last executing test programs: 23m26.025253436s ago: executing program 32 (id=70): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 23m7.185629003s ago: executing program 2 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, 0x0, &(0x7f0000000880)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000008c0)={0x0, 0x1}, 0x8}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000900), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1a, 0xf, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x2000000000000) 23m6.73581711s ago: executing program 2 (id=117): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r1 = semget$private(0x0, 0x6, 0x10) semtimedop(r1, &(0x7f0000000080)=[{0x0, 0x1, 0x800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0), 0x1) semop(r1, &(0x7f0000000100)=[{0x1, 0x8102}, {0x1, 0x6, 0x1800}, {0x2, 0xff, 0x1800}, {0x3, 0x5}, {0x1, 0x3, 0x800}, {0x4, 0x0, 0x1800}, {0x0, 0x2, 0x1000}, {0x4, 0x5}, {0x4, 0x28}], 0x9) semctl$GETZCNT(r1, 0x0, 0xf, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x90) r2 = syz_open_dev$vivid(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f00000001c0)={0x0, {0x0, 0x72c77adb}}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0xa, '\x00', @buffer={"8348883a39c09225399678207147af12dc401acf382c14448a2006902c480f4e", 0x20}, 0x7}, {0x1f, '\x00', @buffer={"b8773a045d6b2a46ebee87f70000000000f3ff00", 0x20}, 0x6}, {0x12, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b5b913355f933502c0a9975e73566b90754fc08ec", 0x20}, 0x6}, {0x1e, '\x00', @data=0x400, 0x8}]}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000400)='1\x00', 0x2) write$sysctl(r4, &(0x7f0000000440)='2\x00', 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f00000004c0)="2ae0e710", 0x4, 0x4000, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) timer_create(0x6, &(0x7f0000000580)={0x0, 0x0, 0x2, @thr={&(0x7f00000005c0), &(0x7f0000000680)="51f7d0e5a14750d60ebb27"}}, &(0x7f00000006c0)) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000700)=0x6, 0x4) 23m2.222657576s ago: executing program 2 (id=122): syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1) 22m57.970721538s ago: executing program 2 (id=125): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x4000, 0x8000}) 22m57.672624565s ago: executing program 2 (id=126): r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001340)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f000001a340)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f000001a380)='./file2\x00', 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f000001a400)=@abs={0x1, 0x0, 0x4e23}, 0x3d) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f000001a480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 22m53.59498061s ago: executing program 2 (id=127): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x40400) recvfrom$unix(0xffffffffffffffff, &(0x7f00000004c0)=""/36, 0x24, 0x40000000, &(0x7f0000000500)=@file={0x1, './config/usb_gadget/g1/functions/uvc.0\x00'}, 0x6e) r3 = syz_open_dev$video(0x0, 0x7, 0x40) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000580)={0xe, {0x6, 0x7, 0x7, 0xffffffde}, {0x8, 0x1, 0x4, 0x7ff}, {0x7, 0x6}}) r4 = mq_open(0x0, 0x40, 0x60, 0x0) mq_getsetattr(r4, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000002680), 0x5) 22m48.714959275s ago: executing program 33 (id=120): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x4a, &(0x7f0000000300)="a03c3f980100000005a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n\x00', 0x3) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget\x00', 0x1ff) 22m37.37787163s ago: executing program 34 (id=127): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x40400) recvfrom$unix(0xffffffffffffffff, &(0x7f00000004c0)=""/36, 0x24, 0x40000000, &(0x7f0000000500)=@file={0x1, './config/usb_gadget/g1/functions/uvc.0\x00'}, 0x6e) r3 = syz_open_dev$video(0x0, 0x7, 0x40) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000580)={0xe, {0x6, 0x7, 0x7, 0xffffffde}, {0x8, 0x1, 0x4, 0x7ff}, {0x7, 0x6}}) r4 = mq_open(0x0, 0x40, 0x60, 0x0) mq_getsetattr(r4, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000002680), 0x5) 20m46.554047796s ago: executing program 5 (id=262): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x0, 0x1, 0x9, 0x1}], 0x10, 0xfffffd2b}, 0x94) r1 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40086f52, &(0x7f0000000600)={0x2, &(0x7f0000000640)=[{0x29, '\x00', @buffer={"a264091295170000000000000000b700", 0x20}, 0x8000}, {0xb, '\x00', @st={0x4, [{0x6, @svalue=0x2}, {0x1, @svalue=0x81}, {0x3, @uvalue=0x2}, {0x1, @uvalue=0x7}]}, 0x9}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000072000000000000004ebae695b7030000000000008500000083000000bf09000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000850000000e000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000007c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000900)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fchdir(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = epoll_create1(0x80000) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000dc0)={0xc0000015}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000e00)={0xa000001c}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000940)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000a00)=0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000f40)) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x400400c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r12, &(0x7f0000000a40)={0x0, 0xfa7f, 0x100, 0x3, 0x255}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a9a, 0x10000, 0xe100, 0x197, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c99, 0x400, 0x2, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90a, 0x400, 0x3, 0x3a6, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x100, 0x1002, 0x250, 0x0, r3}}], 0x1, &(0x7f0000000d40)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r11, '\x00', {0xfff9, 0x7d6, 0x0, 0x0}}, 0x0) r16 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r16, 0x6, 0xd, &(0x7f0000000780)='cdg', 0x3) pipe(&(0x7f0000000700)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(r17, 0x40047459, &(0x7f0000000740)=0x2000000) 20m44.756692529s ago: executing program 5 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000200)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x8}}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) getsockname$packet(r1, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xa, 0x0, 0x23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000740)="5e74942271ebbbe21946b604e1b243d6c65cc320", 0x14}], 0x1}}, {{&(0x7f0000000780)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)="81b2769b6529f5d4b6a52cf395c493a8eac0c8a27644cde60d796d5a1192b79e146b6a1ffe53986c310e", 0x2a}, {&(0x7f0000000840)="f78747e5267d4d997e95d666ccd5e78e50662471ff1d7ae6650922603b745ebf5af609966bf880a75f0c65a670801c8cb0c2d6f4b4cc98a9e56fdae220101e5de62461f5c27125100158487661d0b8069f07222c85dba6d237fc1a4a92c156abf671530ce3bfac3e172a489a5acc347e673eb021613a81c6dcfd530a4bd53f6d9d17d1cbdb3d54d951ff8603be9303265b4c6a8a6faa313610187f394b81deb08d41aad4f4fc4e8b69916500aa7a4e0a0fecbb76c8eee486f3baebcdfb83f94bb66224d862ccd8f2c588da4e53ca0528c7ee2369029e2cda2a47efb85cfca81cab", 0xe1}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1480}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000480)="5c41a33e4db9ee3686884f4630626f", 0xf}, {&(0x7f0000001f40)="7fc2024db25f992f3cece376e95f6b489558cfe7eb0e84bcf2ff903b57632629", 