38d5e819ddf9f224890485925b7755d45b3f8c490583cb1509f4e590e1e8c1f64485baedb0ec20f778a8f1b49861db6b88ca320e23b5405490b5f628bb9a10059f4ead011a13fea00919599776f195d680d14d279fe28e7813dec9ec57d89ce9a20a436390861d391758577f"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x807}}, {0xa6, &(0x7f0000000980)=@string={0xa6, 0x3, "8652e9ccbde6990f113175a94091520010e9d685d9a8c6cb2f3b070250647e258ea981309683f3a2e232135825d62ef18cacda095ebc807e20db591052f5a31417bcacca0bcba63243fc44741252abdc00aee9b494565464b10e722323c26ca65716954aef90bd7a48502d5de7672c51713cd4288ef55561513dafc1aefc0c4e3d7b882090b90d72e478eca022163537a4eb9a32a903b5aaa55407a9467aa6e8ac4bef0c"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1001}}]}) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)={0x80000015}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x1008}) sched_setaffinity(0x0, 0x0, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x106f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/62, &(0x7f0000000140)=0x3e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2001c081) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) 2m12.767925234s ago: executing program 2 (id=779): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x8, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000002340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118c000000000085000700"/32], &(0x7f0000000000)='GPL\x00', 0xd}, 0x94) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)='2', 0x1}], 0x1) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x80, 0x2, "006090ddc6a73fffe1f1f0a7a7ebabaf08827fbc2c265cb53272bb0eef9557965bbb950d7198ac4bf34b248cc1b8e0d38c578b35129377e86a0cd65c7b79e5ddbecb700320f2a7e4b823bd7fdecfd9d47e1a6bc877ddb591d98b114a1bceca27f67fbc24074120a7d57893324ddb4ac95ae25973384ab424f8ca59743dcfde3c5693c3220a1c0a5351e7197289a0dad68d2831d137321e2c080d0bbdcb0bd1c3ad1df5df0359d3db226b3d8e51c52fc78a7fc6648bc102457b799bbfc843b3a67bbb9e5b0c4d09e1db51e222d1eaab411a6f89c4e8b98b8ca943faedccc3c1040353ecce853deeeccd5f54f3797d89787e0673200dc8e0a1d67511de774e6c46", 0x5, 0x0, 0xb, 0x3, 0x81, 0x3, 0x0, 0xfe}}}, 0x120) 2m6.956507635s ago: executing program 2 (id=785): syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYBLOB="e6329f95"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) 2m2.597235837s ago: executing program 2 (id=793): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000180000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000580), 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) utime(0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigsuspend(0xffffffffffffffff, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x80040, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1m58.312621416s ago: executing program 2 (id=799): r0 = socket$unix(0x1, 0x5, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x420000) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x20) flock(r3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x148) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x7, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x28, 0x5, 0xb3}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xf8}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1m56.983364377s ago: executing program 2 (id=800): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r0, 0x1, 0x0, 0x4, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x24004084) 1m56.331661704s ago: executing program 2 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081dc26bd4bc1fbcc000002000000ee0000001f0000000500160004000000080017004e214e20"], 0x2c}, 0x1, 0x0, 0x0, 0x2800c185}, 0x44004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000008a38000000000a01020000000000000000030000000900010073797a3000000000180006007f7c99b7264fe6e9da677a09c84aedf794ed086e2000000000bfd9c78397d12a0b000000000000010900010073797a3000000000140000001100010000000000020000000500000a211854129baabe126d8957a1bafc2fbef345eeb43122d5df31b6987849e1f109da785b4dedf47100b972b2d1f64080aed3146a9b25bfb7e3dc3f3c98ec1d37bf629e1f"], 0x80}}, 0x20000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001", @ANYRES16=r1, @ANYBLOB="e366db1b2eaa36e9e6fbd98830d82913abbc4e405f545fed7250c5d5abc6a2ab75baf0c0b30b0ccf25929acf42f812410fde6bc05b0435beff3a60e99866a49cb3e9af9d534d30a4b00a5add3dfe9b9161df4e2c9b5fc741bc430800a8d1aa0d078f2330065c7b3c03f51828e05f0f4abbfb238fefc53a92d095521c086ee5daa459f375fec3dd1e3ac7b421fa0ab97ce26605550337e46b64b684fc29bbe0bf29499559ec3123fcfe70d4937bfc9aefbcfdba7085d653db0a78930c85e6bc14212292857ac4f00f215468ecbd80a651f370829230210b6e73de6356c61ba615454b4a5219a8828290160b50467dfa67f2cb8094deb0dddfd6008dc7b5de"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20040004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000070a0101"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000000240)="280e", 0x2, 0x96b7ebf37ae6c9, &(0x7f0000000080)={0xa, 0x4e21, 0x429, @private1={0xfc, 0x1, '\x00', 0x4}, 0x7d8d}, 0x1c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r9}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000005a00040025b87000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x200040d1}, 0xc008006) sendto$inet6(r6, 0x0, 0xf0, 0x0, 0x0, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r11, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) mkdirat(r5, &(0x7f0000000240)='./file0\x00', 0x1) 1m50.268620905s ago: executing program 4 (id=808): r0 = getpid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() creat(&(0x7f0000000000)='./file0\x00', 0xfebd517a716255e1) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0)=0x69db, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x15a0, 0x4) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=0x0, @ANYBLOB="046bb9000000000010000600ec1b002fa0d79463bce95be275a1e5296eaf2d00200003000000000020dd9ca24956f525af1e8cce67b5457273ffd40a7c6513a7466cc9e0325b3041a33948a53445649c947383579dc2c06aff8b3dd8e36589b1961d5b4c580595ddb674745ca184c1d65793a899285c6521bfcfdebd5aaeaf349f927bf0d06897425403a9"], 0x2c, 0x3) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@gettaction={0x30, 0x32, 0x605, 0x70bc27, 0x25dfdbf9, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x30}}, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x40000, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c80814001000050017800c006900fbffff034d0000000b00d55fddd740bcbbf52b9958d6c59ac79b0a0d99f0d1"], 0x19) syz_emit_ethernet(0x243, &(0x7f0000000600)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0ef842", 0x20d, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@fragment={0x2, 0x0, 0x3c, 0x1, 0x0, 0x2, 0x66}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x59, 0x2, [0x4da6, 0x5], "c8f1f3d97755c8b0d0a41c54616b30a5083c3b03421a908b533bdb3701a81ceca17b59ea836f1015ad589c996895e7e0bb15cba5d5143d25332077d1c8b19baf87dd99e8abcee9470739681739ef6faada4f2c7ba55996f864"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x5, 0x7], "4e0276de74fec382103863bbbf2c1878719bf0d6c4daeff7a3783b5951085584ee53b3572f1d09d0a129600ab726856674e3dbbd6886fcba061a18b613c06136a46b2c81ba30"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "ad3593a9a370b863e7314e3c114ac8551f4400edbf96b826655b7163f555e33d72e3bb388188ef89bc78f68b350e1b257e6d26e10dc2a0c1f451c0259ba3c4ca80f437451697a9dd73e6e2cef783ab431e0bdbdf1ee208"}, {0x8, 0x88be, 0x1, {{0x5, 0x1, 0xff, 0x0, 0x1, 0x2, 0x7, 0x4}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x5, 0x1, 0x0, 0x0, 0x5, 0xf8}, 0x2, {0x3, 0x80, 0x0, 0x12, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "b73e5e4062beeb5825feca18ef831e7cf13c3b742c0ede2ecd37381921243d1bed947d9874b34eba557ffa0461fd108eb35ed119a7127af2b0215e29341736c408a549588d46bdaa0806e598a78875bd4c3fe9be5ea08c6569a76ff7d68ebcb7a4b2ef41371b1627a0b779b3087d148e32f9162f13762eb7e20c19255b7c3b60fd2a2f2bb17b49750d2ed512b05943a8d59669babd40ec60e3dcbb9929c1403a94cc6c6b6e1374de3682cff9aec577f666296d6934c51a50ccb550fd1e800c5e01ff43"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000002000000000000000951e000000000000"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) 1m48.043991459s ago: executing program 4 (id=811): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) shutdown(r3, 0x0) shutdown(r2, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000100000100000000000000", @ANYRES32, @ANYBLOB="2300f2ff00000000dd00000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000017e000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000017e000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x144e, &(0x7f00000001c0)={0x0, 0xd878, 0x289, 0x3, 0x2e5}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x40, 0x4, 0x7}, 0x4}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m46.195897619s ago: executing program 4 (id=813): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)="cb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{}], 0x1, &(0x7f0000005980)=[@flowinfo={{0x14, 0x29, 0xb, 0x3aa}}, @hopopts={{0x150, 0x29, 0x36, {0x2b, 0x26, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0xb6}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x40, 0xb4, "5c8e86cc0fa3d2b53c594807a996b3a278e17e0980ff6389a4502d346e5813b3ede6fe9eb370be4efd12f8e35a4d329513cca4ed3429215b1c81090881862198d9687ece7ae69c997005f9b476f7d13a1d7ca32954e7b5f40c4e639892d2763d2496e520c2b88202a84c293c5dfca03bb5fe636203720388d2b18bc3e4716b2c56aa79ace09a87dca51942773b4a318721507499de0afea3a274078e708c6ca073a1f1e9198f455cb87e00305268143299c4d021"}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x6c}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @generic={0x8, 0x5c, "ef1e2c265944b747ee5ea0c8573d6bf272f0788f80bb8191d8d0bc4dde454be3861dc77379473bc51774d0a1b84ac1b8f4fa91ac0c4fcc21e4235d713cf91b90ac3f52d6b3aa6e3f8ab339dff9a94e74f9688b662b4d4085ff25d760"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x2e, 0x12, '\x00', [@ra={0x5, 0x2, 0x89}, @pad1, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x29, "566662ae1984e59e66a24d735d8eadf9f4e0a216cc758d5cfe51d7bd229c5a0291563f608ce5aef117"}, @jumbo={0xc2, 0x4, 0xa}, @calipso={0x7, 0x40, {0x0, 0xe, 0x47, 0x7fff, [0xfffffffffffffe01, 0xbb, 0x23, 0x4, 0x21, 0xfff, 0xfe]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hopopts={{0x1028, 0x29, 0x36, {0x16, 0x201, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x6, 0x1000, "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"}, @pad1]}}}, @hopopts_2292={{0xc8, 0x29, 0x36, {0x87, 0x15, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x4, [0x7, 0xe64a, 0x80000001, 0x7e9, 0x7]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim, @jumbo={0xc2, 0x4, 0x9}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x7, 0x4, [0x7f, 0x9]}}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7f, 0x8, [0x362, 0x5, 0x4, 0x5, 0x80000001, 0x6]}}]}}}], 0x1380}}], 0x2, 0x1a3) 1m46.120033631s ago: executing program 4 (id=814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x111, 0x1}}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)={0x40, r2, 0x4d1b20c6161d1adb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="c40000000008010300000000000000000700000a06000240880900000600024000170000060002400800000024000480080001400000006d080002400000000308000140000000070800024000000003060002400008000024000480080001400000008008000140000000af522f828dfa1f4f0ffe5c03cd680108000140000000070800044000000fff06000240930000000900010073797a310000000005000300010000002c00048008000140000000270800014000000005080001400000000308000140000000000800014000000001"], 0xc4}}, 0x40000) futex(&(0x7f000000cffc), 0x5, 0x2002, 0x0, &(0x7f0000000040)=0x1, 0x86000005) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x344}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000088) 1m45.436739s ago: executing program 4 (id=815): socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f0000000c80)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x50, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8050}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r4) 1m44.004527053s ago: executing program 4 (id=816): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7, 0x200000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) rmdir(&(0x7f00000001c0)='./file0\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2003}) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r4 = userfaultfd(0x801) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040801}, 0xc8410) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 1m40.317078406s ago: executing program 34 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081dc26bd4bc1fbcc000002000000ee0000001f0000000500160004000000080017004e214e20"], 0x2c}, 0x1, 0x0, 0x0, 0x2800c185}, 0x44004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000008a38000000000a01020000000000000000030000000900010073797a3000000000180006007f7c99b7264fe6e9da677a09c84aedf794ed086e2000000000bfd9c78397d12a0b000000000000010900010073797a3000000000140000001100010000000000020000000500000a211854129baabe126d8957a1bafc2fbef345eeb43122d5df31b6987849e1f109da785b4dedf47100b972b2d1f64080aed3146a9b25bfb7e3dc3f3c98ec1d37bf629e1f"], 0x80}}, 0x20000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001", @ANYRES16=r1, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20040004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000070a0101"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000000240)="280e", 0x2, 0x96b7ebf37ae6c9, &(0x7f0000000080)={0xa, 0x4e21, 0x429, @private1={0xfc, 0x1, '\x00', 0x4}, 0x7d8d}, 0x1c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r9}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000005a00040025b87000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x200040d1}, 0xc008006) sendto$inet6(r6, 0x0, 0xf0, 0x0, 0x0, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r11, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) mkdirat(r5, &(0x7f0000000240)='./file0\x00', 0x1) 1m27.729253203s ago: executing program 35 (id=816): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7, 0x200000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) rmdir(&(0x7f00000001c0)='./file0\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2003}) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r4 = userfaultfd(0x801) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040801}, 0xc8410) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 28.218484925s ago: executing program 0 (id=862): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="000427bd7000fcdbdf252e000000080003", @ANYRES32, @ANYBLOB="0c009900ff0f0000730000000400af000400d0007f002a002d1a02001804000000000000000600030016000000080400000000041001aa7107010601ffff0501250300af068c105500a77919600b57f85d8f15f2e550d5040605918e0007000406090601020300050ea0f10de87199f15450211681a5e12d1a10000104000000000000000800f10018000000000404000000f900050018"], 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000"], 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 25.138421565s ago: executing program 0 (id=863): r0 = socket$igmp(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x2, 0x2, {0xa, 0x4e21, 0x4, @remote, 0x4}}}, 0x32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1fffe, 0x4c}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x58, r2, 0x1, 0x70bd29, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x400c8a4) 17.627009046s ago: executing program 0 (id=864): mq_open(&(0x7f0000000240)='.\xd6\x00', 0x800, 0x8, 0x0) (fail_nth: 2) 17.06603721s ago: executing program 0 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8000055}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) 16.482711013s ago: executing program 0 (id=866): socket$inet6(0xa, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x10000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15.021936189s ago: executing program 0 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r7, 0xae80, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff78080008400010000108000c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000290000000400000002000000000000001800000000000000290000003b0000000000000000e6ffff270000000000000029000000050000000002020100"], 0x58}, 0x0) 0s ago: executing program 36 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r7, 0xae80, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff78080008400010000108000c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000290000000400000002000000000000001800000000000000290000003b0000000000000000e6ffff270000000000000029000000050000000002020100"], 0x58}, 0x0) kernel console output (not intermixed with test programs): me+0x77/0x7f [ 298.567211][ T7853] do_syscall_64+0x15f/0xf80 [ 298.567228][ T7853] ? trace_irq_disable+0x3b/0x140 [ 298.567249][ T7853] ? clear_bhb_loop+0x40/0x90 [ 298.567271][ T7853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.567289][ T7853] RIP: 0033:0x7fb960bbd60e [ 298.567306][ T7853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.567322][ T7853] RSP: 002b:00007fb95ee55fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.567342][ T7853] RAX: ffffffffffffffda RBX: 00007fb95ee566c0 RCX: 00007fb960bbd60e [ 298.567356][ T7853] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 298.567368][ T7853] RBP: 00007fb95ee56090 R08: 0000000000000000 R09: 0000000000000000 [ 298.567380][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.567392][ T7853] R13: 00007fb960e76038 R14: 00007fb960e75fa0 R15: 00007ffc26870448 [ 298.567422][ T7853] [ 300.465092][ T819] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 300.615376][ T819] usb 1-1: device descriptor read/64, error -71 [ 300.853849][ T819] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 300.993819][ T819] usb 1-1: device descriptor read/64, error -71 [ 301.104260][ T819] usb usb1-port1: attempt power cycle [ 301.453791][ T819] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 301.484619][ T819] usb 1-1: device descriptor read/8, error -71 [ 301.737294][ T819] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 301.765070][ T819] usb 1-1: device descriptor read/8, error -71 [ 301.876601][ T819] usb usb1-port1: unable to enumerate USB device [ 303.841585][ T7895] syz.4.638 (7895): drop_caches: 2 [ 305.006582][ T819] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 305.100498][ T7916] FAULT_INJECTION: forcing a failure. [ 305.100498][ T7916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.100530][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.4.645 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.100559][ T7916] Tainted: [L]=SOFTLOCKUP [ 305.100564][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.100576][ T7916] Call Trace: [ 305.100583][ T7916] [ 305.100590][ T7916] dump_stack_lvl+0xe8/0x150 [ 305.100616][ T7916] should_fail_ex+0x46b/0x600 [ 305.100647][ T7916] _copy_from_user+0x2d/0xb0 [ 305.100667][ T7916] memdup_user+0x5e/0xd0 [ 305.100692][ T7916] strndup_user+0x68/0xd0 [ 305.100715][ T7916] bpf_uprobe_multi_link_attach+0x35e/0x1020 [ 305.100743][ T7916] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 305.100758][ T7916] ? __fget_files+0x2a/0x420 [ 305.100779][ T7916] ? __fget_files+0x2a/0x420 [ 305.100796][ T7916] ? __fget_files+0x3a6/0x420 [ 305.100821][ T7916] ? __fget_files+0x2a/0x420 [ 305.100842][ T7916] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 305.100863][ T7916] link_create+0x67c/0x850 [ 305.100883][ T7916] __sys_bpf+0x468/0x950 [ 305.100900][ T7916] ? __pfx___sys_bpf+0x10/0x10 [ 305.100914][ T7916] ? rt_mutex_slowunlock+0x1cb/0x300 [ 305.100943][ T7916] ? ksys_write+0x248/0x270 [ 305.100959][ T7916] ? __pfx_ksys_write+0x10/0x10 [ 305.100978][ T7916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.100993][ T7916] __x64_sys_bpf+0x7c/0x90 [ 305.101007][ T7916] do_syscall_64+0x15f/0xf80 [ 305.101020][ T7916] ? trace_irq_disable+0x3b/0x140 [ 305.101035][ T7916] ? clear_bhb_loop+0x40/0x90 [ 305.101053][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.101067][ T7916] RIP: 0033:0x7f553985cdd9 [ 305.101082][ T7916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.101096][ T7916] RSP: 002b:00007f5537aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.101113][ T7916] RAX: ffffffffffffffda RBX: 00007f5539ad5fa0 RCX: 00007f553985cdd9 [ 305.101124][ T7916] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 305.101133][ T7916] RBP: 00007f5537aae090 R08: 0000000000000000 R09: 0000000000000000 [ 305.101141][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.101149][ T7916] R13: 00007f5539ad6038 R14: 00007f5539ad5fa0 R15: 00007ffe48a21e28 [ 305.101175][ T7916] [ 305.200169][ T819] usb 3-1: Using ep0 maxpacket: 8 [ 305.243797][ T819] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.243829][ T819] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.243859][ T819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.243890][ T819] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 305.243913][ T819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.459540][ T819] usb 3-1: config 0 descriptor?? [ 306.202686][ T7910] overlayfs: statfs failed on './file0' [ 307.741344][ T7939] syz.4.650 (7939): drop_caches: 2 [ 307.785030][ T7941] netlink: 'syz.0.651': attribute type 11 has an invalid length. [ 308.222442][ T819] smartjoyplus 0003:6666:8804.0001: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0 [ 308.222476][ T819] smartjoyplus 0003:6666:8804.0001: no output reports found [ 308.663882][ T1242] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 308.824431][ T1242] usb 5-1: device descriptor read/64, error -71 [ 308.985273][ T819] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 309.114257][ T819] usb 4-1: device descriptor read/64, error -71 [ 309.301434][ T5882] usb 3-1: USB disconnect, device number 19 [ 309.363888][ T819] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 309.393754][ T1242] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 309.499927][ T819] usb 4-1: device descriptor read/64, error -71 [ 309.583814][ T1242] usb 5-1: device descriptor read/64, error -71 [ 309.604223][ T819] usb usb4-port1: attempt power cycle [ 309.698317][ T1242] usb usb5-port1: attempt power cycle [ 310.044595][ T819] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 310.207678][ T819] usb 4-1: device descriptor read/8, error -71 [ 310.743784][ T819] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 310.764846][ T819] usb 4-1: device descriptor read/8, error -71 [ 310.874776][ T819] usb usb4-port1: unable to enumerate USB device [ 310.915252][ T1242] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 310.963457][ T1242] usb 5-1: device descriptor read/8, error -71 [ 311.343754][ T1242] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 311.478375][ T1242] usb 5-1: device descriptor read/8, error -71 [ 311.593929][ T1242] usb usb5-port1: unable to enumerate USB device [ 311.868815][ T7996] syz.1.662 (7996): drop_caches: 2 [ 313.045969][ T8002] netlink: 176 bytes leftover after parsing attributes in process `syz.1.666'. [ 313.046012][ T8002] openvswitch: netlink: Flow key attr not present in new flow. [ 313.208508][ T7998] binfmt_misc: register: failed to install interpreter file ./cgroup.net/devices.allow [ 315.198965][ T8028] FAULT_INJECTION: forcing a failure. [ 315.198965][ T8028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.198988][ T8028] CPU: 0 UID: 0 PID: 8028 Comm: syz.4.674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.199003][ T8028] Tainted: [L]=SOFTLOCKUP [ 315.199007][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.199013][ T8028] Call Trace: [ 315.199017][ T8028] [ 315.199022][ T8028] dump_stack_lvl+0xe8/0x150 [ 315.199038][ T8028] should_fail_ex+0x46b/0x600 [ 315.199057][ T8028] strncpy_from_user+0x36/0x2b0 [ 315.199074][ T8028] do_getname+0x77/0x250 [ 315.199089][ T8028] __se_sys_renameat2+0x34/0x2c0 [ 315.199109][ T8028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.199120][ T8028] do_syscall_64+0x15f/0xf80 [ 315.199130][ T8028] ? trace_irq_disable+0x3b/0x140 [ 315.199142][ T8028] ? clear_bhb_loop+0x40/0x90 [ 315.199155][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.199165][ T8028] RIP: 0033:0x7f553985cdd9 [ 315.199175][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.199184][ T8028] RSP: 002b:00007f5537a8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 315.199195][ T8028] RAX: ffffffffffffffda RBX: 00007f5539ad6090 RCX: 00007f553985cdd9 [ 315.199202][ T8028] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 315.199209][ T8028] RBP: 00007f5537a8d090 R08: 0000000000000002 R09: 0000000000000000 [ 315.199216][ T8028] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 315.199222][ T8028] R13: 00007f5539ad6128 R14: 00007f5539ad6090 R15: 00007ffe48a21e28 [ 315.199238][ T8028] [ 315.963867][ T5882] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 316.170161][ T8039] FAULT_INJECTION: forcing a failure. [ 316.170161][ T8039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.170196][ T8039] CPU: 1 UID: 0 PID: 8039 Comm: syz.1.678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 316.170222][ T8039] Tainted: [L]=SOFTLOCKUP [ 316.170229][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.170239][ T8039] Call Trace: [ 316.170247][ T8039] [ 316.170254][ T8039] dump_stack_lvl+0xe8/0x150 [ 316.170280][ T8039] should_fail_ex+0x46b/0x600 [ 316.170312][ T8039] _copy_from_user+0x2d/0xb0 [ 316.170333][ T8039] ucma_write+0x166/0x2f0 [ 316.170356][ T8039] ? __pfx_ucma_write+0x10/0x10 [ 316.170378][ T8039] ? rw_verify_area+0x25b/0x4e0 [ 316.170397][ T8039] ? __pfx_ucma_write+0x10/0x10 [ 316.170417][ T8039] vfs_write+0x2a3/0xba0 [ 316.170445][ T8039] ? __pfx_vfs_write+0x10/0x10 [ 316.170466][ T8039] ? __fget_files+0x2a/0x420 [ 316.170495][ T8039] ? __fget_files+0x2a/0x420 [ 316.170517][ T8039] ? __fget_files+0x3a6/0x420 [ 316.170540][ T8039] ? __fget_files+0x2a/0x420 [ 316.170573][ T8039] ksys_write+0x156/0x270 [ 316.170595][ T8039] ? __pfx_ksys_write+0x10/0x10 [ 316.170623][ T8039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.170643][ T8039] do_syscall_64+0x15f/0xf80 [ 316.170660][ T8039] ? trace_irq_disable+0x3b/0x140 [ 316.170681][ T8039] ? clear_bhb_loop+0x40/0x90 [ 316.170703][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.170721][ T8039] RIP: 0033:0x7f841ce8cdd9 [ 316.170738][ T8039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.170753][ T8039] RSP: 002b:00007f841b0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.170779][ T8039] RAX: ffffffffffffffda RBX: 00007f841d105fa0 RCX: 00007f841ce8cdd9 [ 316.170793][ T8039] RDX: 0000000000000090 RSI: 00002000000004c0 RDI: 0000000000000003 [ 316.170805][ T8039] RBP: 00007f841b0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.170817][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.170828][ T8039] R13: 00007f841d106038 R14: 00007f841d105fa0 R15: 00007ffdcc921918 [ 316.170858][ T8039] [ 316.171110][ T5882] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 316.171135][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.171153][ T5882] usb 5-1: Product: syz [ 316.171166][ T5882] usb 5-1: Manufacturer: syz [ 316.171178][ T5882] usb 5-1: SerialNumber: syz [ 316.438944][ T5882] usb 5-1: config 0 descriptor?? [ 317.188842][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.188908][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.168381][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.324495][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.544150][ T5882] usb 5-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 319.544177][ T5882] f81604 5-1:0.0: Setting termination of CH#1 failed: -ETIMEDOUT [ 319.544213][ T5882] f81604 5-1:0.0: probe with driver f81604 failed with error -110 [ 319.633841][ T1242] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 319.745442][ T42] usb 5-1: USB disconnect, device number 21 [ 319.852509][ T1242] usb 1-1: Using ep0 maxpacket: 16 [ 319.861047][ T1242] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.861095][ T1242] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 319.861121][ T1242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.861146][ T1242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.863967][ T1242] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 319.863993][ T1242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.864013][ T1242] usb 1-1: Product: syz [ 319.864027][ T1242] usb 1-1: Manufacturer: syz [ 319.864040][ T1242] usb 1-1: SerialNumber: syz [ 320.041348][ T1242] usb 1-1: config 0 descriptor?? [ 320.053376][ T1242] appledisplay 1-1:0.0: Submitting URB failed [ 320.053520][ T1242] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 320.651269][ T8085] netlink: 176 bytes leftover after parsing attributes in process `syz.3.688'. [ 320.651292][ T8085] openvswitch: netlink: Flow key attr not present in new flow. [ 324.783572][ T1242] usb 1-1: USB disconnect, device number 25 [ 326.099070][ T8119] FAULT_INJECTION: forcing a failure. [ 326.099070][ T8119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.100240][ T8119] CPU: 0 UID: 0 PID: 8119 Comm: syz.2.696 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 326.100269][ T8119] Tainted: [L]=SOFTLOCKUP [ 326.100275][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.100286][ T8119] Call Trace: [ 326.100293][ T8119] [ 326.100301][ T8119] dump_stack_lvl+0xe8/0x150 [ 326.100327][ T8119] should_fail_ex+0x46b/0x600 [ 326.100359][ T8119] _copy_from_user+0x2d/0xb0 [ 326.100380][ T8119] __sys_bpf+0x229/0x950 [ 326.100404][ T8119] ? __pfx___sys_bpf+0x10/0x10 [ 326.100422][ T8119] ? rt_mutex_slowunlock+0x1cb/0x300 [ 326.100459][ T8119] ? ksys_write+0x248/0x270 [ 326.100482][ T8119] ? __pfx_ksys_write+0x10/0x10 [ 326.100500][ T8119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.100524][ T8119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.100543][ T8119] __x64_sys_bpf+0x7c/0x90 [ 326.100563][ T8119] do_syscall_64+0x15f/0xf80 [ 326.100581][ T8119] ? clear_bhb_loop+0x40/0x90 [ 326.100604][ T8119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.100621][ T8119] RIP: 0033:0x7f059fe7cdd9 [ 326.100638][ T8119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.100653][ T8119] RSP: 002b:00007f059e0ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.100674][ T8119] RAX: ffffffffffffffda RBX: 00007f05a00f6090 RCX: 00007f059fe7cdd9 [ 326.100687][ T8119] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 326.100700][ T8119] RBP: 00007f059e0ad090 R08: 0000000000000000 R09: 0000000000000000 [ 326.100712][ T8119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.100723][ T8119] R13: 00007f05a00f6128 R14: 00007f05a00f6090 R15: 00007ffcb496eda8 [ 326.100753][ T8119] [ 327.787307][ T42] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 328.381165][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 328.422184][ T42] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 328.422214][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.422234][ T42] usb 5-1: Product: syz [ 328.422249][ T42] usb 5-1: Manufacturer: syz [ 328.422263][ T42] usb 5-1: SerialNumber: syz [ 328.487280][ T42] usb 5-1: config 0 descriptor?? [ 329.067666][ T42] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 330.663841][ T5732] usb 5-1: USB disconnect, device number 22 [ 330.917229][ T8153] netlink: 176 bytes leftover after parsing attributes in process `syz.2.705'. [ 330.917253][ T8153] openvswitch: netlink: Flow key attr not present in new flow. [ 332.117908][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 332.117926][ T36] audit: type=1326 audit(1777193918.180:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 332.133236][ T36] audit: type=1326 audit(1777193918.180:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 332.262180][ T36] audit: type=1326 audit(1777193918.320:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 332.262227][ T36] audit: type=1326 audit(1777193918.320:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 332.263501][ T36] audit: type=1326 audit(1777193918.320:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 332.280003][ T36] audit: type=1326 audit(1777193918.340:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 332.280045][ T36] audit: type=1326 audit(1777193918.340:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 332.336516][ T36] audit: type=1326 audit(1777193918.400:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 332.526656][ T36] audit: type=1326 audit(1777193918.590:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 333.627962][ T5698] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 334.645556][ T5698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 334.648204][ T5698] usb 3-1: not running at top speed; connect to a high speed hub [ 334.654088][ T5698] usb 3-1: config 3 has an invalid interface number: 65 but max is 0 [ 334.654114][ T5698] usb 3-1: config 3 has an invalid interface descriptor of length 5, skipping [ 334.654132][ T5698] usb 3-1: config 3 has an invalid descriptor of length 4, skipping remainder of the config [ 334.654150][ T5698] usb 3-1: config 3 has no interface number 0 [ 334.654193][ T5698] usb 3-1: config 3 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 334.654220][ T5698] usb 3-1: config 3 interface 65 has no altsetting 0 [ 334.660318][ T5698] usb 3-1: New USB device found, idVendor=0403, idProduct=f06c, bcdDevice=d2.9c [ 334.660344][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.660364][ T5698] usb 3-1: Product: syz [ 334.660377][ T5698] usb 3-1: Manufacturer: syz [ 334.660390][ T5698] usb 3-1: SerialNumber: syz [ 335.564943][ T8183] QAT: failed to copy from user cfg_data. [ 340.332590][ T5698] ftdi_sio 3-1:3.65: FTDI USB Serial Device converter detected [ 340.364379][ T5698] ftdi_sio ttyUSB0: unknown device type: 0xd29c [ 340.959583][ T8200] FAULT_INJECTION: forcing a failure. [ 340.959583][ T8200] name failslab, interval 1, probability 0, space 0, times 0 [ 340.959619][ T8200] CPU: 0 UID: 0 PID: 8200 Comm: syz.4.719 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 340.959649][ T8200] Tainted: [L]=SOFTLOCKUP [ 340.959656][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.959667][ T8200] Call Trace: [ 340.959674][ T8200] [ 340.959682][ T8200] dump_stack_lvl+0xe8/0x150 [ 340.959716][ T8200] should_fail_ex+0x46b/0x600 [ 340.959749][ T8200] should_failslab+0xa8/0x100 [ 340.959773][ T8200] kmem_cache_alloc_noprof+0x87/0x680 [ 340.959794][ T8200] ? vm_area_dup+0x2b/0x670 [ 340.959821][ T8200] vm_area_dup+0x2b/0x670 [ 340.959848][ T8200] __split_vma+0x1e4/0xa30 [ 340.959878][ T8200] ? mas_next_slot+0xc3e/0xd10 [ 340.959908][ T8200] ? __pfx___split_vma+0x10/0x10 [ 340.959944][ T8200] ? mas_find+0xb0e/0xd30 [ 340.959975][ T8200] vms_gather_munmap_vmas+0x4fa/0x1380 [ 340.959997][ T8200] ? __mt_destroy+0x1d2/0x280 [ 340.960032][ T8200] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 340.960076][ T8200] do_vmi_align_munmap+0x2c7/0x4d0 [ 340.960119][ T8200] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 340.960157][ T8200] ? mtree_range_walk+0x6fc/0x8b0 [ 340.960201][ T8200] do_vmi_munmap+0x252/0x2d0 [ 340.960231][ T8200] __vm_munmap+0x22c/0x3d0 [ 340.960257][ T8200] ? __pfx___vm_munmap+0x10/0x10 [ 340.960280][ T8200] ? vm_mmap_pgoff+0x3b4/0x4f0 [ 340.960318][ T8200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.960337][ T8200] __x64_sys_munmap+0x60/0x70 [ 340.960357][ T8200] do_syscall_64+0x15f/0xf80 [ 340.960373][ T8200] ? trace_irq_disable+0x3b/0x140 [ 340.960413][ T8200] ? clear_bhb_loop+0x40/0x90 [ 340.960436][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.960454][ T8200] RIP: 0033:0x7f553985cc07 [ 340.960471][ T8200] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.960486][ T8200] RSP: 002b:00007f5537aacd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 340.960506][ T8200] RAX: ffffffffffffffda RBX: 00007f5530000000 RCX: 00007f553985cc07 [ 340.960520][ T8200] RDX: 0000000000000000 RSI: 0000000003a8e000 RDI: 00007f5534000000 [ 340.960532][ T8200] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 340.960544][ T8200] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 340.960556][ T8200] R13: 0000000000001000 R14: 00007f5534000000 R15: 0000000000572000 [ 340.960587][ T8200] [ 341.604460][ T819] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 341.778786][ T819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 341.778815][ T819] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 341.778839][ T819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 341.778861][ T819] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 341.782032][ T819] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 341.782059][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.782079][ T819] usb 4-1: Product: syz [ 341.782093][ T819] usb 4-1: Manufacturer: syz [ 341.782106][ T819] usb 4-1: SerialNumber: syz [ 341.842250][ T819] usb 4-1: config 0 descriptor?? [ 341.848619][ T819] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 342.455540][ T819] scsi host1: usb-storage 4-1:0.0 [ 342.524887][ T8215] netlink: 176 bytes leftover after parsing attributes in process `syz.1.721'. [ 342.524923][ T8215] openvswitch: netlink: Flow key attr not present in new flow. [ 342.572887][ T5698] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 344.050053][ T819] usb 4-1: USB disconnect, device number 26 [ 344.106007][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 344.189871][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 344.209886][ T5698] usb 5-1: config 2 has an invalid interface number: 209 but max is 0 [ 344.209912][ T5698] usb 5-1: config 2 has no interface number 0 [ 344.209944][ T5698] usb 5-1: config 2 interface 209 has no altsetting 0 [ 344.215252][ T5698] usb 5-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=19.ee [ 