0x20}, {0x0}], 0x3, &(0x7f0000003500)=[{0x1010, 0x88, 0x1, "735b856cc494ce0b82b832414270590210a81a5cb13d4fe1e4a5fe9825422a83f811d166f9313436ba5d68726398e846d5b644663a703d057b66aeedea99c39f83558fb5f4a680e6ca1dc4fb0dd87a085dd0725de2942aaa632c856b7ea1d6db13546fcbfb883581842763803e7f26281d14d0a5b2a2dc073041166294263a253ab69ad38f3a7f4c2f7d1174b3265bc6f6914a4eb0d757afd267dfe1ac4f9545a06165cd0d262c3ad3a5452676c4b49d400a1f5d5d19de5da383530bf9f0c191fe0867074f89e14be818d51a0b98a6973466f9b6816e08f32af586ffc67d0cae36f1831160b725ebfdbd32cd148b5b852203b5a7475dd613b6a02bea9822fe9815631e71945a251df1b61f1b3a67142f8595299beb76104315375f9cc4b9e1926bbe35fbccfcefa7d508398bf3606beec2396d5f7c90902c661e57e3a92c4be8806f23c6407cec6cb1d7658232ea84ae8ca1d3df108704c3120449c86dd7a11d7eb1a224509ed6ed5ac8828266ec9743b8d32360e81ae75dfe3c392e1cb350761c60171b4ae27712306012b280d1b970d858585132f63f3789ffc05fbeefc2b76e99c3f7195a8205d1126c85db98f1f303f834982298acffd75696d833f93862ec04e47e562f387a3ea97be65271e0d101508f304aa73a390af9aba8f7b81df40afd380bf3422e1779a944f09d4cffddfe5aafc06be359f7289cc9cc4f72d8e6e27d131b260bd11e7add24324cbdd971a64dcbbd445b864bf27b86605eab71dc3b0ac4cfa15989f4b9f51cbd68263fae0c77aa10952b7e26871872fe7abe9fdc7f5f60a7bdf890ad0de4225f59a2bf5f72b41e90c8c69447ccc0db2cc6f0b6f80a120d9874df93867b45468b39c7d9b2c6980d54629f80bb925861a7c5906f8f548a391c911d50a1ba67ae9dc605f9252c60c6528b87e8f278de4dfc4c43703cc5670d4df8b2dd0a554dfacd3738f81f88e1f6a58b4305e631567dea27b273054773c33021581930263bd7d4585a225676bda99721333768bb550c0f0d8d961b889b241f6bcaf469b61b6e5ece527f1386554be8e24bf2007e598bf03f32919f3e6428bde6981e2c9c6dc23f91041018f101db7135046874a1cee91d220d4ed87a0d551b4626a76e64c79691f90542a54235c0453ea94cb4ea40f4e23b74d4759f90890bc7bb177ce3b9e58689d543c2e03407a805940c464d38cfba82573ad4c29126b3eaeee385feecdc1594db203b8d34adf90f8522a8bddbe20a451a594570fc93da50514756c3cce35407307f32c9c2e9b5ad2149b7c0124b58ca12ed7a95502707ce78f399cade6180e7d1f2fddd99471ed5fc76ef0f9e1668a4d95676d12b06464462305fafb3d9e4d6bef52cd86bd3ab4b08b5186d6069f388a9d03eb68ed8f379994567c9cd078ce0c6fd6e73e1ec5615ab027d69777b2c4e900aedad494d64436550c313ebde67893026959772fd4b569297f5833346f639ca66fd1cd58032a06d7ea61e1cb43c8e03df5028093ea0c2815fb1680f708d4a16fa4da27b41b4886cc0c65d2e30912f3a52d2d04f50f5ee21b23f18ad8635f962bb2540f3502db3d6b28724726a1b785cc9e1228e4e6a0e713ad601844d3bc005b75c4651044e539879dc9dda984b3084c866bc1b0c2906ce78ce6f36ca5e12a70dfe912a6aa6ae3dce569be272a4fb8a71602eb3e0f0cd63c0c05aa50b27719dc9fd0feb32bbfd6882f235552a4f307e8c1c0fdf7f68e6c51ec3b7105a9e75464e4ab6118865c89caa707f1cfd30f882cffd9f7ce0647b628bbe4616ca53cf5103c3d5812ee409f2b557cb6445b36546b093cea3efd9a7484b821a91d60619fd356e085ba31ea370c3bd305a079e505b20ddbac66ca265d7d63afb2a2cc1c9251e67eb4d28aa6ab6eb16cdd66e3ee0c92981a2ed6424ff7a6d3f1fe91f6fc4c0da9037f90d368d0c4d4faddbed183a097aad271c6486311c4b53550d8f8c29c73443ee77a99590b6df9e9d9716464002aafa92079742f89f4d631d91bcd3bf05f968f74626d4e41d4a5c8854bc5333566aed3299d26f3abb831c8e6a9df4fc365e34f15467cbdeb0e8bead36ba9f0391d95731bce54240201040cd17606f6a8ac3fd18a2bad0ba2e1be28f9b6462cff478170da0c7358611536b83cb74c842e6fc644dc784afdd6efc559da797b125c14ee15d1da004e17fe2c5f6e1ccea8dbbbd82bed4ea333cd8a7fa35f376adc40f290dd9dc06ee275988301e9a4e9048219ad66b92bae63bab3f9f0803b60d88c7939248d8a33e556d34558d4803bccfebb7d6cbf052a789503d812afe50a8a0ea567203344464c92402d182f3d226e2a1069782a74e05f3b0c26970094a1e9008175d4d2d186c17f06748ad0e25605d3b4f4d76d3bb1fafb965aa924e23eb0e11d7cab8473c14f5965d63090e8ab6b5ef7caae183c68646ec42a78ef9861551c51781c23fbf753c1886ea43fa717ba4bbed20a9350b38dabafdae1a666291f433f0801825ccc09e32fc8a1859f97709dcf30a42774676735568ef4df56f7052b3462b182eb751129d2e56fba8cf084feebe5dcc8fd89e6c6471181a2131fd6819d8cd613d3dd1f85a9b5f0a9092ebf31359e01f6141ce8bd1ca084c1bca4712171f39534bf73548c76a85b6d257865e8b8a691477bcac300bc4ffb9d2fc6803807e867abac9faf0d4d25712000469a5d6595fcda652e8d48ce2322c8a922281027ec05eee4ab4ddc9eabe949dcb1444af7002ab76d783230206341f1c4c062a87bcf23bdaf7bb991cf88593b1bee7ace9a20ec4c57ec92043e50a3ef626c5bf309ca3c64609f8a2924097b51e86afdd860806f96cd4502c1cb624825941b27e4fb58027407804d7281e1a3fd73a2296ed9be8c73ef9b0dee98e84dfd5ad2cce73ca26a314e78132f672f659ebea6ba6b1e738807ffa9502fb5cdb8cb547d2992845f01ab2d119be7da43e2f7b919b872c16f16f1b0df8ff143c2afb6ff261e06c2a6780e797c8e0de3c4dd3c1e40d2d0f7b6d00d7fad4a3441d072d4d847c47ad6de886b47b9e2b13d0bbe086bc8923c1023c5a65ee05d298cf084b88aec879cfe3323bd39579415dbc00cd7a1ada441cd8e95318d485601c69f2c24aaa54dbd741b8da4eb42cf05757947d22d91cf1e15d87e38d81810cd79e2383e3595ed2025ba543082947ee221468fd111d0966c6c81e4b154bfca865fcb1a1003d16b8f4e4553311d9eb4093656432a7ba9eedce9c2b54e35f27bd3dd2b06862c348346eb853300352ee473b4d98936a8b631c4a1eaba96a9a2e6d749e01f0df013b31be32aa773ff537ae89e5a0d6fe31ec8d8749ee2626eaacd4bb2bbfa5920c85cf78ac2f163cdcac2afc9e5584f4e6fc3ed3766ddec75d0a1e48ce8a43433236c1743a949cb8290d71d29b18affc56d36b060a39775f52e8029d2bebdd118325a3fc8e637a9837e6606ef8da98dd74a1dcd2b003947ca2214b0c66091c98c12cf163552c354a4d1d4ccaa220c519d009df6641553097fae538b5561166798adc9c6f67d841ac877256de2eb024874dff342b62284c95f0fed4d15540f28f339e0be487260d95ca28c69224904e6d1482c528f78fcb0b94fcee47c884817fade425a9c0d8064b9ff844b6c26662264a7031d67d7c19aecc73322c458c8fba2f4b94b9eee5f1b2633dc0ae0c5420768fdec139c42b174c90215464ae67f917b0af3b4308702e9e2ac2d4f3d66b97dfb5a3736a60736d0fecba96b9807e2a3121b46f09f91a81c6489001903f27762dafd8e7a9acba13964d2c08ceae27cef7cef0fcb1f725eb49781166a6dc5b666ead0a51baedfe7f889036fa9d99f3498b3f550e073a31ea2b4583ff885939cb00a5ef3b6dd15604301ff16169d2cf6d499618b64d4ec70aac3526f8087137972303ae9e9eabc23e2fb25a0a25e77a39d250c6ce185d9dfce20f325b90d122bb0c6a78bae4cedb3fe11b2a453085e6dbf9c1ef5907e1d1dd8038855446db45a75a9b9fc58331a36587cdabd0e2da464abc851c738d7cc08542f6ba964795439dacc395115cd739fa3daf0ba2bd5fae545e8c47d3a58ff83cf038d0b4b9c9e00fb4b69e7dd86f5c548ec6e800a7a43fce5b28e9112cbe9076c0fe33f5e35214e8b6953dff8db4a3851cf4b6049f922f077769e096195324fa08cefbb5ed6e8526ffe35c78459f1d4bd6f54dcc916681ee73f47c83fee9033a5b35bb3399f21de730877d29847418f8483563cccd129d7dfd37666376016d0e2e3d90c4fc8281ccc41d011fc186c6265d9437c424f44e491a49a6aa2d02265a751613c802008057ae742c997f1bf21a9f035a3ec19aeeba7c395bdc101003258dfe68f5e8504a00ac03a1569a5d1169d865703aab5742bf3136380e2c5c7350edfa238afe93fecd98bbb947d5b6c8567641ca8beb8787d3d14bce799883e5cfc466769ec64dae1c68e0526fca355a03d1ed26187d3e4a60bd98db483eb075a8f3870b9ec20e066518cb5ac08ea9d73f433330603b6fe1ce170129f6ed73a556e85ab56411f4b3a597562b1a5b456b708a2922606354689cd7af1f9f80b6cebb7698ca40a3fcfd61a31668e7e37257122715cb75b3171c4f08e4f786239ff5de40d837f40bf589cb2cd61e0f103114045c5a455f732450789ab41ab216e7720f9f6efbdea07f5bbdf7259a60982b81aeebac11b061f6490b96048233d3b0051d5f2203e398fb66ef606b75c9ad671533457e60d2c7b8be9496c5baeea56267bd9fff5e79abe2ee66c2e0d5d7baef9aa3034705497179cdd11d5f8ad2a573b2ab65a89c5b5d0e42943d4905b24773c2c6eaefaba723ad29a8dd583a59509c12da3b56416df4c2e5a4fc5c5d5f79e216fd759f57ed790959c2eb353fe73d4f2e1a35fec977f57f0c8e91ac1386ce276de206f4fc72c4c0481132de29d1a954815ba95bdedb2a44641c53752cf70fdc0a5d815e9971e4e2cb59898d2794a674e917115a0bafc7c7ffd2e446e4853bc62412d3f7ddd7863bfd00340d6d3863342b1dd2580f33cef84a505cf72c605233324905ed3b8c45226dceb174a899499b66dce3a7dfaaa27fdd7993142d07a7eca84e53c3eed1f635786426c7cfeccb1b764370d5435d54498482b198e47c756b89c452d7c3826dfa2c09af698b02d9e04a10b916100749f2d07b464af909ed978d52aec0e75ef54cc9bfce982516c34b9950c553e494f76eadd5ac7faed5b66205eb40ac91edc4378217db346b8abbec3204f79829568177d6f17da57d149d05a5a45bff8ab5ff7d52ddd95f26ab0ab3f632487d92c3c073dcb0f2844ef30603575348cf735b1a75a421b42ebd6ba88484fee48cfd5c80ea48e324e34eb63d7eb32c4a41bb471ea99616d40e3dd1f8e11d0d6c885befcb3ae094566027c97dcea5b547f4b87388369521ff7b97ad1621efa9e2d02dde89438311e5195c8c0ba0ae8df2ae1c93c2bfcee65e8b9a51a79dcbe9268ab7fac77f01a53b45d7df1ddf1fd29db635b682a4c21f37cb4bfb63e87b29334db66401c9b7232f4ac9232d5a8f35bdcbc671fd92fd667fc97dccb9f3b5ed75b2a380595c3b292a4362d37ed87fdece2625ab4cb502439b666d54381e20a5ea9e253dcfb39d45f7b10b257a5690364bfce19bcf4e49f4510877228750b10b4df85be7c342118f27df126e1fcd7ae122f424b670e91bb9092ddd9f8f19de93a98a3c681eff1aa17d128e364dbf82fa9d3b7a7665d9ad331863cb8b056b98e92a14b9b0c62b3727c3e7940bf866c3"}, {0x10, 0x102}, {0xf0, 0x1, 0x1, "e3b7ec53e8972c73a68a217e71077b4212c1549c0c9e0dae0201f4b8c0e7fd5ee45bc192b32c4310d518ccaf9fe003623e35c48035b2a87d3a1448fdf12aade903afccf51e16632c9d2e953181166edafb866f976997d8e313bf943772dd9d7569f0db0c917aadd025b962fdbc01849b2e9991f459b74108b0638399b6d1c061f0f9302deef41befb4128379f5d137b4db7fe2e3bfc1e2737cae209337fcbd4dae83b3e506c467494c5c042a8d9fca8f3e4a1164ba15a260cb355651338c01df284df5d6b9b91d403406891b241ebfc839b702930195041e3f3a77"}, {0xd8, 0x115, 0x80000001, "7992c791fcee3bcb2bd895786891aa10f4e9b5c9b82e18091087e9939ebfef990ca0942dbc938bc43e97c17338d47552731e8481ea585c0d081754971b2b0f2062fe05d7c2fd0938c1f0ecc3eb80b4210201a3457c8df1d866c1691409b635d91c283cf22d781659d795d972fa09bafd44e6e321713a44eef499ae1143bf1e3f1351444d643e09807d83f465eeb46e212a21f9303828bfc16b1c15fe78c2844b6793685e4a19b776fca6c8d94d0d0ec7b9a6eac9051eb7f06f7f277b45cb3beb16c132"}, {0xf8, 0x109, 0x1, "4096fa241513cd02bd8b064a59bc17cb57700317126fb6afad6fb62c238a2174ae3898ec6659b2d5d126615a2ea60b3ab1223befbc647747b43de60fa7e10f17a0b3b60f767462604a38301c334fb800b842b55ded449c8cfa3fa831ef9a57b36b3ad0bb01c54a9ea6af45ce6b74600351b208fcfd5beca0ea72fd8b1ba58be4dbad09be9d787b3c9caa3d5024bb77c957199d4c17ba530ba8c4199b4d56750d6f7a59db85235ca241c429cc57c7a98ffa33080e6ab7c6d85d8d2c86200d559b643d8f478f93560eb8da161e8a32f666e36c2e09277fdd8cf9ba72eeae2deb1644"}], 0x12e0}}], 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x3, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x1, 0x4, &(0x7f00000026c0)=ANY=[@ANYBLOB="1808000007000000000000000000000085000000a00000009500000000000000ffa0c51e2f84ce37c7f0f15f97785a8455575507e7ab57ea3c07acd62c1216397d5c7b065f212b7e100be31972b5f149f34340d02843"], &(0x7f0000002340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r5, &(0x7f0000002380)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb08004500002000014000402fb778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb88a8"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002500)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002540)={0x6, 0x3, &(0x7f0000002600)=ANY=[], &(0x7f0000002640)='syzkaller\x00'}, 0x90) syz_genetlink_get_family_id$fou(&(0x7f0000002680), 0xffffffffffffffff) 20m38.417200945s ago: executing program 5 (id=269): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x844) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/109, 0x6d}], 0x1, 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/fillfile\x00', 0x42, 0x9f) 20m35.594448554s ago: executing program 5 (id=273): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmmsg(r0, 0x0, 0x0, 0x4000095) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 20m34.432143594s ago: executing program 5 (id=275): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000015980)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) bind$inet(0xffffffffffffffff, &(0x7f000002e9c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r7 = dup2(r6, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x8a, 0x4e20, 0x5, 0x2, 0xa0, 0x80, 0x62}, {0x7fffffffffffffff, 0x36, 0xffff, 0x8, 0x5, 0xb1a, 0xffffffffffffeffd, 0x3}, {0x0, 0x0, 0x7, 0xfffffffffffffff9}, 0x1, 0x6e6bb0, 0x3, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x3c}, 0xa, @in=@loopback, 0x3501, 0x0, 0x2, 0xa, 0x34c, 0x9, 0x81}}, 0xe8) get_robust_list(r1, 0x0, &(0x7f0000000540)) 20m32.26718704s ago: executing program 5 (id=276): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1800000) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001e1400000009", @ANYBLOB="212efd7f8bcb57f51f688bb7257abb940140769cf8b656281402f793ae11cb258a63bc5b2c36542bf1c106530ddc12e93dce0e4979001b86f3104464d0ce5609000000a0839c344d0b8819cb920688acff4693ad55b5f6b3a853cca8f7ce716759cca2beb631ed5c114d3646d30a31cb85d0d704b13d04c1e0547c9fe3804fe21f0be75684e380e0e459dc4be3f07ef2105671eca613d415edd53222ddbe085ed4e4447a89806bf132a8a3b485164ee90454acca3e268b9db7de3795aa1caa9aa9e271c5d7e9c7845203875adb755a595210f3217c3b", @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x2e, 0xb56cea99d7d0f667]}}, 0x0, 0x34, 0x0, 0x0, 0x7}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000600)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x54) sendmmsg$unix(r5, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) capget(&(0x7f0000000800)={0x20080522, r3}, &(0x7f0000000840)={0x3, 0x401, 0x4, 0x4, 0x0, 0x101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config\x00', &(0x7f00000009c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x40) unlinkat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nullb/rnullb0\x00', 0x200) 20m15.415426427s ago: executing program 35 (id=276): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1800000) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001e1400000009", @ANYBLOB="212efd7f8bcb57f51f688bb7257abb940140769cf8b656281402f793ae11cb258a63bc5b2c36542bf1c106530ddc12e93dce0e4979001b86f3104464d0ce5609000000a0839c344d0b8819cb920688acff4693ad55b5f6b3a853cca8f7ce716759cca2beb631ed5c114d3646d30a31cb85d0d704b13d04c1e0547c9fe3804fe21f0be75684e380e0e459dc4be3f07ef2105671eca613d415edd53222ddbe085ed4e4447a89806bf132a8a3b485164ee90454acca3e268b9db7de3795aa1caa9aa9e271c5d7e9c7845203875adb755a595210f3217c3b", @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x2e, 0xb56cea99d7d0f667]}}, 0x0, 0x34, 0x0, 0x0, 0x7}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000600)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x54) sendmmsg$unix(r5, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) capget(&(0x7f0000000800)={0x20080522, r3}, &(0x7f0000000840)={0x3, 0x401, 0x4, 0x4, 0x0, 0x101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config\x00', &(0x7f00000009c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x40) unlinkat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nullb/rnullb0\x00', 0x200) 4m13.51407052s ago: executing program 7 (id=1223): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./tracefs\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000019bc0)='./tracefs/dynamic_events\x00', 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x5}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x26}]}, 0x24}, 0x1, 0x0, 0x0, 0x162d6aca46e409ef}, 0x2000c000) sendfile(r0, r0, 0x0, 0x20000005) landlock_restrict_self(0xffffffffffffffff, 0xc) 4m11.564211947s ago: executing program 7 (id=1224): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x2]}, &(0x7f00000004c0)=0xfc) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x4b, &(0x7f0000000640), 0x1}}], 0x1, 0x0) io_uring_setup(0x1007ca6, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000a, 0x5d032, 0xffffffffffffffff, 