344.215282][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.215301][ T5698] usb 5-1: Product: syz [ 344.215316][ T5698] usb 5-1: Manufacturer: syz [ 344.215330][ T5698] usb 5-1: SerialNumber: syz [ 345.063180][ T5698] usb 5-1: can't set config #2, error -71 [ 345.434123][ T5698] usb 5-1: USB disconnect, device number 23 [ 345.877511][ T36] audit: type=1326 audit(1777193931.940:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.4.725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f553985cdd9 code=0x0 [ 347.059914][ T9] usb 3-1: USB disconnect, device number 20 [ 347.078000][ T9] ftdi_sio 3-1:3.65: device disconnected [ 348.963981][ T5732] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 349.003907][ T5698] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 349.193744][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 349.202419][ T5732] usb 1-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 349.202452][ T5732] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 349.202479][ T5732] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 349.202505][ T5732] usb 1-1: config 0 interface 0 has no altsetting 0 [ 349.202538][ T5732] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 349.202561][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.545796][ T5732] usb 1-1: config 0 descriptor?? [ 349.717249][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 349.717340][ T5698] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 349.717365][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 349.717387][ T5698] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 349.723429][ T5698] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 349.723457][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.723476][ T5698] usb 3-1: Product: syz [ 349.723489][ T5698] usb 3-1: Manufacturer: syz [ 349.723503][ T5698] usb 3-1: SerialNumber: syz [ 349.780840][ T5698] usb 3-1: config 0 descriptor?? [ 349.844785][ T5698] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 349.932731][ T8248] netlink: 176 bytes leftover after parsing attributes in process `syz.1.733'. [ 349.932746][ T8248] openvswitch: netlink: Flow key attr not present in new flow. [ 350.130221][ T5732] hid (null): unknown global tag 0xe [ 350.130252][ T5732] hid (null): unknown global tag 0xe [ 350.130370][ T5732] hid (null): unknown global tag 0x63 [ 350.130385][ T5732] hid (null): unknown global tag 0xe [ 350.130400][ T5732] hid (null): global environment stack underflow [ 350.130454][ T5732] hid (null): unknown global tag 0xc [ 350.170242][ T5732] hid (null): unknown global tag 0xe4 [ 350.170672][ T5732] hid (null): unknown global tag 0x52 [ 350.170688][ T5732] hid (null): unknown global tag 0xe [ 350.170752][ T5732] hid (null): invalid report_size 222345300 [ 351.551198][ T5732] usb 1-1: USB disconnect, device number 26 [ 351.764465][ T5698] scsi host2: usb-storage 3-1:0.0 [ 352.065411][ T5698] usb 3-1: USB disconnect, device number 21 [ 352.187536][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 352.187579][ T8258] bond0: Unable to set up delay as MII monitoring is disabled [ 352.372179][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 352.388551][ T8263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.738'. [ 352.663804][ T42] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 353.053804][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 353.056312][ T42] usb 1-1: config 66 has an invalid interface number: 42 but max is 0 [ 353.056336][ T42] usb 1-1: config 66 has no interface number 0 [ 353.056387][ T42] usb 1-1: config 66 interface 42 altsetting 12 endpoint 0x5 has an invalid bInterval 64, changing to 7 [ 353.056416][ T42] usb 1-1: config 66 interface 42 has no altsetting 0 [ 353.104826][ T42] usb 1-1: New USB device found, idVendor=eb1a, idProduct=17df, bcdDevice=2e.0c [ 353.104852][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.104869][ T42] usb 1-1: Product: syz [ 353.104880][ T42] usb 1-1: Manufacturer: 餳㤪妝둈མ렕尅ᄓধ [ 353.104893][ T42] usb 1-1: SerialNumber: syz [ 353.592246][ T42] dvb-usb: found a 'KWorld V-Stream XPERT DTV - DVB-T USB1.1' in warm state. [ 353.592296][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 353.667346][ T8258] syz.4.735 (8258) used greatest stack depth: 16744 bytes left [ 353.687599][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.688515][ T42] dvbdev: DVB: registering new adapter (KWorld V-Stream XPERT DTV - DVB-T USB1.1) [ 353.688566][ T42] usb 1-1: media controller created [ 354.671733][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.008035][ T8277] FAULT_INJECTION: forcing a failure. [ 355.008035][ T8277] name failslab, interval 1, probability 0, space 0, times 0 [ 355.008071][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.1.744 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.008106][ T8277] Tainted: [L]=SOFTLOCKUP [ 355.008113][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.008123][ T8277] Call Trace: [ 355.008131][ T8277] [ 355.008138][ T8277] dump_stack_lvl+0xe8/0x150 [ 355.008166][ T8277] should_fail_ex+0x46b/0x600 [ 355.008199][ T8277] should_failslab+0xa8/0x100 [ 355.008222][ T8277] __kmalloc_noprof+0xdf/0x7b0 [ 355.008243][ T8277] ? fanotify_handle_event+0x206a/0x3f10 [ 355.008267][ T8277] ? exportfs_encode_inode_fh+0x1f0/0x430 [ 355.008295][ T8277] fanotify_handle_event+0x206a/0x3f10 [ 355.008341][ T8277] ? __pfx_fanotify_handle_event+0x10/0x10 [ 355.008371][ T8277] ? fsnotify+0x74c/0x1b00 [ 355.008399][ T8277] ? __pfx_fanotify_handle_event+0x10/0x10 [ 355.008425][ T8277] fsnotify+0x1444/0x1b00 [ 355.008458][ T8277] ? fsnotify+0x74c/0x1b00 [ 355.008476][ T8277] ? __pfx_fsnotify+0x10/0x10 [ 355.008491][ T8277] ? take_dentry_name_snapshot+0x556/0x570 [ 355.008532][ T8277] __fsnotify_parent+0x50d/0x620 [ 355.008550][ T8277] ? touch_atime+0xf1/0x6b0 [ 355.008576][ T8277] ? __pfx___fsnotify_parent+0x10/0x10 [ 355.008613][ T8277] __kernel_read+0x783/0x9c0 [ 355.008640][ T8277] ? __pfx___kernel_read+0x10/0x10 [ 355.008686][ T8277] integrity_kernel_read+0x89/0xd0 [ 355.008709][ T8277] ? __pfx_integrity_kernel_read+0x10/0x10 [ 355.008731][ T8277] ? kernel_fpu_end+0x79/0xa0 [ 355.008764][ T8277] ima_calc_file_hash+0x452/0x870 [ 355.008786][ T8277] ? is_bpf_text_address+0x26/0x2b0 [ 355.008815][ T8277] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 355.008891][ T8277] ima_collect_measurement+0x523/0x9d0 [ 355.008927][ T8277] ? __pfx_ima_collect_measurement+0x10/0x10 [ 355.008970][ T8277] ? simple_xattr_get+0x33/0x750 [ 355.009014][ T8277] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 355.009047][ T8277] process_measurement+0x12d9/0x1c90 [ 355.009095][ T8277] ? __pfx_process_measurement+0x10/0x10 [ 355.009119][ T8277] ? _parse_integer_limit+0x1ae/0x1f0 [ 355.009183][ T8277] ? get_pid_task+0x20/0x1f0 [ 355.009223][ T8277] ima_file_mmap+0x1b0/0x200 [ 355.009249][ T8277] ? __pfx_ima_file_mmap+0x10/0x10 [ 355.009285][ T8277] security_mmap_file+0x773/0xa20 [ 355.009311][ T8277] vm_mmap_pgoff+0x134/0x4f0 [ 355.009335][ T8277] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 355.009361][ T8277] ? __fget_files+0x2a/0x420 [ 355.009385][ T8277] ? __fget_files+0x3a6/0x420 [ 355.009408][ T8277] ? __fget_files+0x2a/0x420 [ 355.009437][ T8277] ksys_mmap_pgoff+0x4e8/0x720 [ 355.009458][ T8277] ? __x64_sys_mmap+0x7f/0x140 [ 355.009480][ T8277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.009500][ T8277] do_syscall_64+0x15f/0xf80 [ 355.009517][ T8277] ? trace_irq_disable+0x3b/0x140 [ 355.009537][ T8277] ? clear_bhb_loop+0x40/0x90 [ 355.009561][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.009580][ T8277] RIP: 0033:0x7f841ce8cdd9 [ 355.009598][ T8277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.009613][ T8277] RSP: 002b:00007f841b0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 355.009634][ T8277] RAX: ffffffffffffffda RBX: 00007f841d105fa0 RCX: 00007f841ce8cdd9 [ 355.009648][ T8277] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 355.009661][ T8277] RBP: 00007f841b0e6090 R08: 0000000000000004 R09: 0000000000000000 [ 355.009673][ T8277] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000002 [ 355.009684][ T8277] R13: 00007f841d106038 R14: 00007f841d105fa0 R15: 00007ffdcc921918 [ 355.009716][ T8277] [ 356.199924][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 356.200006][ T42] dvb-usb: no frontend was attached by 'KWorld V-Stream XPERT DTV - DVB-T USB1.1' [ 356.265109][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 356.819228][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 356.819261][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 356.834049][ T42] dvb-usb: KWorld V-Stream XPERT DTV - DVB-T USB1.1 successfully initialized and connected. [ 356.893897][ T42] usb 1-1: USB disconnect, device number 27 [ 357.356527][ T8289] netlink: 176 bytes leftover after parsing attributes in process `syz.3.746'. [ 357.356542][ T8289] openvswitch: netlink: Flow key attr not present in new flow. [ 357.684766][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 357.702090][ T8292] netlink: 44 bytes leftover after parsing attributes in process `syz.0.749'. [ 360.397111][ T42] dvb-usb: KWorld V-Stream XPERT DTV - DVB-T USB1. successfully deinitialized and disconnected. [ 362.639001][ T8314] syz.0.754 (8314): drop_caches: 2 [ 366.555375][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 366.563858][ T5817] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 366.837232][ T5817] usb 1-1: device descriptor read/64, error -71 [ 366.973824][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 366.981656][ T9] usb 2-1: config 73 has an invalid interface number: 150 but max is 2 [ 366.981682][ T9] usb 2-1: config 73 has an invalid interface number: 165 but max is 2 [ 366.981703][ T9] usb 2-1: config 73 contains an unexpected descriptor of type 0x2, skipping [ 366.981723][ T9] usb 2-1: config 73 has no interface number 0 [ 366.981740][ T9] usb 2-1: config 73 has no interface number 1 [ 366.981806][ T9] usb 2-1: config 73 interface 150 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 366.981829][ T9] usb 2-1: config 73 interface 150 altsetting 247 bulk endpoint 0xD has invalid maxpacket 8 [ 366.981853][ T9] usb 2-1: config 73 interface 150 altsetting 247 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 366.981881][ T9] usb 2-1: config 73 interface 150 altsetting 247 has an endpoint descriptor with address 0x22, changing to 0x2 [ 366.981906][ T9] usb 2-1: config 73 interface 150 altsetting 247 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 366.981946][ T9] usb 2-1: config 73 interface 165 altsetting 2 endpoint 0x1 has an invalid bInterval 227, changing to 7 [ 366.981970][ T9] usb 2-1: config 73 interface 165 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 366.981992][ T9] usb 2-1: config 73 interface 165 altsetting 2 endpoint 0x5 has an invalid bInterval 22, changing to 7 [ 366.982048][ T9] usb 2-1: config 73 interface 2 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 366.982073][ T9] usb 2-1: config 73 interface 2 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 366.982095][ T9] usb 2-1: config 73 interface 2 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 366.982118][ T9] usb 2-1: config 73 interface 2 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 64 [ 366.982142][ T9] usb 2-1: config 73 interface 2 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16 [ 366.982165][ T9] usb 2-1: config 73 interface 2 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 366.982187][ T9] usb 2-1: config 73 interface 2 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 366.982215][ T9] usb 2-1: config 73 interface 2 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 366.982238][ T9] usb 2-1: config 73 interface 2 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 366.982260][ T9] usb 2-1: config 73 interface 2 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 366.982282][ T9] usb 2-1: config 73 interface 2 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 366.982303][ T9] usb 2-1: config 73 interface 2 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 366.982324][ T9] usb 2-1: config 73 interface 150 has no altsetting 0 [ 366.982342][ T9] usb 2-1: config 73 interface 165 has no altsetting 0 [ 366.982359][ T9] usb 2-1: config 73 interface 2 has no altsetting 0 [ 367.801606][ T9] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ef.a5 [ 367.801636][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.801656][ T9] usb 2-1: Product: 劆쳩ྙㄑꥵ酀R藖꣙쯆㬯ȇ摐╾ꦎめ莖ꋳ㋢堓혥게৚뱞纀ၙᒣ밗쪬쬋㊦ﱃ瑄划글듩嚔摔ັ⍲숣Ꙭᙗ䪕郯窽偈崭柧儬㱱⣔慕㵑솯ﲮ丌笽₈릐爍磤ꃬᘢ㜵㊚Ωꪵ咥꤇穆䮬೯ [ 367.801682][ T9] usb 2-1: Manufacturer: ࠇ [ 367.801697][ T9] usb 2-1: SerialNumber: ခ [ 367.860755][ T5817] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 367.893635][ T8338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 368.073974][ T5817] usb 1-1: device descriptor read/64, error -71 [ 369.042683][ T5817] usb usb1-port1: attempt power cycle [ 370.084089][ T5817] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 372.174613][ T5817] usb 1-1: device descriptor read/8, error -71 [ 376.803976][ T42] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 376.954569][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 376.956924][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.956955][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.957012][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 376.957035][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.158157][ T42] usb 1-1: config 0 descriptor?? [ 377.180582][ T42] hub 1-1:0.0: USB hub found [ 377.433906][ T42] hub 1-1:0.0: 6 ports detected [ 377.434404][ T42] hub 1-1:0.0: insufficient power available to use all downstream ports [ 378.130059][ T4922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.221381][ T4922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.227248][ T4922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.228936][ T4922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.233190][ T4922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.530944][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.531014][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.021858][ T42] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 379.021882][ T42] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 379.028306][ T8368] netlink: 152 bytes leftover after parsing attributes in process `syz.4.773'. [ 379.038209][ T42] usbhid 1-1:0.0: can't add hid device: -32 [ 379.038316][ T42] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 380.163797][ T42] usb 1-1: USB disconnect, device number 32 [ 380.271039][ T4922] Bluetooth: hci1: command tx timeout [ 381.238261][ T8392] Bluetooth: MGMT ver 1.23 [ 381.337821][ T8392] Bluetooth: hci0: invalid len left 7, exp >= 103 [ 382.343729][ T4922] Bluetooth: hci1: command tx timeout [ 382.421823][ T8397] batman_adv: batadv0: Adding interface: dummy0 [ 382.421840][ T8397] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.421873][ T8397] batman_adv: batadv0: Interface activated: dummy0 [ 383.055720][ T8397] batadv0: mtu less than device minimum [ 383.183273][ T8397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.253579][ T8397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.289965][ T8397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.398831][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.432788][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.461813][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.465765][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.485618][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.841081][ T8397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.908138][ T8397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.058039][ T8397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.085085][ T8397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.187169][ T8397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.280083][ T8393] syz.2.779 (8393): drop_caches: 2 [ 384.578265][ T4922] Bluetooth: hci1: command tx timeout [ 384.621399][ T8397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.874137][ T8406] tmpfs: Unknown parameter 'smackfsro' [ 386.103760][ T4922] Bluetooth: hci5: command tx timeout [ 386.653771][ T4922] Bluetooth: hci1: command tx timeout [ 388.045432][ T5732] IPVS: starting estimator thread 0... [ 388.197873][ T4922] Bluetooth: hci5: command tx timeout [ 388.712000][ T8429] IPVS: using max 11 ests per chain, 26400 per kthread [ 391.020240][ T4922] Bluetooth: hci5: command tx timeout [ 391.627422][ T8444] netlink: 'syz.0.792': attribute type 6 has an invalid length. [ 391.894676][ T8444] 9p: Bad value for 'rfdno' [ 393.164283][ T4922] Bluetooth: hci5: command tx timeout [ 393.968987][ T5732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.990575][ T1403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.565466][ T8466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.799'. [ 396.653726][ T5590] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 396.893827][ T5590] usb 5-1: device descriptor read/64, error -71 [ 397.153834][ T5590] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 397.453824][ T5590] usb 5-1: device descriptor read/64, error -71 [ 397.453930][ T5721] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 397.575458][ T5590] usb usb5-port1: attempt power cycle [ 397.703477][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 397.845682][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 397.870166][ T8474] sctp: [Deprecated]: syz.2.801 (pid 8474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.870166][ T8474] Use struct sctp_sack_info instead [ 398.668670][ T8475] net_ratelimit: 10 callbacks suppressed [ 398.668691][ T8475] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 398.669015][ T8475] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 399.255883][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.864447][ T5721] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 399.864492][ T5721] usb 1-1: can't read configurations, error -71 [ 400.737808][ T8481] FAULT_INJECTION: forcing a failure. [ 400.737808][ T8481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.737906][ T8481] CPU: 1 UID: 0 PID: 8481 Comm: syz.4.802 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 400.737933][ T8481] Tainted: [L]=SOFTLOCKUP [ 400.737939][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 400.737955][ T8481] Call Trace: [ 400.737962][ T8481] [ 400.737971][ T8481] dump_stack_lvl+0xe8/0x150 [ 400.737999][ T8481] should_fail_ex+0x46b/0x600 [ 400.738033][ T8481] _copy_to_user+0x31/0xb0 [ 400.738061][ T8481] simple_read_from_buffer+0xe1/0x170 [ 400.738092][ T8481] proc_fail_nth_read+0x1be/0x230 [ 400.738123][ T8481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.738154][ T8481] ? rw_verify_area+0xdd/0x4e0 [ 400.738173][ T8481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.738201][ T8481] vfs_read+0x212/0xa80 [ 400.738230][ T8481] ? __pfx_vfs_read+0x10/0x10 [ 400.738253][ T8481] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 400.738280][ T8481] ? lockdep_hardirqs_on+0x7a/0x110 [ 400.738307][ T8481] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 400.738333][ T8481] ? mutex_lock_nested+0x152/0x1d0 [ 400.738354][ T8481] ? fdget_pos+0x252/0x320 [ 400.738380][ T8481] ksys_read+0x156/0x270 [ 400.738403][ T8481] ? __pfx_ksys_read+0x10/0x10 [ 400.738421][ T8481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.738449][ T8481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.738469][ T8481] do_syscall_64+0x15f/0xf80 [ 400.738487][ T8481] ? clear_bhb_loop+0x40/0x90 [ 400.738510][ T8481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.738533][ T8481] RIP: 0033:0x7f553981d60e [ 400.738550][ T8481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.738567][ T8481] RSP: 002b:00007f5537a6bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.738588][ T8481] RAX: ffffffffffffffda RBX: 00007f5537a6c6c0 RCX: 00007f553981d60e [ 400.738601][ T8481] RDX: 000000000000000f RSI: 00007f5537a6c0a0 RDI: 0000000000000006 [ 400.738613][ T8481] RBP: 00007f5537a6c090 R08: 0000000000000000 R09: 0000000000000000 [ 400.738625][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.738637][ T8481] R13: 00007f5539ad6218 R14: 00007f5539ad6180 R15: 00007ffe48a21e28 [ 400.738668][ T8481] [ 402.083630][ T8488] llc_conn_state_process: llc_conn_service failed [ 403.184867][ T8494] netlink: 'syz.0.807': attribute type 6 has an invalid length. [ 403.206119][ T8494] 9p: Bad value for 'rfdno' [ 403.480280][ T5732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.558151][ T4922] Bluetooth: hci4: ACL packet for unknown connection handle 2248 [ 404.744493][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.184823][ T8515] FAULT_INJECTION: forcing a failure. [ 406.184823][ T8515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.184881][ T8515] CPU: 1 UID: 0 PID: 8515 Comm: syz.0.810 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 406.184908][ T8515] Tainted: [L]=SOFTLOCKUP [ 406.184915][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.184926][ T8515] Call Trace: [ 406.184933][ T8515] [ 406.184941][ T8515] dump_stack_lvl+0xe8/0x150 [ 406.184969][ T8515] should_fail_ex+0x46b/0x600 [ 406.185001][ T8515] _copy_to_user+0x31/0xb0 [ 406.185024][ T8515] simple_read_from_buffer+0xe1/0x170 [ 406.185056][ T8515] proc_fail_nth_read+0x1be/0x230 [ 406.185086][ T8515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.185116][ T8515] ? rw_verify_area+0x2ac/0x4e0 [ 406.185136][ T8515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.185164][ T8515] vfs_read+0x212/0xa80 [ 406.185193][ T8515] ? __pfx_vfs_read+0x10/0x10 [ 406.185216][ T8515] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 406.185250][ T8515] ? lockdep_hardirqs_on+0x7a/0x110 [ 406.185275][ T8515] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 406.185301][ T8515] ? mutex_lock_nested+0x152/0x1d0 [ 406.185322][ T8515] ? fdget_pos+0x252/0x320 [ 406.185348][ T8515] ksys_read+0x156/0x270 [ 406.185371][ T8515] ? __pfx_ksys_read+0x10/0x10 [ 406.185400][ T8515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.185420][ T8515] do_syscall_64+0x15f/0xf80 [ 406.185439][ T8515] ? clear_bhb_loop+0x40/0x90 [ 406.185462][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.185480][ T8515] RIP: 0033:0x7efe8920d60e [ 406.185498][ T8515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 406.185513][ T8515] RSP: 002b:00007efe8745bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.185533][ T8515] RAX: ffffffffffffffda RBX: 00007efe8745c6c0 RCX: 00007efe8920d60e [ 406.185546][ T8515] RDX: 000000000000000f RSI: 00007efe8745c0a0 RDI: 000000000000000b [ 406.185559][ T8515] RBP: 00007efe8745c090 R08: 0000000000000000 R09: 0000000000000000 [ 406.185571][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.185582][ T8515] R13: 00007efe894c6218 R14: 00007efe894c6180 R15: 00007ffdd99e98b8 [ 406.185614][ T8515] [ 407.643788][ T5817] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 407.994195][ T8526] netlink: 72 bytes leftover after parsing attributes in process `syz.4.814'. [ 408.540829][ T5817] usb 1-1: device descriptor read/64, error -71 [ 409.719145][ T5817] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 409.853780][ T5817] usb 1-1: device descriptor read/64, error -71 [ 409.969216][ T5817] usb usb1-port1: attempt power cycle [ 410.391831][ T5817] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 410.504080][ T1539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.593798][ T5817] usb 1-1: device not accepting address 37, error -71 [ 410.779294][ T8542] netlink: 'syz.0.817': attribute type 6 has an invalid length. [ 410.790782][ T8542] 9p: Bad value for 'rfdno' [ 411.694497][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.694627][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.694847][ T8369] bridge_slave_0: entered allmulticast mode [ 411.730584][ T8369] bridge_slave_0: entered promiscuous mode [ 411.939686][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.939802][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.939972][ T8369] bridge_slave_1: entered allmulticast mode [ 411.975617][ T8369] bridge_slave_1: entered promiscuous mode [ 413.379800][ T8549] 9p: Bad value for 'wfdno' [ 413.938517][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.938729][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.938922][ T8400] bridge_slave_0: entered allmulticast mode [ 413.975360][ T8400] bridge_slave_0: entered promiscuous mode [ 414.067239][ T8369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.068140][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.068256][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.068432][ T8400] bridge_slave_1: entered allmulticast mode [ 414.122854][ T8400] bridge_slave_1: entered promiscuous mode [ 414.150810][ T8369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.053255][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.258184][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.266343][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.268267][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.273269][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.624301][ T194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.680201][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.707479][ T8369] team0: Port device team_slave_0 added [ 415.722202][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.738021][ T8369] team0: Port device team_slave_1 added [ 416.596897][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 417.490888][ T4922] Bluetooth: hci2: command tx timeout [ 418.033476][ T8400] team0: Port device team_slave_0 added [ 418.134640][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.134657][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.134684][ T8369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.356786][ T8400] team0: Port device team_slave_1 added [ 418.369354][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.369369][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.369394][ T8369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.330790][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.330806][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.330832][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.456327][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.456343][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.456370][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.593820][ T4922] Bluetooth: hci2: command tx timeout [ 420.332678][ T8369] hsr_slave_0: entered promiscuous mode [ 420.356362][ T8369] hsr_slave_1: entered promiscuous mode [ 420.357292][ T8369] debugfs: 'hsr0' already exists in 'hsr' [ 420.357313][ T8369] Cannot create hsr debugfs directory [ 420.456220][ T8584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.826'. [ 420.665926][ T194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.577558][ T8400] hsr_slave_0: entered promiscuous mode [ 421.578836][ T8400] hsr_slave_1: entered promiscuous mode [ 421.579730][ T8400] debugfs: 'hsr0' already exists in 'hsr' [ 421.579751][ T8400] Cannot create hsr debugfs directory [ 421.624070][ T4922] Bluetooth: hci2: command tx timeout [ 422.775804][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.713701][ T4922] Bluetooth: hci2: command tx timeout [ 424.584535][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.594294][ T5817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.343686][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 426.672641][ T1539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.354489][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 427.442475][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 427.445660][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 427.460032][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 427.463697][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.805078][ T59] Bluetooth: hci6: command tx timeout [ 431.863752][ T59] Bluetooth: hci6: command tx timeout [ 432.116805][ T8620] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 432.277484][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.509293][ T5817] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 433.027710][ T5817] usb 1-1: unable to get BOS descriptor or descriptor too short [ 433.029574][ T5817] usb 1-1: not running at top speed; connect to a high speed hub [ 433.053553][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.053612][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.093223][ T5817] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 433.093251][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.093271][ T5817] usb 1-1: Product: syz [ 433.093285][ T5817] usb 1-1: Manufacturer: syz [ 433.093299][ T5817] usb 1-1: SerialNumber: syz [ 433.245803][ T8620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.999663][ T59] Bluetooth: hci6: command tx timeout [ 436.033933][ T59] Bluetooth: hci6: command tx timeout [ 437.307054][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.713187][ T4922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 437.845744][ T4922] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 437.890683][ T4922] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 437.892740][ T4922] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 437.894882][ T4922] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 438.864524][ T5817] usb 1-1: unit 0 not found! [ 439.947623][ T59] Bluetooth: hci7: command tx timeout [ 439.948405][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.969642][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.969720][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.023686][ T59] Bluetooth: hci7: command tx timeout [ 442.272174][ T5817] usb 1-1: USB disconnect, device number 39 [ 443.144043][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.756531][ T8559] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.756663][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.756892][ T8559] bridge_slave_0: entered allmulticast mode [ 443.790724][ T8559] bridge_slave_0: entered promiscuous mode [ 443.892876][ T8559] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.893006][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.893225][ T8559] bridge_slave_1: entered allmulticast mode [ 443.927004][ T8559] bridge_slave_1: entered promiscuous mode [ 444.203876][ T59] Bluetooth: hci7: command tx timeout [ 444.364525][ T4922] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 444.661331][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.672986][ T4922] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 444.757043][ T4922] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 444.834747][ T4922] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 444.890561][ T4922] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 445.707245][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 446.278268][ T59] Bluetooth: hci7: command tx timeout [ 447.100943][ T8559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.383901][ T59] Bluetooth: hci8: command tx timeout [ 448.275295][ T8559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.957054][ T1539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.513773][ T59] Bluetooth: hci8: command tx timeout [ 450.458333][ T8680] netlink: 700 bytes leftover after parsing attributes in process `syz.0.842'. [ 451.474253][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.562470][ T59] Bluetooth: hci8: command tx timeout [ 452.672952][ T8682] netlink: 176 bytes leftover after parsing attributes in process `syz.0.843'. [ 452.672969][ T8682] openvswitch: netlink: Flow key attr not present in new flow. [ 453.060806][ T36] audit: type=1326 audit(1777194039.120:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 453.060857][ T36] audit: type=1326 audit(1777194039.120:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 453.123795][ T36] audit: type=1326 audit(1777194039.180:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 453.123842][ T36] audit: type=1326 audit(1777194039.180:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 453.143643][ T36] audit: type=1326 audit(1777194039.200:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 453.143690][ T36] audit: type=1326 audit(1777194039.200:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 453.143727][ T36] audit: type=1326 audit(1777194039.200:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 453.143772][ T36] audit: type=1326 audit(1777194039.200:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 453.143810][ T36] audit: type=1326 audit(1777194039.200:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 453.623709][ T59] Bluetooth: hci8: command tx timeout [ 455.449385][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.705156][ T8559] team0: Port device team_slave_0 added [ 455.884810][ T8559] team0: Port device team_slave_1 added [ 456.336989][ T8697] FAULT_INJECTION: forcing a failure. [ 456.336989][ T8697] name fail_futex, interval 1, probability 0, space 0, times 1 [ 456.337023][ T8697] CPU: 1 UID: 0 PID: 8697 Comm: syz.0.847 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.337049][ T8697] Tainted: [L]=SOFTLOCKUP [ 456.337056][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.337067][ T8697] Call Trace: [ 456.337074][ T8697] [ 456.337082][ T8697] dump_stack_lvl+0xe8/0x150 [ 456.337109][ T8697] should_fail_ex+0x46b/0x600 [ 456.337140][ T8697] get_futex_key+0x1b0/0x1590 [ 456.337176][ T8697] ? __pfx_get_futex_key+0x10/0x10 [ 456.337211][ T8697] futex_wake_op+0x156/0xdd0 [ 456.337237][ T8697] ? kasan_quarantine_put+0xbb/0x1f0 [ 456.337259][ T8697] ? __pfx_futex_wake_op+0x10/0x10 [ 456.337279][ T8697] ? kmem_cache_free+0x187/0x6c0 [ 456.337300][ T8697] ? __seccomp_filter+0xd48/0x1ef0 [ 456.337327][ T8697] ? __seccomp_filter+0xd48/0x1ef0 [ 456.337358][ T8697] do_futex+0x3bd/0x420 [ 456.337382][ T8697] ? __pfx___seccomp_filter+0x10/0x10 [ 456.337411][ T8697] ? __pfx_do_futex+0x10/0x10 [ 456.337433][ T8697] ? rt_mutex_slowunlock+0x1cb/0x300 [ 456.337463][ T8697] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 456.337492][ T8697] __se_sys_futex+0x3a8/0x450 [ 456.337523][ T8697] ? __pfx___se_sys_futex+0x10/0x10 [ 456.337548][ T8697] ? __pfx_ksys_write+0x10/0x10 [ 456.337573][ T8697] ? __x64_sys_futex+0x21/0xf0 [ 456.337596][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.337616][ T8697] do_syscall_64+0x15f/0xf80 [ 456.337633][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.337652][ T8697] ? clear_bhb_loop+0x40/0x90 [ 456.337674][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.337692][ T8697] RIP: 0033:0x7efe8924cdd9 [ 456.337709][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.337725][ T8697] RSP: 002b:00007efe8749e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 456.337745][ T8697] RAX: ffffffffffffffda RBX: 00007efe894c5fa0 RCX: 00007efe8924cdd9 [ 456.337758][ T8697] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000000 [ 456.337770][ T8697] RBP: 00007efe8749e090 R08: 0000200000000300 R09: 00000000c1000004 [ 456.337783][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.337794][ T8697] R13: 00007efe894c6038 R14: 00007efe894c5fa0 R15: 00007ffdd99e98b8 [ 456.337824][ T8697] [ 456.339417][ T36] audit: type=1326 audit(1777194042.390:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 456.505133][ T8352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.704729][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.704746][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.704771][ T8559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.010356][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.010373][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.010399][ T8559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.340895][ T8703] netlink: 700 bytes leftover after parsing attributes in process `syz.0.849'. [ 458.890879][ T8559] hsr_slave_0: entered promiscuous mode [ 458.894732][ T8559] hsr_slave_1: entered promiscuous mode [ 458.895614][ T8559] debugfs: 'hsr0' already exists in 'hsr' [ 458.895636][ T8559] Cannot create hsr debugfs directory [ 459.737235][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 459.737254][ T36] audit: type=1800 audit(1777194045.780:573): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.850" name="/" dev="tmpfs" ino=1139 res=0 errno=0 [ 461.119819][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.705012][ T1403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.865901][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.755350][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.833915][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.834015][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.834223][ T8605] bridge_slave_0: entered allmulticast mode [ 467.870436][ T8605] bridge_slave_0: entered promiscuous mode [ 467.923805][ T5698] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 469.001521][ T5698] usb 1-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 469.001577][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 469.001600][ T5698] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 469.001623][ T5698] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.191776][ T5698] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 470.191806][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.191826][ T5698] usb 1-1: Product: syz [ 470.191840][ T5698] usb 1-1: Manufacturer: syz [ 470.191854][ T5698] usb 1-1: SerialNumber: syz [ 470.244655][ T5698] usb 1-1: config 0 descriptor?? [ 470.274896][ T5698] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 470.360765][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.360884][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.361097][ T8605] bridge_slave_1: entered allmulticast mode [ 470.400382][ T8605] bridge_slave_1: entered promiscuous mode [ 472.293151][ T8605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.297064][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.297182][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.297373][ T8631] bridge_slave_0: entered allmulticast mode [ 472.310590][ T8631] bridge_slave_0: entered promiscuous mode [ 472.372679][ T8605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.584460][ T1459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.905269][ T1459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.565581][ T8631] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.565787][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.566006][ T8631] bridge_slave_1: entered allmulticast mode [ 474.616215][ T8631] bridge_slave_1: entered promiscuous mode [ 475.172398][ T8605] team0: Port device team_slave_0 added [ 475.547696][ T4922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.600458][ T4922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.611033][ T4922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.641479][ T4922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.662712][ T4922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.502399][ T8605] team0: Port device team_slave_1 added [ 476.532301][ T8631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.704331][ T1459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.778001][ T8631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.198311][ T59] Bluetooth: hci1: command tx timeout [ 478.344369][ T1401] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.057324][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.057341][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.057367][ T8605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.053145][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.053162][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.053189][ T8605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.140236][ T5590] usb 2-1: USB disconnect, device number 25 [ 480.263961][ T59] Bluetooth: hci1: command tx timeout [ 480.309813][ T8631] team0: Port device team_slave_0 added [ 481.430801][ T8631] team0: Port device team_slave_1 added [ 482.371253][ T4922] Bluetooth: hci1: command tx timeout [ 483.464040][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.681891][ T4922] Bluetooth: hci1: command tx timeout [ 484.730215][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.001288][ T1459] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.676557][ T1401] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.915684][ T4922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 488.979901][ T4922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 488.994760][ T4922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.000805][ T4922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.002903][ T4922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 490.101094][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.147222][ T4922] Bluetooth: hci2: command tx timeout [ 493.224266][ T4922] Bluetooth: hci2: command tx timeout [ 493.721670][ T1401] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.303717][ T4922] Bluetooth: hci2: command tx timeout [ 495.354316][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.354436][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.354687][ T8662] bridge_slave_0: entered allmulticast mode [ 495.367534][ T8662] bridge_slave_0: entered promiscuous mode [ 495.407665][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.407681][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.407706][ T8631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.865768][ T1401] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.431269][ T8788] FAULT_INJECTION: forcing a failure. [ 496.431269][ T8788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.431307][ T8788] CPU: 1 UID: 0 PID: 8788 Comm: syz.0.864 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 496.431333][ T8788] Tainted: [L]=SOFTLOCKUP [ 496.431340][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.431350][ T8788] Call Trace: [ 496.431357][ T8788] [ 496.431365][ T8788] dump_stack_lvl+0xe8/0x150 [ 496.431393][ T8788] should_fail_ex+0x46b/0x600 [ 496.431426][ T8788] strncpy_from_user+0x36/0x2b0 [ 496.431455][ T8788] do_getname+0x77/0x250 [ 496.431483][ T8788] do_mq_open+0x171/0x7d0 [ 496.431510][ T8788] ? __pfx_do_mq_open+0x10/0x10 [ 496.431531][ T8788] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 496.431559][ T8788] ? rt_mutex_slowunlock+0x1cb/0x300 [ 496.431580][ T8788] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 496.431609][ T8788] __x64_sys_mq_open+0x185/0x1e0 [ 496.431633][ T8788] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 496.431651][ T8788] ? ksys_write+0x248/0x270 [ 496.431684][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.431705][ T8788] do_syscall_64+0x15f/0xf80 [ 496.431721][ T8788] ? trace_irq_disable+0x3b/0x140 [ 496.431742][ T8788] ? clear_bhb_loop+0x40/0x90 [ 496.431764][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.431782][ T8788] RIP: 0033:0x7efe8924cdd9 [ 496.431799][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.431815][ T8788] RSP: 002b:00007efe8749e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 496.431834][ T8788] RAX: ffffffffffffffda RBX: 00007efe894c5fa0 RCX: 00007efe8924cdd9 [ 496.431848][ T8788] RDX: 0000000000000008 RSI: 0000000000000800 RDI: 0000200000000240 [ 496.431859][ T8788] RBP: 00007efe8749e090 R08: 0000000000000000 R09: 0000000000000000 [ 496.431871][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.431882][ T8788] R13: 00007efe894c6038 R14: 00007efe894c5fa0 R15: 00007ffdd99e98b8 [ 496.431919][ T8788] [ 497.383681][ T4922] Bluetooth: hci2: command tx timeout [ 498.670772][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.670896][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.671149][ T8662] bridge_slave_1: entered allmulticast mode [ 498.679563][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.736729][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.738281][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.742637][ T8662] bridge_slave_1: entered promiscuous mode [ 498.769762][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.772107][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.930932][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.930949][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.930975][ T8631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.985289][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 499.543815][ T36] audit: type=1326 audit(1777194085.590:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8924cdd9 code=0x7ffc0000 [ 499.543867][ T36] audit: type=1326 audit(1777194085.600:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8924ca6b code=0x7ffc0000 [ 499.543908][ T36] audit: type=1326 audit(1777194085.600:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8924ca6b code=0x7ffc0000 [ 499.544978][ T36] audit: type=1326 audit(1777194085.610:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8924ca6b code=0x7ffc0000 [ 499.545023][ T36] audit: type=1326 audit(1777194085.610:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8924ca6b code=0x7ffc0000 [ 499.545062][ T36] audit: type=1326 audit(1777194085.610:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8924ca6b code=0x7ffc0000 [ 499.545101][ T36] audit: type=1326 audit(1777194085.610:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8924ca6b code=0x7ffc0000 [ 499.545138][ T36] audit: type=1326 audit(1777194085.610:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8924ca6b code=0x7ffc0000 [ 499.545176][ T36] audit: type=1326 audit(1777194085.610:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8924ca6b code=0x7ffc0000 [ 499.545216][ T36] audit: type=1326 audit(1777194085.610:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8924ca6b code=0x7ffc0000 [ 499.682888][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 500.157087][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.267591][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.903707][ T59] Bluetooth: hci3: command tx timeout [ 500.976136][ T8662] team0: Port device team_slave_0 added [ 501.032689][ T8662] team0: Port device team_slave_1 added [ 501.451227][ T8352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.484547][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.484614][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.005911][ T59] Bluetooth: hci3: command tx timeout [ 504.633773][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.640000][ T4922] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.767743][ T4922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 504.804584][ T4922] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 504.805933][ T4922] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 504.807442][ T4922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.074486][ T59] Bluetooth: hci3: command tx timeout [ 506.006546][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.006563][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.006588][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.587724][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.903857][ T59] Bluetooth: hci4: command tx timeout [ 507.144137][ T4922] Bluetooth: hci3: command tx timeout [ 508.998017][ T59] Bluetooth: hci4: command tx timeout [ 510.344246][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.063900][ T59] Bluetooth: hci4: command tx timeout [ 512.264465][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.144174][ T59] Bluetooth: hci4: command tx timeout [ 513.293848][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.293970][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.294220][ T8748] bridge_slave_0: entered allmulticast mode [ 513.298917][ T8748] bridge_slave_0: entered promiscuous mode [ 514.101489][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.101609][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.101825][ T8748] bridge_slave_1: entered allmulticast mode [ 514.119168][ T8748] bridge_slave_1: entered promiscuous mode [ 514.760280][ T4922] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 514.857403][ T8847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 514.864026][ T8847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 514.984822][ T8847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 514.985602][ T8847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 516.104371][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.433521][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.711429][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.143826][ T59] Bluetooth: hci5: command tx timeout [ 517.314314][ T8748] team0: Port device team_slave_0 added [ 517.384662][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.467075][ T8748] team0: Port device team_slave_1 added [ 519.223671][ T59] Bluetooth: hci5: command tx timeout [ 519.918250][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.918267][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.918293][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.306904][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.306920][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.306947][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.778809][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.778932][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.779156][ T8779] bridge_slave_0: entered allmulticast mode [ 520.816073][ T8779] bridge_slave_0: entered promiscuous mode [ 520.931188][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.931362][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.931562][ T8779] bridge_slave_1: entered allmulticast mode [ 520.940308][ T8779] bridge_slave_1: entered promiscuous mode [ 521.205460][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 521.303775][ T59] Bluetooth: hci5: command tx timeout [ 522.049654][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.049787][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.050025][ T8796] bridge_slave_0: entered allmulticast mode [ 522.332560][ T8796] bridge_slave_0: entered promiscuous mode [ 522.541345][ T8779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.582945][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.583136][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.583365][ T8796] bridge_slave_1: entered allmulticast mode [ 522.611004][ T8796] bridge_slave_1: entered promiscuous mode [ 522.648396][ T8779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.697170][ T8748] hsr_slave_0: entered promiscuous mode [ 522.701525][ T8748] hsr_slave_1: entered promiscuous mode [ 522.704556][ T8748] debugfs: 'hsr0' already exists in 'hsr' [ 522.704581][ T8748] Cannot create hsr debugfs directory [ 523.233443][ T8352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.384049][ T59] Bluetooth: hci5: command tx timeout [ 523.856194][ T8796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.932455][ T8779] team0: Port device team_slave_0 added [ 524.103524][ T8796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.222629][ T8779] team0: Port device team_slave_1 added [ 525.688511][ T8796] team0: Port device team_slave_0 added [ 525.811258][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.811273][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.811300][ T8779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.927026][ T8796] team0: Port device team_slave_1 added [ 526.221825][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.221841][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.221875][ T8779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.497902][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.498023][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.498317][ T8822] bridge_slave_0: entered allmulticast mode [ 526.519749][ T8822] bridge_slave_0: entered promiscuous mode [ 526.799404][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.799524][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.799717][ T8822] bridge_slave_1: entered allmulticast mode [ 526.803054][ T8822] bridge_slave_1: entered promiscuous mode [ 526.855093][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.855109][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.855134][ T8796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.988336][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.147842][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.147858][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.147885][ T8796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.195108][ T8822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.233175][ T8779] hsr_slave_0: entered promiscuous mode [ 528.241095][ T8779] hsr_slave_1: entered promiscuous mode [ 528.242183][ T8779] debugfs: 'hsr0' already exists in 'hsr' [ 528.242205][ T8779] Cannot create hsr debugfs directory [ 528.788750][ T8822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.905035][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.376783][ T8822] team0: Port device team_slave_0 added [ 530.497915][ T8796] hsr_slave_0: entered promiscuous mode [ 530.510640][ T8796] hsr_slave_1: entered promiscuous mode [ 530.520770][ T8796] debugfs: 'hsr0' already exists in 'hsr' [ 530.520795][ T8796] Cannot create hsr debugfs directory [ 531.083383][ T8822] team0: Port device team_slave_1 added [ 532.758730][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 533.527579][ T4972] udevd[4972]: worker [8725] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 534.024589][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.500823][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.500839][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.500866][ T8822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.701445][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.701460][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.701480][ T8822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.247978][ T8847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 538.274903][ T8847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 538.344816][ T8847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 538.361076][ T8847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 538.375610][ T8847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.504642][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.784632][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 540.504079][ T59] Bluetooth: hci6: command tx timeout [ 540.631445][ T8822] hsr_slave_0: entered promiscuous mode [ 540.662260][ T8822] hsr_slave_1: entered promiscuous mode [ 540.663097][ T8822] debugfs: 'hsr0' already exists in 'hsr' [ 540.663116][ T8822] Cannot create hsr debugfs directory [ 542.673744][ T59] Bluetooth: hci6: command tx timeout [ 542.961102][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.961347][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.961552][ T8845] bridge_slave_0: entered allmulticast mode [ 543.000744][ T8845] bridge_slave_0: entered promiscuous mode [ 543.259358][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.259480][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.259701][ T8845] bridge_slave_1: entered allmulticast mode [ 543.290500][ T8845] bridge_slave_1: entered promiscuous mode [ 543.656644][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.744224][ T59] Bluetooth: hci6: command tx timeout [ 544.761135][ T8845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.844543][ T8845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.904555][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 545.878997][ T8845] team0: Port device team_slave_0 added [ 546.432099][ T8845] team0: Port device team_slave_1 added [ 546.824073][ T59] Bluetooth: hci6: command tx timeout [ 547.359996][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.360013][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.360039][ T8845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.582854][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.582871][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.582898][ T8845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.013315][ T8847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 549.102409][ T8847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 549.143713][ T8847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 549.161351][ T8847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 549.173199][ T8847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 549.387808][ T8845] hsr_slave_0: entered promiscuous mode [ 549.395144][ T8845] hsr_slave_1: entered promiscuous mode [ 549.398241][ T8845] debugfs: 'hsr0' already exists in 'hsr' [ 549.398268][ T8845] Cannot create hsr debugfs directory [ 551.223708][ T59] Bluetooth: hci7: command tx timeout [ 553.231865][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.303906][ T59] Bluetooth: hci7: command tx timeout [ 553.898107][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.936867][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.937120][ T8877] bridge_slave_0: entered allmulticast mode [ 553.943026][ T8877] bridge_slave_0: entered promiscuous mode [ 554.015415][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.015674][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.015903][ T8877] bridge_slave_1: entered allmulticast mode [ 554.843284][ T8877] bridge_slave_1: entered promiscuous mode [ 555.264274][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.268716][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.393865][ T59] Bluetooth: hci7: command tx timeout [ 556.261501][ T8877] team0: Port device team_slave_0 added [ 556.315086][ T8877] team0: Port device team_slave_1 added [ 556.538553][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.538571][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.538597][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.575050][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.575069][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.575096][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.463798][ T59] Bluetooth: hci7: command tx timeout [ 558.658516][ T8877] hsr_slave_0: entered promiscuous mode [ 558.662320][ T8877] hsr_slave_1: entered promiscuous mode [ 558.667556][ T8877] debugfs: 'hsr0' already exists in 'hsr' [ 558.667582][ T8877] Cannot create hsr debugfs directory [ 559.022599][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.630146][ T8847] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 559.691713][ T8847] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 559.712212][ T8847] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 559.755464][ T8847] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 559.760026][ T8847] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 561.474220][ T819] page_pool_release_retry() stalled pool shutdown: id 30, 48 inflight 60 sec [ 561.944043][ T8847] Bluetooth: hci8: command tx timeout [ 562.896359][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.896439][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.023792][ T8847] Bluetooth: hci8: command tx timeout [ 564.142154][ T1539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.771706][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.979739][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 565.036472][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 565.039333][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 565.040678][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 565.041865][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 565.393207][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.393333][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.396499][ T8892] bridge_slave_0: entered allmulticast mode [ 565.440100][ T8892] bridge_slave_0: entered promiscuous mode [ 565.565984][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.566108][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.566479][ T8892] bridge_slave_1: entered allmulticast mode [ 565.602466][ T8892] bridge_slave_1: entered promiscuous mode [ 565.993249][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.077614][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.109219][ T8847] Bluetooth: hci8: command tx timeout [ 567.223753][ T8847] Bluetooth: hci9: command tx timeout [ 567.655015][ T8892] team0: Port device team_slave_0 added [ 567.761820][ T8892] team0: Port device team_slave_1 added [ 568.183895][ T8847] Bluetooth: hci8: command tx timeout [ 568.582655][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.582674][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.582700][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.138880][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.138897][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.138924][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.303910][ T8847] Bluetooth: hci9: command tx timeout [ 569.864629][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.864757][ T1539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.182578][ T8892] hsr_slave_0: entered promiscuous mode [ 570.202305][ T8892] hsr_slave_1: entered promiscuous mode [ 570.222448][ T8892] debugfs: 'hsr0' already exists in 'hsr' [ 570.222476][ T8892] Cannot create hsr debugfs directory [ 571.481408][ T8847] Bluetooth: hci9: command tx timeout [ 572.288505][ T5698] usb 1-1: USB disconnect, device number 40 [ 573.551714][ T8847] Bluetooth: hci9: command tx timeout [ 575.060787][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 575.142298][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 575.501212][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 575.552294][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 575.566892][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 575.685026][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.817639][ T1539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.290527][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.290649][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.290970][ T8911] bridge_slave_0: entered allmulticast mode [ 577.296223][ T8911] bridge_slave_0: entered promiscuous mode [ 577.306863][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.307066][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.308423][ T8911] bridge_slave_1: entered allmulticast mode [ 577.315187][ T8911] bridge_slave_1: entered promiscuous mode [ 577.690409][ T8847] Bluetooth: hci10: command tx timeout [ 578.212911][ T8911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.392861][ T8911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.962899][ T8911] team0: Port device team_slave_0 added [ 579.067165][ T8911] team0: Port device team_slave_1 added [ 579.566374][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.566533][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.566805][ T8927] bridge_slave_0: entered allmulticast mode [ 579.569596][ T8927] bridge_slave_0: entered promiscuous mode [ 579.703721][ T8847] Bluetooth: hci10: command tx timeout [ 579.759525][ T8927] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.759770][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.759997][ T8927] bridge_slave_1: entered allmulticast mode [ 579.773797][ T8927] bridge_slave_1: entered promiscuous mode [ 579.782245][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.782257][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.782281][ T8911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.008149][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.008166][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.008193][ T8911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.364075][ T8927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.478442][ T8927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.834348][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.208924][ T8911] hsr_slave_0: entered promiscuous mode [ 581.216913][ T8911] hsr_slave_1: entered promiscuous mode [ 581.217957][ T8911] debugfs: 'hsr0' already exists in 'hsr' [ 581.217980][ T8911] Cannot create hsr debugfs directory [ 581.251964][ T8927] team0: Port device team_slave_0 added [ 581.296550][ T8927] team0: Port device team_slave_1 added [ 581.386802][ T1539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.761795][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.761812][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.761836][ T8927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.783780][ T8847] Bluetooth: hci10: command tx timeout [ 581.879772][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.879787][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.879820][ T8927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.864014][ T8847] Bluetooth: hci10: command tx timeout [ 583.996883][ T8927] hsr_slave_0: entered promiscuous mode [ 583.998497][ T8927] hsr_slave_1: entered promiscuous mode [ 583.999602][ T8927] debugfs: 'hsr0' already exists in 'hsr' [ 583.999625][ T8927] Cannot create hsr debugfs directory [ 584.861602][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.861824][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.862045][ T8949] bridge_slave_0: entered allmulticast mode [ 584.893742][ T8949] bridge_slave_0: entered promiscuous mode [ 584.952525][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.952655][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.952900][ T8949] bridge_slave_1: entered allmulticast mode [ 584.991003][ T8949] bridge_slave_1: entered promiscuous mode [ 585.267280][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.272294][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.511796][ T8949] team0: Port device team_slave_0 added [ 585.526732][ T8949] team0: Port device team_slave_1 added [ 585.745152][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.749257][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.749287][ T8949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.756583][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.756596][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.756622][ T8949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.276203][ T8949] hsr_slave_0: entered promiscuous mode [ 586.277863][ T8949] hsr_slave_1: entered promiscuous mode [ 586.280539][ T8949] debugfs: 'hsr0' already exists in 'hsr' [ 586.280562][ T8949] Cannot create hsr debugfs directory [ 586.504318][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.148399][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.264633][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.908379][ T8352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 598.024117][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 598.823849][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.837722][ T8847] Bluetooth: hci1: command 0x0406 tx timeout [ 601.674789][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 601.744093][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 601.746449][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 601.750962][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 601.752204][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 603.787656][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.863669][ T5607] Bluetooth: hci11: command tx timeout [ 603.864747][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.953670][ T5607] Bluetooth: hci11: command tx timeout [ 608.677563][ T5607] Bluetooth: hci11: command tx timeout [ 608.993922][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.601298][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.831576][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.841511][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.842261][ T8979] bridge_slave_0: entered allmulticast mode [ 610.221583][ T8979] bridge_slave_0: entered promiscuous mode [ 610.241343][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.241462][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.241688][ T8979] bridge_slave_1: entered allmulticast mode [ 610.316243][ T8979] bridge_slave_1: entered promiscuous mode [ 610.531510][ T8979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.591978][ T8979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.728792][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 610.746721][ T8847] Bluetooth: hci11: command tx timeout [ 610.801674][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 610.818036][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 610.838361][ T8847] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 610.839223][ T8847] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 611.420142][ T8979] team0: Port device team_slave_0 added [ 611.434835][ T8979] team0: Port device team_slave_1 added [ 611.702298][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.702314][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.702340][ T8979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.709195][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.709208][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.709233][ T8979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.191938][ T8979] hsr_slave_0: entered promiscuous mode [ 612.226401][ T8979] hsr_slave_1: entered promiscuous mode [ 612.233488][ T8979] debugfs: 'hsr0' already exists in 'hsr' [ 612.233699][ T8979] Cannot create hsr debugfs directory [ 612.913750][ T5607] Bluetooth: hci12: command tx timeout [ 614.666784][ T1403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.667331][ T1403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.983785][ T8847] Bluetooth: hci12: command tx timeout [ 616.193740][ T8847] Bluetooth: hci2: command 0x0406 tx timeout [ 617.063673][ T5607] Bluetooth: hci12: command tx timeout [ 618.962009][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.962233][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.962481][ T9001] bridge_slave_0: entered allmulticast mode [ 618.990887][ T9001] bridge_slave_0: entered promiscuous mode [ 619.104167][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.147216][ T8847] Bluetooth: hci12: command tx timeout [ 619.177400][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.177731][ T9001] bridge_slave_1: entered allmulticast mode [ 619.207754][ T9001] bridge_slave_1: entered promiscuous mode [ 619.784240][ T1539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.424294][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.555387][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.596629][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.112065][ T8847] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 621.178870][ T8847] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 621.191388][ T8847] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 621.192571][ T8847] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 621.193414][ T8847] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 621.239702][ T8847] Bluetooth: hci3: command 0x0406 tx timeout [ 621.624556][ T5590] page_pool_release_retry() stalled pool shutdown: id 30, 48 inflight 120 sec [ 622.618250][ T9001] team0: Port device team_slave_0 added [ 622.648195][ T9001] team0: Port device team_slave_1 added [ 624.127073][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.127089][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.127116][ T9001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.183742][ T59] Bluetooth: hci13: command tx timeout [ 624.215306][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.215325][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.215351][ T9001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.281948][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.282019][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.519567][ T9001] hsr_slave_0: entered promiscuous mode [ 625.537792][ T9001] hsr_slave_1: entered promiscuous mode [ 625.549860][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.570841][ T9001] debugfs: 'hsr0' already exists in 'hsr' [ 625.579572][ T9001] Cannot create hsr debugfs directory [ 626.184790][ T1403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 626.263733][ T59] Bluetooth: hci13: command tx timeout [ 627.591441][ T5607] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 627.614866][ T5607] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 627.622210][ T5607] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 627.668612][ T5607] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 628.346640][ T8847] Bluetooth: hci13: command tx timeout [ 628.545336][ T5607] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 630.423650][ T59] Bluetooth: hci13: command tx timeout [ 631.143716][ T59] Bluetooth: hci14: command tx timeout [ 631.304569][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.523846][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 631.667212][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.678353][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.684106][ T9022] bridge_slave_0: entered allmulticast mode [ 631.701743][ T9022] bridge_slave_0: entered promiscuous mode [ 631.740466][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.740602][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.740977][ T9022] bridge_slave_1: entered allmulticast mode [ 631.801555][ T9022] bridge_slave_1: entered promiscuous mode [ 631.944057][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 632.144252][ T9022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.195961][ T9022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.487160][ T9022] team0: Port device team_slave_0 added [ 632.524829][ T9022] team0: Port device team_slave_1 added [ 632.766895][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.766912][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.766938][ T9022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.827169][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.827186][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.827213][ T9022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.273719][ T5607] Bluetooth: hci14: command tx timeout [ 634.875360][ T9022] hsr_slave_0: entered promiscuous mode [ 634.892570][ T9022] hsr_slave_1: entered promiscuous mode [ 634.909347][ T9022] debugfs: 'hsr0' already exists in 'hsr' [ 634.909376][ T9022] Cannot create hsr debugfs directory [ 635.319159][ T59] Bluetooth: hci14: command tx timeout [ 636.517761][ T5607] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 636.609331][ T5607] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 636.612617][ T5607] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 636.631890][ T5607] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 636.649064][ T5607] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 637.074327][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.081443][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 638.197007][ T59] Bluetooth: hci14: command tx