0x0) mlockall(0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='numa_maps\x00') read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x44080) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x1, 0x0) 4m4.727681567s ago: executing program 6 (id=90): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000002e40)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000002ec0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000002f00)='./cifs\x00', &(0x7f0000002f40)='cifs\x00', 0x0, &(0x7f0000002f80)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000003000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/90, 0x5a, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf254c0000000800cafa07bd280100706369081100020030"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 4m0.469486623s ago: executing program 6 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4m0.212502202s ago: executing program 6 (id=1238): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x3e35dd06fd12e8da, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f00000002c0)='\x00', 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019b40)=0x7) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) io_setup(0x3f, &(0x7f0000019b80)=0x0) r7 = timerfd_create(0x0, 0x0) io_submit(r6, 0x3, &(0x7f0000019bc0)=[&(0x7f0000019c00)={0x0, 0x0, 0x0, 0x7, 0x0, r7, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0]) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 3m57.736657595s ago: executing program 6 (id=1239): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019380)=0x80000000000003) r5 = syz_open_dev$sndctrl(&(0x7f00000193c0), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000019400)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019440), 0x88b02, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000019480)={0x3, 0x40}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000019540)=ANY=[@ANYBLOB, @ANYBLOB], 0x30}}, 0x4004090) mkdir(&(0x7f00000001c0)='./config/cluster/ocfs2\x00', 0x1ff) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mkdir(&(0x7f0000000080)='./config/cluster/ocfs2\x00', 0x1ff) rmdir(&(0x7f0000000340)='./config/cluster/ocfs2/heartbeat/hb0\x00') 3m56.831257457s ago: executing program 7 (id=1240): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x822b01) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r0) 3m55.146853249s ago: executing program 7 (id=1242): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) getpgrp(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x9000000d}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62, 0x5}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x30}}, 0x20084084) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = dup2(r5, r5) bind$bt_hci(r6, &(0x7f00000005c0)={0x1f, 0x1, 0x3}, 0x6) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) io_submit(0x0, 0x4, &(0x7f0000000900)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x7ff, r0, &(0x7f0000000580)="ebdba1bebfbe29b148ad", 0xa, 0x3, 0x0, 0x3, r6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x8001, 0xffffffffffffffff, &(0x7f0000000640)="eaced474107360e53c053d9025b771a052d0e4cb6f", 0x15, 0x6, 0x0, 0x2, r7}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10, r1, &(0x7f0000000700)="6d580ae4266ad076e0c80d7da56771e83b3c65f98203aac06a94958f1f6ea68ae32a6a4499a7fb596874da29685874733e40d693e0fe3c38ba14bf8416fa477e43edc0b217856e0aa2811efa4ec73dab8da939e67b84386ecb15ebf02f6ebdf5fa07d538c759b73d5dfd91f5560fa9962f9827f72b30aba45c5f12b2feb4a12e8678a5cbae4d661608967a07a17ca125918e9cf4c35d4d9fe9ae969f283deb4879d69ea510e1687670523b1784", 0xad, 0x8, 0x0, 0x1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x81, 0x0, 0x2}]) sendmsg$nl_generic(r3, 0x0, 0xc004) 3m51.61218516s ago: executing program 7 (id=1246): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001ab80)=0x80000000000003) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) 3m49.395274613s ago: executing program 7 (id=1249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000002e40)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000002ec0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000002f00)='./cifs\x00', &(0x7f0000002f40)='cifs\x00', 0x0, &(0x7f0000002f80)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000003000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/90, 0x5a, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf254c0000000800cafa07bd280100706369081100020030"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 3m42.27240215s ago: executing program 36 (id=1239): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019380)=0x80000000000003) r5 = syz_open_dev$sndctrl(&(0x7f00000193c0), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000019400)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019440), 0x88b02, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000019480)={0x3, 0x40}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000019540)=ANY=[@ANYBLOB, @ANYBLOB], 0x30}}, 0x4004090) mkdir(&(0x7f00000001c0)='./config/cluster/ocfs2\x00', 0x1ff) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mkdir(&(0x7f0000000080)='./config/cluster/ocfs2\x00', 0x1ff) rmdir(&(0x7f0000000340)='./config/cluster/ocfs2/heartbeat/hb0\x00') 3m33.54296799s ago: executing program 37 (id=1249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000002e40)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000002ec0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000002f00)='./cifs\x00', &(0x7f0000002f40)='cifs\x00', 0x0, &(0x7f0000002f80)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000003000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/90, 0x5a, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf254c0000000800cafa07bd280100706369081100020030"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 1m25.035027364s ago: executing program 3 (id=1429): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0x84, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0xa, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0xa, "566b39fe"}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) 1m22.782403811s ago: executing program 3 (id=1435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='2', 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) r2 = landlock_create_ruleset(&(0x7f0000000140)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) 1m21.094723931s ago: executing program 3 (id=1439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2043, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800093ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1m16.776038693s ago: executing program 0 (id=1443): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x3631, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="38000000240001050100000000000000000000000100000000000100ffffffff00000000080001006574", 0x2a) write(r6, &(0x7f0000000180)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) sendto$inet6(r5, &(0x7f0000000140)='J', 0x1, 0x4800, 0x0, 0x0) unshare(0x8040480) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f00000002c0)=0x18, 0x4) 1m16.52300592s ago: executing program 3 (id=1445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f00000008c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x25, 0x0, &(0x7f0000000000)="b9547e000000004b0173a9a7e97575573d3490beba14f8d6efc9d0f4787e6a1c7a4d6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m14.971663276s ago: executing program 0 (id=1448): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0x84, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0xa, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m14.890973266s ago: executing program 3 (id=1450): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./tracefs\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000019bc0)='./tracefs/dynamic_events\x00', 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x2000c000) sendfile(r0, r0, 0x0, 0x20000005) landlock_restrict_self(0xffffffffffffffff, 0xc) 1m12.767548263s ago: executing program 3 (id=1451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x10}}, 0x28}}, 0x4008004) 1m10.090820695s ago: executing program 8 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002"], 0x0, 0x2a, 0x0, 0x1, 0x9, 0x10000}, 0x28) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AqAAAAAAAAAAAAAAABAAA/AAAAAAAAAACAAAAA==\x00', 0x0) 1m8.673802782s ago: executing program 8 (id=1457): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000200)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2043, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800093ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1m6.970390619s ago: executing program 0 (id=1458): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x0, 0x1, 0x9, 0x1}], 0x10, 0xfffffd2b}, 0x94) r1 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40086f52, &(0x7f0000000600)={0x2, &(0x7f0000000640)=[{0x29, '\x00', @buffer={"a264091295170000000000000000b700", 0x20}, 0x8000}, {0xb, '\x00', @st={0x4, [{0x6, @svalue=0x2}, {0x1, @svalue=0x81}, {0x3, @uvalue=0x2}, {0x1, @uvalue=0x7}]}, 0x9}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000072000000000000004ebae695b7030000000000008500000083000000bf09000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000850000000e000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000007c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000900)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fchdir(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = epoll_create1(0x80000) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000dc0)={0xc0000015}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000e00)={0xa000001c}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000940)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000a00)=0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000f40)) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x400400c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r12, &(0x7f0000000a40)={0x0, 0xfa7f, 0x100, 0x3, 0x255}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a9a, 0x10000, 0xe100, 0x197, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c99, 0x400, 0x2, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90a, 0x400, 0x3, 0x3a6, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x100, 0x1002, 0x250, 0x0, r3}}], 0x1, &(0x7f0000000d40)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r11, '\x00', {0xfff9, 0x7d6, 0x0, 0x0}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r15, 0xc04c560f, &(0x7f0000000ec0)=@multiplanar_userptr={0xffff, 0x2, 0x4, 0x200, 0x800, {0x0, 0xea60}, {0x3, 0x0, 0xa, 0x18, 0x6d, 0x8, "f2429cd8"}, 0xc, 0x2, {&(0x7f0000000e40)=[{0x8, 0x1, {0x0}, 0x9}, {0x1, 0x6, {0x0}, 0x1000}]}, 0x5}) r16 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r16, 0x6, 0xd, &(0x7f0000000780)='cdg', 0x3) pipe(&(0x7f0000000700)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(r17, 0x40047459, &(0x7f0000000740)=0x2000000) 1m3.305087401s ago: executing program 9 (id=1460): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0xc, &(0x7f0000003040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000030c0)={0x11, 0x14, &(0x7f0000003180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000072"], &(0x7f0000003200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000003240)={r0}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source', &(0x7f0000002dc0)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002e00)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002ec0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002fc0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = getpgid(0xffffffffffffffff) getpgrp(r6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x3}}, './file1/file0\x00'}) sendmsg(r7, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000040)="51a795627d290c2679c8a22900c503965ac6d166e1490d3f14f92397149e9e1ff58d9c09278a17e2fbd24850e39db47437d1bef62ef3330e0b5bcb6777cd4a0eb3ae6359b60a2e7fc19e0dc2867be6dba8489dd996124fef1069eecf53024c50e132935c43e6577c18c1c0d1ea1fa96c09dbb0dd5fa0ed03a2893646c1e25626cb968872e9f9d4be365b93a158a574e69a28e6839476a5184f65bde02091007a83df0238c9c43a799c791d402e1754091c01835e0a2aa16e3d96029cfc761e1f643981970e4d17e7f0a29135ffd17cbe2602973b100b47e78e1521c9b6887da933c97a996494e3faf6f24b188ef58f3520b7a16474929bab48a5b03d5f62c2", 0xff}, {&(0x7f0000000140)="9452a0f76bbd35f48e2bc02cec5bccac4fc904d363ba281c5ad93a", 0x1b}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="0e183c6136838a9922e7c6380889daa5d45283ff8cae6f248fd7abf7639de867fef86935432c2d5ed2299208646b21288ac06038591c697edf5564d4498f30b7a7fde544621a78b17b810e96532d98d7776b82e76d30121ae4641dcfa7151efef6f0b3cb98f78ffaff197b41217413dd30fb166a746e17909bbf3a8ae509aaa7e63899504858301a1ba0db7cc656a92706843d369615975864015d70582d55e402e924fa42cab5331ac4220f75a00ac716cf3165bbfa8c01e810341542e300", 0xbf}, {&(0x7f0000001840)="896b191b702f1d62985b5acf832eb0669e0c7c4ca183e7f288b8649c0be96119bf41a4bf630998d5cd9781930e9821f72bb6a55ea6809e6abf13fd2caa466e0de70e933761ec16441d932a10", 0x4c}, {&(0x7f00000018c0)="73b6b898094d0e690ded0392fb", 0xd}, {&(0x7f0000001900)="bc9a15fb6f506723b37a64a71cb7dfa91000203d37c4314d55a2d055c4b3d1558d77586a4ab79b0b20f6453a413f945b141dca927955e8ac54eab6e15197fb315ea462457ec1efd470af421a47d329e2c0c80e72f9dfdb969b88bea0338d193f2e35a8e6dc2eaadf485152b969e7db50c8370c0b5145b6fdccedd0ff5fe943cebc8156bbc885ca6232a6120f4932aa7361852a63e198cb19f4e7e6b09aa2680f13b702f8af52", 0xa6}, {&(0x7f00000019c0)="ecb46188152b123e1c73f24a50648cea83ed1d0dd28e696b48b4730b348690", 0x1f}, {&(0x7f0000001a00)="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", 0xffc}, {&(0x7f0000002a00)="9fc32634ffa5520544cf6f020cc099840bb92d926a01d2e3", 0x18}], 0xa, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x250}, 0x4000) renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2) 1m2.806536796s ago: executing program 8 (id=1462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f00000008c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x25, 0x0, &(0x7f0000000000)="b9547e000000004b0173a9a7e97575573d3490beba14f8d6efc9d0f4787e6a1c7a4d6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.640220756s ago: executing program 0 (id=1463): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='3', 0x1d) 1m1.104546349s ago: executing program 8 (id=1464): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$unix(0x1, 0x2, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x143102) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x1, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000700)=r3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r4}, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read(r5, 0x0, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x100) mkdir(&(0x7f0000000900)='./file0\x00', 0x184) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000940)='./bus\x00', 0x0) 1m0.671813154s ago: executing program 9 (id=1465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) 1m0.455285621s ago: executing program 0 (id=1467): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000194c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000019540), 0x11000) r5 = fsopen(&(0x7f0000000340)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 59.460483209s ago: executing program 8 (id=1468): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x0, 0x32}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x5) 57.104931669s ago: executing program 38 (id=1451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x10}}, 0x28}}, 0x4008004) 57.014804656s ago: executing program 0 (id=1470): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0x84, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0xa, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 56.935827638s ago: executing program 9 (id=1471): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)=0x0) prlimit64(r0, 0xe, &(0x7f00000004c0)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x4a102) writev(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = fsopen(&(0x7f0000000600)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x8880, 0x85) lseek(r4, 0x101, 0x1) r5 = socket(0x10, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x2925, 0x0, 0x0, 0x200000000000003, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x7ff, 0x3, 0x0, 0x4ac, 0x0, 0x4, 0xfffffffeffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r5, &(0x7f0000000780)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f00000007c0), 0x400000000000ec0, 0x2, &(0x7f0000000800)={0x77359400}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000840)={0x0, 0x0, 0x7}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000880), 0x402, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgid(0x0) 54.947292692s ago: executing program 8 (id=1472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_sec\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000280)=""/9, 0xfffffd87) write$tun(r4, &(0x7f00000002c0)=ANY=[], 0xffe) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x54}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000380)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0xf4, 0xf4ffffff}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 52.754461087s ago: executing program 9 (id=1473): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ftruncate(0xffffffffffffffff, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000400)=0x7e, 0x6) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x80010, 0xffffffffffffffff, 0x1000) r3 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, 0x0, 0x0, r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000) socket(0x2b, 0x80801, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 51.241838221s ago: executing program 9 (id=1475): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x0, 0x1, 0x9, 0x1}], 0x10, 0xfffffd2b}, 0x94) r1 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40086f52, &(0x7f0000000600)={0x2, &(0x7f0000000640)=[{0x29, '\x00', @buffer={"a264091295170000000000000000b700", 0x20}, 0x8000}, {0xb, '\x00', @st={0x4, [{0x6, @svalue=0x2}, {0x1, @svalue=0x81}, {0x3, @uvalue=0x2}, {0x1, @uvalue=0x7}]}, 0x9}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000072000000000000004ebae695b7030000000000008500000083000000bf09000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000850000000e000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000007c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000900)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fchdir(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = epoll_create1(0x80000) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000dc0)={0xc0000015}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000e00)={0xa000001c}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000940)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000a00)=0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000f40)) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x400400c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r12, &(0x7f0000000a40)={0x0, 0xfa7f, 0x100, 0x3, 0x255}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a9a, 0x10000, 0xe100, 0x197, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c99, 0x400, 0x2, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90a, 0x400, 0x3, 0x3a6, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x100, 0x1002, 0x250, 0x0, r3}}], 0x1, &(0x7f0000000d40)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r11, '\x00', {0xfff9, 0x7d6, 0x0, 0x0}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r15, 0xc04c560f, &(0x7f0000000ec0)=@multiplanar_userptr={0xffff, 0x2, 0x4, 0x200, 0x800, {0x0, 0xea60}, {0x3, 0x0, 0xa, 0x18, 0x6d, 0x8, "f2429cd8"}, 0xc, 0x2, {&(0x7f0000000e40)=[{0x8, 0x1, {0x0}, 0x9}, {0x1, 0x6, {0x0}, 0x1000}]}, 0x5}) r16 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r16, 0x6, 0xd, &(0x7f0000000780)='cdg', 0x3) pipe(&(0x7f0000000700)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(r17, 0x40047459, &(0x7f0000000740)=0x2000000) 47.002702073s ago: executing program 9 (id=1479): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000003c0)={0x2b, 0x11, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x100, [0x4, 0x2, 0xff, 0x3, 0x6, 0x95e]}}, @generic={0xf0}, @pad1, @enc_lim={0x4, 0x1, 0x81}, @generic={0xe7, 0x49, "4d1e33027aaf256300f7f017595b88b113a93ba9d5f916f3b5fc01e66c7344a63426de48506a770dd780acf1fea2a4bccf59b08914a2ab4b97cab9666798ece41100adf860a8e9aa2a"}]}, 0x98) unshare(0x8000000) unshare(0xc000200) 39.96699321s ago: executing program 39 (id=1470): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0x84, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0xa, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 39.048639058s ago: executing program 40 (id=1472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_sec\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000280)=""/9, 0xfffffd87) write$tun(r4, &(0x7f00000002c0)=ANY=[], 0xffe) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x54}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000380)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0xf4, 0xf4ffffff}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 31.503875398s ago: executing program 41 (id=1479): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000003c0)={0x2b, 0x11, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x100, [0x4, 0x2, 0xff, 0x3, 0x6, 0x95e]}}, @generic={0xf0}, @pad1, @enc_lim={0x4, 0x1, 0x81}, @generic={0xe7, 0x49, "4d1e33027aaf256300f7f017595b88b113a93ba9d5f916f3b5fc01e66c7344a63426de48506a770dd780acf1fea2a4bccf59b08914a2ab4b97cab9666798ece41100adf860a8e9aa2a"}]}, 0x98) unshare(0x8000000) unshare(0xc000200) 14.341533385s ago: executing program 4 (id=1498): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x3e35dd06fd12e8da, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f00000002c0)='\x00', 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019b40)=0x7) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, 0x0) io_setup(0x3f, &(0x7f0000019b80)=0x0) r7 = timerfd_create(0x0, 0x0) io_submit(r6, 0x3, &(0x7f0000019bc0)=[&(0x7f0000019c00)={0x0, 0x0, 0x0, 0x7, 0x0, r7, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0]) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000019d00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) 11.733189166s ago: executing program 4 (id=1500): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 7.357668985s ago: executing program 1 