timeout [ 638.748573][ T59] Bluetooth: hci15: command tx timeout [ 640.853927][ T5607] Bluetooth: hci15: command tx timeout [ 641.708963][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 641.959776][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.959889][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.960262][ T9037] bridge_slave_0: entered allmulticast mode [ 642.019568][ T9037] bridge_slave_0: entered promiscuous mode [ 642.313812][ T9037] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.313937][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.314320][ T9037] bridge_slave_1: entered allmulticast mode [ 642.345905][ T9037] bridge_slave_1: entered promiscuous mode [ 642.825944][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.826519][ T2280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.902522][ T9037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.913798][ T59] Bluetooth: hci15: command tx timeout [ 642.974755][ T9037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.838867][ T9037] team0: Port device team_slave_0 added [ 644.859471][ T9037] team0: Port device team_slave_1 added [ 644.983686][ T59] Bluetooth: hci15: command tx timeout [ 645.605000][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.605017][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.605044][ T9037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.677146][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.677163][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.677190][ T9037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.881778][ T9037] hsr_slave_0: entered promiscuous mode [ 646.893064][ T9037] hsr_slave_1: entered promiscuous mode [ 646.907691][ T9037] debugfs: 'hsr0' already exists in 'hsr' [ 646.907718][ T9037] Cannot create hsr debugfs directory [ 647.944380][ T1403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.597696][ T1397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.082302][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.082472][ T9062] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.082811][ T9062] bridge_slave_0: entered allmulticast mode [ 649.110698][ T9062] bridge_slave_0: entered promiscuous mode [ 649.199464][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.199574][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.199879][ T9062] bridge_slave_1: entered allmulticast mode [ 649.202682][ T9062] bridge_slave_1: entered promiscuous mode [ 650.170878][ T9062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.258514][ T9062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.504049][ T37] INFO: task syz.2.801:8474 blocked for more than 143 seconds. [ 650.504075][ T37] Tainted: G L syzkaller #0 [ 650.504085][ T37] Blocked by coredump. [ 650.504091][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.504099][ T37] task:syz.2.801 state:D stack:23320 pid:8474 tgid:8472 ppid:5615 task_flags:0x40054c flags:0x00080001 [ 650.504148][ T37] Call Trace: [ 650.504154][ T37] [ 650.504165][ T37] __schedule+0x1681/0x54c0 [ 650.504195][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 650.504247][ T37] ? __pfx___schedule+0x10/0x10 [ 650.504294][ T37] rt_mutex_schedule+0x76/0xf0 [ 650.504312][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 650.504355][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 650.504380][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 650.504403][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 650.504438][ T37] ? rcu_barrier+0x4c/0x580 [ 650.504462][ T37] ? rcu_barrier+0x4c/0x580 [ 650.504486][ T37] ? rcu_barrier+0x4c/0x580 [ 650.504502][ T37] mutex_lock_nested+0x168/0x1d0 [ 650.504522][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.504550][ T37] rcu_barrier+0x4c/0x580 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 650.504579][ T37] netdev_run_todo+0x2e0/0xde0 [ 650.504609][ T37] ? __pfx_netdev_run_todo+0x10/0x10 [ 650.504629][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 650.504648][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 650.504682][ T37] ? netdev_state_change+0x1ca/0x220 [ 650.504703][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 650.504724][ T37] tun_chr_close+0x13f/0x1c0 [ 650.504745][ T37] __fput+0x461/0xa70 [ 650.504782][ T37] task_work_run+0x1d9/0x270 [ 650.504812][ T37] ? __pfx_task_work_run+0x10/0x10 [ 650.504837][ T37] ? do_exit+0x70a/0x22c0 [ 650.504859][ T37] ? kmem_cache_free+0x187/0x6c0 [ 650.504880][ T37] ? put_net+0x191/0x260 [ 650.504898][ T37] ? do_exit+0x70a/0x22c0 [ 650.504925][ T37] do_exit+0x70f/0x22c0 [ 650.504951][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.504982][ T37] ? __pfx_do_exit+0x10/0x10 [ 650.505003][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 650.505024][ T37] ? reacquire_held_locks+0x104/0x190 [ 650.505048][ T37] ? rt_spin_lock+0x1e0/0x400 [ 650.505083][ T37] do_group_exit+0x21b/0x2d0 [ 650.505107][ T37] ? rt_spin_unlock+0x160/0x200 [ 650.505132][ T37] get_signal+0x125c/0x1310 [ 650.505175][ T37] arch_do_signal_or_restart+0xbc/0x830 [ 650.505203][ T37] ? __pfx_task_work_add+0x10/0x10 [ 650.505228][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 650.505263][ T37] ? __fput_deferred+0x253/0x3e0 [ 650.505301][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.505322][ T37] exit_to_user_mode_loop+0x86/0x480 [ 650.505372][ T37] ? rcu_is_watching+0x15/0xb0 [ 650.505399][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.505419][ T37] do_syscall_64+0x33e/0xf80 [ 650.505439][ T37] ? clear_bhb_loop+0x40/0x90 [ 650.505462][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.505481][ T37] RIP: 0033:0x7f059fe7cdd9 [ 650.505499][ T37] RSP: 002b:00007f059e0ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.505519][ T37] RAX: fffffffffffffff4 RBX: 00007f05a00f6090 RCX: 00007f059fe7cdd9 [ 650.505533][ T37] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000b [ 650.505546][ T37] RBP: 00007f059ff12d69 R08: 0000000000000000 R09: 0000000000000000 [ 650.505558][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.505569][ T37] R13: 00007f05a00f6128 R14: 00007f05a00f6090 R15: 00007ffcb496eda8 [ 650.505602][ T37] [ 650.505612][ T37] INFO: task syz.4.816:8533 blocked for more than 143 secon[ 650.505612][ T37] INFO: task syz.4.816:8533 blocked for more than 143 seconds. [ 650.505629][ T37] Tainted: G L syzkaller #0 [ 650.505639][ T37] Blocked by coredump. [ 650.505645][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.505654][ T37] task:syz.4.816 state:D stack:23608 pid:8533 tgid:8533 ppid:5613 task_flags:0x40044c flags:0x00080003 [ 650.505698][ T37] Call Trace: [ 650.505703][ T37] [ 650.505714][ T37] __schedule+0x1681/0x54c0 [ 650.505771][ T37] ? __pfx___schedule+0x10/0x10 [ 650.505812][ T37] rt_mutex_schedule+0x76/0xf0 [ 650.505831][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 650.505872][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 650.505897][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 650.505921][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 650.505956][ T37] ? rcu_barrier+0x4c/0x580 [ 650.505979][ T37] ? rcu_barrier+0x4c/0x580 [ 650.506003][ T37] ? rcu_barrier+0x4c/0x580 [ 650.506020][ T37] mutex_lock_nested+0x168/0x1d0 [ 650.506041][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.506068][ T37] rcu_barrier+0x4c/0x580 [ 650.506097][ T37] netdev_run_todo+0x2e0/0xde0 [ 650.506125][ T37] ? __pfx_netdev_run_todo+0x10/0x10 [ 650.506146][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 650.506164][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 650.506198][ T37] ? netdev_state_change+0x1ca/0x220 [ 650.506218][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 650.506238][ T37] tun_chr_close+0x13f/0x1c0 [ 650.506258][ T37] __fput+0x461/0xa70 [ 650.506300][ T37] task_work_run+0x1d9/0x270 [ 650.506328][ T37] ? __pfx_task_work_run+0x10/0x10 [ 650.506353][ T37] ? do_exit+0x70a/0x22c0 [ 650.506374][ T37] ? kmem_cache_free+0x187/0x6c0 [ 650.506394][ T37] ? put_net+0x191/0x260 [ 650.506411][ T37] ? do_exit+0x70a/0x22c0 [ 650.506439][ T37] do_exit+0x70f/0x22c0 [ 650.506466][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.506496][ T37] ? __pfx_do_exit+0x10/0x10 [ 650.506517][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 650.506539][ T37] ? reacquire_held_locks+0x104/0x190 [ 650.506564][ T37] ? rt_spin_lock+0x1e0/0x400 [ 650.506598][ T37] do_group_exit+0x21b/0x2d0 [ 650.506622][ T37] ? rt_spin_unlock+0x160/0x200 [ 650.506647][ T37] get_signal+0x125c/0x1310 [ 650.506688][ T37] arch_do_signal_or_restart+0xbc/0x830 [ 650.506718][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 650.506762][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.506783][ T37] exit_to_user_mode_loop+0x86/0x480 [ 650.506804][ T37] ? rcu_is_watching+0x15/0xb0 [ 650.506830][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.506850][ T37] do_syscall_64+0x33e/0xf80 [ 650.506870][ T37] ? clear_bhb_loop+0x40/0x90 [ 650.506892][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.506911][ T37] RIP: 0033:0x7f553985cdd9 [ 650.506926][ T37] RSP: 002b:00007ffe48a21f88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 650.506944][ T37] RAX: 0000000000000000 RBX: 00007f5539ad7da0 RCX: 00007f553985cdd9 [ 650.506957][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 650.506969][ T37] RBP: 00007f5539ad7da0 R08: 0000000000000006 R09: 0000000000000000 [ 650.506981][ T37] R10: 00007f5539ad7cb0 R11: 0000000000000246 R12: 000000000006486c [ 650.506993][ T37] R13: 00007f5539ad609c R14: 000000000006482a R15: 00007f5539ad6090 [ 650.507024][ T37] [ 650.507035][ T37] INFO: task syz-executor:8559 blocked for more than 143 seconds. [ 650.507049][ T37] Tainted: G L syzkaller #0 [ 650.507059][ T37] Blocked by coredump. [ 650.507064][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.507072][ T37] task:syz-executor state:D stack:18776 pid:8559 tgid:8559 ppid:1 task_flags:0x40054c flags:0x00080003 [ 650.507111][ T37] Call Trace: [ 650.507116][ T37] [ 650.507126][ T37] __schedule+0x1681/0x54c0 [ 650.507148][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 650.507203][ T37] ? __pfx___schedule+0x10/0x10 [ 650.507244][ T37] rt_mutex_schedule+0x76/0xf0 [ 650.507262][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 650.507310][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 650.507335][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 650.507359][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 650.507393][ T37] ? rcu_barrier+0x4c/0x580 [ 650.507415][ T37] ? rcu_barrier+0x4c/0x580 [ 650.507440][ T37] ? rcu_barrier+0x4c/0x580 [ 650.507457][ T37] mutex_lock_nested+0x168/0x1d0 [ 650.507477][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.507505][ T37] rcu_barrier+0x4c/0x580 [ 650.507534][ T37] netdev_run_todo+0x2e0/0xde0 [ 650.507562][ T37] ? __pfx_netdev_run_todo+0x10/0x10 [ 650.507584][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 650.507602][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 650.507636][ T37] ? netdev_state_change+0x1ca/0x220 [ 650.507656][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 650.507676][ T37] tun_chr_close+0x13f/0x1c0 [ 650.507697][ T37] __fput+0x461/0xa70 [ 650.507734][ T37] task_work_run+0x1d9/0x270 [ 650.507762][ T37] ? __pfx_task_work_run+0x10/0x10 [ 650.507787][ T37] ? do_exit+0x70a/0x22c0 [ 650.507808][ T37] ? kmem_cache_free+0x187/0x6c0 [ 650.507828][ T37] ? put_net+0x191/0x260 [ 650.507846][ T37] ? do_exit+0x70a/0x22c0 [ 650.507873][ T37] do_exit+0x70f/0x22c0 [ 650.507900][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.507930][ T37] ? __pfx_do_exit+0x10/0x10 [ 650.507951][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 650.507973][ T37] ? reacquire_held_locks+0x104/0x190 [ 650.507998][ T37] ? rt_spin_lock+0x1e0/0x400 [ 650.508033][ T37] do_group_exit+0x21b/0x2d0 [ 650.508056][ T37] ? rt_spin_unlock+0x160/0x200 [ 650.508082][ T37] get_signal+0x125c/0x1310 [ 650.508123][ T37] arch_do_signal_or_restart+0xbc/0x830 [ 650.508154][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 650.508189][ T37] ? ksys_write+0x202/0x270 [ 650.508216][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.508237][ T37] exit_to_user_mode_loop+0x86/0x480 [ 650.508258][ T37] ? rcu_is_watching+0x15/0xb0 [ 650.508288][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.508309][ T37] do_syscall_64+0x33e/0xf80 [ 650.508326][ T37] ? trace_irq_disable+0x3b/0x140 [ 650.508347][ T37] ? clear_bhb_loop+0x40/0x90 [ 650.508370][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.508388][ T37] RIP: 0033:0x7f15b84bd60e [ 650.508404][ T37] RSP: 002b:00007ffc3f782488 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 650.508423][ T37] RAX: 0000000000000003 RBX: 000055555a25c500 RCX: 00007f15b84bd60e [ 650.508435][ T37] RDX: 0000000000000003 RSI: 00007ffc3f782510 RDI: 0000000000000005 [ 650.508448][ T37] RBP: 00007f15b8593610 R08: 0000000000000000 R09: 0000000000000000 [ 650.508460][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 650.508472][ T37] R13: 00007ffc3f782510 R14: 00007f15b92a4620 R15: 0000000000000003 [ 650.508504][ T37] [ 650.508512][ T37] INFO: task syz-executor:8605 blocked for more than 143 seconds. [ 650.508528][ T37] Tainted: G L syzkaller #0 [ 650.508538][ T37] Blocked by coredump. [ 650.508544][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.508552][ T37] task:syz-executor state:D stack:17472 pid:8605 tgid:8605 ppid:1 task_flags:0x40054c flags:0x00080003 [ 650.508591][ T37] Call Trace: [ 650.508597][ T37] [ 650.508609][ T37] __schedule+0x1681/0x54c0 [ 650.508632][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 650.508687][ T37] ? __pfx___schedule+0x10/0x10 [ 650.508728][ T37] rt_mutex_schedule+0x76/0xf0 [ 650.508747][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 650.508789][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 650.508815][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 650.508838][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 650.508873][ T37] ? rcu_barrier+0x4c/0x580 [ 650.508896][ T37] ? rcu_barrier+0x4c/0x580 [ 650.508920][ T37] ? rcu_barrier+0x4c/0x580 [ 650.508936][ T37] mutex_lock_nested+0x168/0x1d0 [ 650.508957][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.508984][ T37] rcu_barrier+0x4c/0x580 [ 650.509013][ T37] netdev_run_todo+0x2e0/0xde0 [ 650.509042][ T37] ? __pfx_netdev_run_todo+0x10/0x10 [ 650.509062][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 650.509081][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 650.509114][ T37] ? netdev_state_change+0x1ca/0x220 [ 650.509135][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 650.509155][ T37] tun_chr_close+0x13f/0x1c0 [ 650.509175][ T37] __fput+0x461/0xa70 [ 650.509212][ T37] task_work_run+0x1d9/0x270 [ 650.509240][ T37] ? __pfx_task_work_run+0x10/0x10 [ 650.509266][ T37] ? do_exit+0x70a/0x22c0 [ 650.509294][ T37] ? kmem_cache_free+0x187/0x6c0 [ 650.509314][ T37] ? put_net+0x191/0x260 [ 650.509332][ T37] ? do_exit+0x70a/0x22c0 [ 650.509360][ T37] do_exit+0x70f/0x22c0 [ 650.509386][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.509416][ T37] ? __pfx_do_exit+0x10/0x10 [ 650.509437][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 650.509459][ T37] ? reacquire_held_locks+0x104/0x190 [ 650.509484][ T37] ? rt_spin_lock+0x1e0/0x400 [ 650.509519][ T37] do_group_exit+0x21b/0x2d0 [ 650.509543][ T37] ? rt_spin_unlock+0x160/0x200 [ 650.509569][ T37] get_signal+0x125c/0x1310 [ 650.509611][ T37] arch_do_signal_or_restart+0xbc/0x830 [ 650.509642][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 650.509677][ T37] ? fput_close_sync+0x11f/0x240 [ 650.509709][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.509730][ T37] exit_to_user_mode_loop+0x86/0x480 [ 650.509751][ T37] ? rcu_is_watching+0x15/0xb0 [ 650.509778][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.509798][ T37] do_syscall_64+0x33e/0xf80 [ 650.509815][ T37] ? trace_irq_disable+0x3b/0x140 [ 650.509835][ T37] ? clear_bhb_loop+0x40/0x90 [ 650.509859][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.509877][ T37] RIP: 0033:0x7f6756f8d60e [ 650.509893][ T37] RSP: 002b:00007ffea5a3aea8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 650.509910][ T37] RAX: 0000000000000020 RBX: 000055558ff1a500 RCX: 00007f6756f8d60e [ 650.509923][ T37] RDX: 0000000000000020 RSI: 00007f6757d74670 RDI: 0000000000000003 [ 650.509934][ T37] RBP: 0000000000000001 R08: 00007ffea5a3af24 R09: 000000000000000c [ 650.509945][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 650.509954][ T37] R13: 0000000000000000 R14: 00007f6757d74670 R15: 0000000000000000 [ 650.509981][ T37] [ 650.509989][ T37] INFO: task syz-executor:8631 blocked for more than 143 seconds. [ 650.510004][ T37] Tainted: G L syzkaller #0 [ 650.510013][ T37] Blocked by coredump. [ 650.510019][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.510027][ T37] task:syz-executor state:D stack:19128 pid:8631 tgid:8631 ppid:1 task_flags:0x40054c flags:0x00080003 [ 650.510066][ T37] Call Trace: [ 650.510071][ T37] [ 650.510081][ T37] __schedule+0x1681/0x54c0 [ 650.510103][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 650.510152][ T37] ? __pfx___schedule+0x10/0x10 [ 650.510192][ T37] rt_mutex_schedule+0x76/0xf0 [ 650.510210][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 650.510250][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 650.510274][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 650.510305][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 650.510339][ T37] ? rcu_barrier+0x4c/0x580 [ 650.510363][ T37] ? rcu_barrier+0x4c/0x580 [ 650.510386][ T37] ? rcu_barrier+0x4c/0x580 [ 650.510402][ T37] mutex_lock_nested+0x168/0x1d0 [ 650.510423][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.510451][ T37] rcu_barrier+0x4c/0x580 [ 650.510480][ T37] netdev_run_todo+0x2e0/0xde0 [ 650.510509][ T37] ? __pfx_netdev_run_todo+0x10/0x10 [ 650.510530][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 650.510548][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 650.510581][ T37] ? netdev_state_change+0x1ca/0x220 [ 650.510602][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 650.510622][ T37] tun_chr_close+0x13f/0x1c0 [ 650.510643][ T37] __fput+0x461/0xa70 [ 650.510679][ T37] task_work_run+0x1d9/0x270 [ 650.510708][ T37] ? __pfx_task_work_run+0x10/0x10 [ 650.510734][ T37] ? do_exit+0x70a/0x22c0 [ 650.510755][ T37] ? kmem_cache_free+0x187/0x6c0 [ 650.510775][ T37] ? put_net+0x191/0x260 [ 650.510792][ T37] ? do_exit+0x70a/0x22c0 [ 650.510819][ T37] do_exit+0x70f/0x22c0 [ 650.510845][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.510875][ T37] ? __pfx_do_exit+0x10/0x10 [ 650.510896][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 650.510917][ T37] ? reacquire_held_locks+0x104/0x190 [ 650.510942][ T37] ? rt_spin_lock+0x1e0/0x400 [ 650.510977][ T37] do_group_exit+0x21b/0x2d0 [ 650.511001][ T37] ? rt_spin_unlock+0x160/0x200 [ 650.511046][ T37] get_signal+0x125c/0x1310 [ 650.511088][ T37] arch_do_signal_or_restart+0xbc/0x830 [ 650.511118][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 650.511153][ T37] ? fput_close_sync+0x11f/0x240 [ 650.511186][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.511206][ T37] exit_to_user_mode_loop+0x86/0x480 [ 650.511229][ T37] ? rcu_is_watching+0x15/0xb0 [ 650.511255][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.511275][ T37] do_syscall_64+0x33e/0xf80 [ 650.511297][ T37] ? trace_irq_disable+0x3b/0x140 [ 650.511318][ T37] ? clear_bhb_loop+0x40/0x90 [ 650.511342][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.511360][ T37] RIP: 0033:0x7fbd605ed60e [ 650.511376][ T37] RSP: 002b:00007ffecc9700b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 650.511395][ T37] RAX: 0000000000000028 RBX: 000055558e2e1500 RCX: 00007fbd605ed60e [ 650.511408][ T37] RDX: 0000000000000028 RSI: 00007fbd613d4670 RDI: 0000000000000003 [ 650.511421][ T37] RBP: 0000000000000001 R08: 00007ffecc970134 R09: 000000000000000c [ 650.511432][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 650.511444][ T37] R13: 0000000000000000 R14: 00007fbd613d4670 R15: 0000000000000000 [ 650.511474][ T37] [ 650.511494][ T37] INFO: task syz.0.867:8798 blocked for more than 143 seconds. [ 650.511509][ T37] Tainted: G L syzkaller #0 [ 650.511519][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.511528][ T37] task:syz.0.867 state:D stack:24152 pid:8798 tgid:8798 ppid:5603 task_flags:0x400040 flags:0x00080002 [ 650.511571][ T37] Call Trace: [ 650.511577][ T37] [ 650.511589][ T37] __schedule+0x1681/0x54c0 [ 650.511646][ T37] ? __pfx___schedule+0x10/0x10 [ 650.511686][ T37] rt_mutex_schedule+0x76/0xf0 [ 650.511705][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 650.511746][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 650.511771][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 650.511794][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 650.511814][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 650.511846][ T37] ? rcu_barrier+0x4c/0x580 [ 650.511869][ T37] ? rcu_barrier+0x4c/0x580 [ 650.511893][ T37] ? rcu_barrier+0x4c/0x580 [ 650.511909][ T37] mutex_lock_nested+0x168/0x1d0 [ 650.511930][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.511958][ T37] rcu_barrier+0x4c/0x580 [ 650.511975][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 650.512001][ T37] ? rt_write_unlock+0x190/0x230 [ 650.512031][ T37] kvm_mmu_uninit_vm+0x53/0x90 [ 650.512056][ T37] kvm_arch_destroy_vm+0x26e/0x2d0 [ 650.512077][ T37] kvm_put_kvm+0x6ca/0xa50 [ 650.532211][ T37] ? __pfx_kvm_vm_release+0x10/0x10 [ 650.532251][ T37] kvm_vm_release+0x46/0x50 [ 650.532272][ T37] __fput+0x461/0xa70 [ 650.532318][ T37] task_work_run+0x1d9/0x270 [ 650.532347][ T37] ? __pfx_task_work_run+0x10/0x10 [ 650.532379][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.532399][ T37] exit_to_user_mode_loop+0xed/0x480 [ 650.532422][ T37] ? rcu_is_watching+0x15/0xb0 [ 650.532448][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.532468][ T37] do_syscall_64+0x33e/0xf80 [ 650.532486][ T37] ? trace_irq_disable+0x3b/0x140 [ 650.532507][ T37] ? clear_bhb_loop+0x40/0x90 [ 650.532531][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.532550][ T37] RIP: 0033:0x7efe8924cdd9 [ 650.532567][ T37] RSP: 002b:00007ffdd99e9a18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 650.532588][ T37] RAX: 0000000000000000 RBX: 00007efe894c7da0 RCX: 00007efe8924cdd9 [ 650.532601][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 650.532612][ T37] RBP: 00007efe894c7da0 R08: 0000000000000006 R09: 0000000000000000 [ 650.532624][ T37] R10: 00007efe894c7cb0 R11: 0000000000000246 R12: 0000000000079ff0 [ 650.532636][ T37] R13: 00007efe894c618c R14: 0000000000079fb2 R15: 00007efe894c6180 [ 650.532668][ T37] [ 650.532742][ T37] [ 650.532742][ T37] Showing all locks held in the system: [ 650.532751][ T37] 3 locks held by rcuc/0/20: [ 650.532768][ T37] 3 locks held by rcuc/1/28: [ 650.532778][ T37] 5 locks held by ktimers/1/29: [ 650.532790][ T37] 1 lock held by khungtaskd/37: [ 650.532800][ T37] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 650.532865][ T37] 3 locks held by kworker/u8:14/1403: [ 650.532877][ T37] 6 locks held by kworker/u8:21/1459: [ 650.532888][ T37] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 650.532932][ T37] #1: ffffc9000684fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 650.532975][ T37] #2: ffffffff8f347140 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 650.533018][ T37] #3: ffff88805d007160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 650.533063][ T37] #4: ffff88805d088310 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 650.533130][ T37] #5: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 650.533187][ T37] 4 locks held by klogd/4961: [ 650.533199][ T37] 2 locks held by getty/5360: [ 650.533209][ T37] #0: ffff8880376bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 650.533254][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 650.533318][ T37] 1 lock held by syz.2.801/8474: [ 650.533328][ T37] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 650.533370][ T37] 1 lock held by syz.4.816/8533: [ 650.533380][ T37] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 650.533423][ T37] 1 lock held by syz-executor/8559: [ 650.533433][ T37] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 650.533475][ T37] 1 lock held by syz-executor/8605: [ 650.559204][ T37] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 650.559267][ T37] 1 lock held by syz-executor/8631: [ 650.559277][ T37] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 650.561224][ T37] 1 lock held by syz-executor/8662: [ 650.561237][ T37] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 650.561282][ T37] 7 locks held by syz-executor/8748: [ 650.561293][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.561349][ T37] #1: ffff88805ffad078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.561395][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.561445][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.561495][ T37] #4: ffff888060eb6160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 650.561542][ T37] #5: ffff888021ae4310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 650.561590][ T37] #6: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 650.561634][ T37] 4 locks held by syz-executor/8779: [ 650.561645][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.561692][ T37] #1: ffff88803db3b878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.561738][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.561787][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.561836][ T37] 4 locks held by syz-executor/8796: [ 650.561847][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.561893][ T37] #1: ffff88805ec42c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.561938][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.561988][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.562039][ T37] 1 lock held by syz.0.867/8798: [ 650.562049][ T37] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 650.562091][ T37] 4 locks held by syz-executor/8822: [ 650.562102][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.562148][ T37] #1: ffff8880799bcc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.562193][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.562243][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.562295][ T37] 4 locks held by syz-executor/8845: [ 650.562306][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.562358][ T37] #1: ffff888057712078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.562404][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.562454][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.562507][ T37] 4 locks held by syz-executor/8877: [ 650.562517][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.562564][ T37] #1: ffff8880376ed878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.562610][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.562660][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.562709][ T37] 4 locks held by syz-executor/8892: [ 650.562720][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.562767][ T37] #1: ffff88807d8c6078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.562812][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.562862][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.562911][ T37] 4 locks held by syz-executor/8911: [ 650.562922][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.562969][ T37] #1: ffff888079920478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.563014][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.563064][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.563112][ T37] 4 locks held by syz-executor/8927: [ 650.563123][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.563170][ T37] #1: ffff888035b92c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.566719][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.566787][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.566842][ T37] 4 locks held by syz-executor/8949: [ 650.566853][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.566902][ T37] #1: ffff888074137478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.566947][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.566997][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.567048][ T37] 4 locks held by syz-executor/8979: [ 650.567059][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.567105][ T37] #1: ffff88803ecfb078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.567150][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.567199][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.567249][ T37] 4 locks held by syz-executor/9001: [ 650.567260][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.567307][ T37] #1: ffff888097dcf878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.567358][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.567406][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.567456][ T37] 4 locks held by syz-executor/9022: [ 650.567467][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.567513][ T37] #1: ffff88807585d878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.567558][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.567607][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.567657][ T37] 4 locks held by syz-executor/9037: [ 650.567668][ T37] #0: ffff888037a8a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 650.567714][ T37] #1: ffff88806fd1b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 650.567759][ T37] #2: ffff88801cb28f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 650.567808][ T37] #3: ffffffff8ebcea78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 650.567859][ T37] 3 locks held by syz-executor/9062: [ 650.567873][ T37] [ 650.567878][ T37] ============================================= [ 650.567878][ T37] [ 650.567908][ T37] NMI backtrace for cpu 0 [ 650.567925][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 650.567949][ T37] Tainted: [L]=SOFTLOCKUP [ 650.567956][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 650.567967][ T37] Call Trace: [ 650.567974][ T37] [ 650.567981][ T37] dump_stack_lvl+0xe8/0x150 [ 650.568006][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 650.568028][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 650.568052][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 650.568077][ T37] sys_info+0x135/0x170 [ 650.568096][ T37] watchdog+0xfd3/0x1030 [ 650.568124][ T37] ? watchdog+0x1c9/0x1030 [ 650.568150][ T37] kthread+0x388/0x470 [ 650.568173][ T37] ? __pfx_watchdog+0x10/0x10 [ 650.568191][ T37] ? __pfx_kthread+0x10/0x10 [ 650.568215][ T37] ret_from_fork+0x514/0xb70 [ 650.568239][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 650.568259][ T37] ? __switch_to+0xc79/0x1410 [ 650.568287][ T37] ? __pfx_kthread+0x10/0x10 [ 650.568311][ T37] ret_from_fork_asm+0x1a/0x30 [ 650.568354][ T37] [ 650.568362][ T37] Sending NMI from CPU 0 to CPUs 1: [ 650.568392][ C1] NMI backtrace for cpu 1 [ 650.568407][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 650.568428][ C1] Tainted: [L]=SOFTLOCKUP [ 650.568433][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 650.568442][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x2c/0x40 [ 650.568461][ C1] Code: 1e fa 31 c0 83 3d 53 e7 6c 04 00 74 1d 83 3d 5a f9 6c 04 00 74 14 65 48 8b 0d 48 45 4e 07 31 c0 83 b9 f4 0b 00 00 00 0f 94 c0 8f be 03 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 [ 650.568474][ C1] RSP: 0018:ffffc90000a3eb50 EFLAGS: 00000246 [ 650.568487][ C1] RAX: 0000000000000001 RBX: ffffffff88eca7fd RCX: ffff88801d6ebd80 [ 650.568498][ C1] RDX: 0000000003127213 RSI: ffffffff8d8609ab RDI: ffffffff8ba74b60 [ 650.568509][ C1] RBP: dffffc0000000000 R08: ffffffff8176d226 R09: ffffffff8dfc8140 [ 650.568519][ C1] R10: ffffc90000a3ec78 R11: ffffffff81af8dc0 R12: ffffc90000a3ec60 [ 650.568530][ C1] R13: 1ffff92000147d85 R14: ffffc90000a3ec28 R15: ffffffff8176d226 [ 650.568542][ C1] FS: 0000000000000000(0000) GS:ffff88812627d000(0000) knlGS:0000000000000000 [ 650.568554][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.568564][ C1] CR2: 00007f0b71b0dc8a CR3: 000000007f0e6000 CR4: 00000000003526f0 [ 650.568578][ C1] Call Trace: [ 650.568584][ C1] [ 650.568589][ C1] unwind_next_frame+0xcc/0x2550 [ 650.568611][ C1] ? unwind_next_frame+0xa6/0x2550 [ 650.568628][ C1] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 650.568644][ C1] ? __alloc_skb+0x27d/0x7d0 [ 650.568660][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 650.568677][ C1] arch_stack_walk+0x11b/0x150 [ 650.568698][ C1] ? __alloc_skb+0x27d/0x7d0 [ 650.568712][ C1] ? __alloc_skb+0x27d/0x7d0 [ 650.568735][ C1] stack_trace_save+0xa9/0x100 [ 650.568750][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 650.568767][ C1] ? stack_depot_save_flags+0x33/0x810 [ 650.568790][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 650.568804][ C1] kasan_save_track+0x3e/0x80 [ 650.568817][ C1] ? kasan_save_track+0x3e/0x80 [ 650.568830][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 650.568844][ C1] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 650.568859][ C1] ? __alloc_skb+0x27d/0x7d0 [ 650.568896][ C1] __kasan_slab_alloc+0x6c/0x80 [ 650.568911][ C1] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 650.568926][ C1] ? __alloc_skb+0x27d/0x7d0 [ 650.568942][ C1] __alloc_skb+0x27d/0x7d0 [ 650.568958][ C1] synproxy_send_client_synack+0x172/0xe30 [ 650.568982][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 650.568999][ C1] ? nft_tunnel_opts_dump+0x1f0/0xde0 [ 650.569013][ C1] ? synproxy_pernet+0x45/0x270 [ 650.569034][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 650.569054][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 650.569072][ C1] ? nf_ip_checksum+0x13c/0x510 [ 650.569098][ C1] nft_synproxy_do_eval+0x305/0x580 [ 650.569115][ C1] ? __pfx_xfrmi_xmit+0x10/0x10 [ 650.569134][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 650.569159][ C1] nft_do_chain+0x467/0x19f0 [ 650.569178][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 650.569201][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 650.569232][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 650.569253][ C1] nft_do_chain_inet+0x360/0x4b0 [ 650.569273][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 650.569295][ C1] ? NF_HOOK+0x9e/0x3c0 [ 650.569314][ C1] ? NF_HOOK+0x9e/0x3c0 [ 650.569331][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 650.569350][ C1] nf_hook_slow+0xc5/0x220 [ 650.569369][ C1] NF_HOOK+0x21f/0x3c0 [ 650.569387][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 650.569405][ C1] ? NF_HOOK+0x9e/0x3c0 [ 650.569421][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 650.569438][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 650.569457][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 650.569478][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 650.569497][ C1] NF_HOOK+0x336/0x3c0 [ 650.569514][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 650.569535][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 650.569553][ C1] ? NF_HOOK+0x9e/0x3c0 [ 650.569569][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 650.569588][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 650.569608][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 650.569624][ C1] ? process_backlog+0x271/0xc60 [ 650.569643][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 650.569660][ C1] process_backlog+0x569/0xc60 [ 650.569688][ C1] __napi_poll+0xab/0x550 [ 650.569708][ C1] net_rx_action+0x696/0xe00 [ 650.569727][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 650.569753][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 650.569786][ C1] handle_softirqs+0x1de/0x6d0 [ 650.569806][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 650.569823][ C1] run_ktimerd+0x69/0x100 [ 650.569838][ C1] smpboot_thread_fn+0x541/0xa50 [ 650.569855][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 650.569876][ C1] kthread+0x388/0x470 [ 650.569893][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 650.569909][ C1] ? __pfx_kthread+0x10/0x10 [ 650.569927][ C1] ret_from_fork+0x514/0xb70 [ 650.569944][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 650.569960][ C1] ? __switch_to+0xc79/0x1410 [ 650.569980][ C1] ? __pfx_kthread+0x10/0x10 [ 650.569998][ C1] ret_from_fork_asm+0x1a/0x30 [ 650.570023][ C1] [ 651.361796][ T9062] team0: Port device team_slave_0 added [ 652.593640][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 652.593666][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 652.593693][ T37] Tainted: [L]=SOFTLOCKUP [ 652.593701][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 652.593713][ T37] Call Trace: [ 652.593721][ T37] [ 652.593730][ T37] vpanic+0x56c/0xa60 [ 652.593757][ T37] ? __pfx___schedule+0x10/0x10 [ 652.593783][ T37] ? __pfx_vpanic+0x10/0x10 [ 652.593815][ T37] panic+0xc5/0xd0 [ 652.593835][ T37] ? __pfx_panic+0x10/0x10 [ 652.593857][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 652.593896][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 652.593924][ T37] watchdog+0x102c/0x1030 [ 652.593953][ T37] ? watchdog+0x1c9/0x1030 [ 652.593979][ T37] kthread+0x388/0x470 [ 652.594004][ T37] ? __pfx_watchdog+0x10/0x10 [ 652.594022][ T37] ? __pfx_kthread+0x10/0x10 [ 652.594047][ T37] ret_from_fork+0x514/0xb70 [ 652.594071][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 652.594091][ T37] ? __switch_to+0xc79/0x1410 [ 652.594120][ T37] ? __pfx_kthread+0x10/0x10 [ 652.594147][ T37] ret_from_fork_asm+0x1a/0x30 [ 652.594185][ T37] [ 652.594334][ T37] Kernel Offset: disabled