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="566c34358e97ad3c98effe804c66e7586760d66c08d83a70cdc44385c057b203f2614d7f55530d28cc9e0a9fd192be7a37d3efa9adc0baf2c69e8a4b44a8edb5a4e9128f6b") madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x8000) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x100, &(0x7f00001a4000/0x2000)=nil, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000010028bd7100ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5afae9a79964708bac8"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) 5.935914425s ago: executing program 4 (id=1505): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010003000077a317e1d2a9fa3dcd9acf00002a90a07538b3"], 0x0}, 0x0) 4.011113692s ago: executing program 1 (id=1506): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000070000007a0af0ff0000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0032032, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x141102) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./cifs\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000540)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) sendto$inet6(r5, &(0x7f0000000580)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfda, @mcast1, 0x7}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) 2.736677483s ago: executing program 1 (id=1507): r0 = syz_open_dev$sg(&(0x7f0000000640), 0x0, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000700)}, &(0x7f0000000740)="eded501ef663", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) 2.419521687s ago: executing program 1 (id=1508): capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000880)={0x18}) 2.368379537s ago: executing program 4 (id=1509): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, 0x0, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2043, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800093ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.110304066s ago: executing program 1 (id=1510): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ftruncate(0xffffffffffffffff, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000400)=0x7e, 0x6) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x80010, 0xffffffffffffffff, 0x1000) r3 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, 0x0, 0x0, r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000) fsopen(&(0x7f0000000600)='9p\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.638490285s ago: executing program 4 (id=1511): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), 0x0) sendmmsg$unix(r1, &(0x7f0000000200), 0x400000000000041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000480), 0x8, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x280, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x40000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000700)={0x0, 0x7}, 0x8) 800.840475ms ago: executing program 1 (id=1512): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'pim6reg\x00', 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f00000003c0)={0x3c1842d, 0x1000, 0x1}) 0s ago: executing program 4 (id=1513): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n\x00', 0x3) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget\x00', 0x1ff) kernel console output (not intermixed with test programs): 0 maxpacket: 32 [ 1270.370408][ T5888] usb 5-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1270.370638][ T5888] usb 5-1: no configurations [ 1270.370860][ T5888] usb 5-1: can't read configurations, error -22 [ 1270.422004][ T5888] usb usb5-port1: attempt power cycle [ 1270.817757][ T5888] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1270.861498][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 1270.868932][ T5888] usb 5-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1270.868977][ T5888] usb 5-1: no configurations [ 1270.868994][ T5888] usb 5-1: can't read configurations, error -22 [ 1271.005964][ T5888] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1271.025614][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 1271.031595][ T5888] usb 5-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1271.031650][ T5888] usb 5-1: no configurations [ 1271.031671][ T5888] usb 5-1: can't read configurations, error -22 [ 1271.031921][ T5888] usb usb5-port1: unable to enumerate USB device [ 1271.758692][ T3295] team0 (unregistering): Port device team_slave_1 removed [ 1271.948534][ T3295] team0 (unregistering): Port device team_slave_0 removed [ 1272.256179][ T4947] Bluetooth: hci0: command tx timeout [ 1274.738834][T14609] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1274.989176][T14435] hsr_slave_0: entered promiscuous mode [ 1274.992560][T14435] hsr_slave_1: entered promiscuous mode [ 1275.303632][T14635] netlink: 'syz.9.1160': attribute type 1 has an invalid length. [ 1277.049799][T14663] FAULT_INJECTION: forcing a failure. [ 1277.049799][T14663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1277.049853][T14663] CPU: 1 UID: 0 PID: 14663 Comm: syz.1.1162 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.049908][T14663] Tainted: [L]=SOFTLOCKUP [ 1277.049923][T14663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1277.049948][T14663] Call Trace: [ 1277.049961][T14663] [ 1277.049977][T14663] dump_stack_lvl+0x100/0x190 [ 1277.050043][T14663] should_fail_ex.cold+0x5/0xa [ 1277.050101][T14663] should_fail_alloc_page+0xeb/0x140 [ 1277.050163][T14663] prepare_alloc_pages+0x1f0/0x5b0 [ 1277.050219][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.050281][T14663] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 1277.050327][T14663] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1277.050372][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.050419][T14663] ? lockdep_hardirqs_on+0x7d/0x110 [ 1277.050468][T14663] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1277.050514][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.050560][T14663] ? stack_depot_save_flags+0x49a/0xa10 [ 1277.050617][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.050663][T14663] ? kasan_save_stack+0x3f/0x50 [ 1277.050713][T14663] ? kasan_save_stack+0x30/0x50 [ 1277.050761][T14663] ? kasan_save_track+0x14/0x30 [ 1277.050810][T14663] ? __kasan_kmalloc+0xaa/0xb0 [ 1277.050861][T14663] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 1277.050911][T14663] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1277.050954][T14663] ? blk_trace_setup+0x217/0x440 [ 1277.051006][T14663] ? __x64_sys_ioctl+0x18e/0x210 [ 1277.051056][T14663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.051141][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.051188][T14663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1277.051251][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.051302][T14663] ? policy_nodemask+0xed/0x5e0 [ 1277.051367][T14663] alloc_pages_mpol+0x201/0x560 [ 1277.051430][T14663] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1277.051488][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.051539][T14663] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1277.051590][T14663] alloc_pages_noprof+0x1a/0x160 [ 1277.051630][T14663] relay_open_buf.part.0+0x261/0xb70 [ 1277.051698][T14663] relay_open+0x7b9/0xa00 [ 1277.051755][T14663] blk_trace_setup_prepare+0x35c/0x6c0 [ 1277.051815][T14663] blk_trace_setup+0x217/0x440 [ 1277.051876][T14663] ? __pfx_blk_trace_setup+0x10/0x10 [ 1277.051926][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.051984][T14663] ? find_held_lock+0x2b/0x80 [ 1277.052022][T14663] ? tomoyo_path_number_perm+0x28f/0x580 [ 1277.052076][T14663] ? tomoyo_path_number_perm+0x28f/0x580 [ 1277.052167][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.052214][T14663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1277.052287][T14663] sg_ioctl+0x10fe/0x26d0 [ 1277.052364][T14663] ? __pfx_sg_ioctl+0x10/0x10 [ 1277.052423][T14663] ? __fget_files+0x34/0x3d0 [ 1277.052485][T14663] ? find_held_lock+0x2b/0x80 [ 1277.052521][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.052568][T14663] ? hook_file_ioctl_common+0x140/0x440 [ 1277.052641][T14663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.052688][T14663] ? __fget_files+0x21f/0x3d0 [ 1277.052757][T14663] ? __pfx_sg_ioctl+0x10/0x10 [ 1277.052821][T14663] __x64_sys_ioctl+0x18e/0x210 [ 1277.052878][T14663] do_syscall_64+0x123/0x790 [ 1277.052932][T14663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.052974][T14663] RIP: 0033:0x7f63d1b9f559 [ 1277.053005][T14663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.053043][T14663] RSP: 002b:00007f63d2a0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.053081][T14663] RAX: ffffffffffffffda RBX: 00007f63d1e25fa0 RCX: 00007f63d1b9f559 [ 1277.053108][T14663] RDX: 0000200000000400 RSI: 00000000c0481273 RDI: 0000000000000005 [ 1277.053134][T14663] RBP: 00007f63d1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1277.053159][T14663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1277.053184][T14663] R13: 00007f63d1e26038 R14: 00007f63d1e25fa0 R15: 00007ffd9caa7ca8 [ 1277.053238][T14663] [ 1277.159985][T14666] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1278.536432][T14542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.536553][T14542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.536747][T14542] bridge_slave_0: entered allmulticast mode [ 1278.544652][T14542] bridge_slave_0: entered promiscuous mode [ 1278.573951][T14542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.581729][T14542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.581890][T14542] bridge_slave_1: entered allmulticast mode [ 1278.603772][T14542] bridge_slave_1: entered promiscuous mode [ 1278.834601][T10436] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1278.847283][T10436] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1278.857417][T10436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1278.868157][T10436] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1278.871095][T10436] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1278.926061][ T8311] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1278.944549][T14542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1278.950604][T14435] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1278.983207][T14435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1278.986745][T14435] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1279.021101][T14435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1279.025071][ T5888] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1279.041555][T14542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.055218][T14435] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1279.109855][ T8311] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1279.111494][T14435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1279.113446][ T8311] usb 10-1: not running at top speed; connect to a high speed hub [ 1279.113480][ T8311] usb 10-1: New USB device found: idVendor=04dd, idProduct=9031, bcdDevice=28.e6 [ 1279.131684][ T8311] usb 10-1: config 7 has an invalid interface number: 48 but max is 0 [ 1279.131715][ T8311] usb 10-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 1279.131743][ T8311] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.131770][ T8311] usb 10-1: config 7 has no interface number 0 [ 1279.131803][ T8311] usb 10-1: config 7 interface 48 has no altsetting 0 [ 1279.177804][ T5888] usb 2-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 1279.184870][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1279.185176][ T5888] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1279.222478][ T8311] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.222522][ T8311] usb 10-1: Product: syz [ 1279.222549][ T8311] usb 10-1: Manufacturer: syz [ 1279.222575][ T8311] usb 10-1: SerialNumber: syz [ 1279.222843][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.222885][ T5888] usb 2-1: Product: syz [ 1279.222912][ T5888] usb 2-1: Manufacturer: syz [ 1279.222940][ T5888] usb 2-1: SerialNumber: syz [ 1279.311583][ T5888] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1279.334633][T14435] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1279.348743][ T5888] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1279.348743][ T5888] Please send a copy of this message to and [ 1279.402595][T14435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1279.413588][T14542] team0: Port device team_slave_0 added [ 1279.541981][T14542] team0: Port device team_slave_1 added [ 1279.758420][ T5888] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 1279.782710][ T5888] usb 2-1: USB disconnect, device number 32 [ 1279.862713][ T8311] cdc_ether 10-1:7.48: skipping garbage [ 1279.862739][ T8311] cdc_ether 10-1:7.48: bad CDC descriptors [ 1279.863656][ T8311] usb 10-1: unsupported MDLM descriptors [ 1279.902630][ T8311] usb 10-1: USB disconnect, device number 17 [ 1279.976069][T14542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.976097][T14542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.976145][T14542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1280.065133][T14542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.065160][T14542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.065208][T14542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.203307][ T3295] bridge_slave_1: left allmulticast mode [ 1280.203346][ T3295] bridge_slave_1: left promiscuous mode [ 1280.203592][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.238890][ T3295] bridge_slave_0: left allmulticast mode [ 1280.238927][ T3295] bridge_slave_0: left promiscuous mode [ 1280.246529][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.605294][ T5789] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1280.778255][ T5789] usb 2-1: Using ep0 maxpacket: 16 [ 1280.780518][ T5789] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1280.802171][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.802214][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.802253][ T5789] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1280.802305][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.855524][ T5789] usb 2-1: config 0 descriptor?? [ 1280.975064][ T4947] Bluetooth: hci1: command tx timeout [ 1281.043954][ T3295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.093718][ T3295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.114087][ T3295] bond0 (unregistering): Released all slaves [ 1281.317902][T14696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.324254][T14696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.335904][ T5789] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1282.335950][ T5789] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1282.335985][ T5789] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1282.338741][ T5789] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1282.338780][ T5789] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1282.338817][ T5789] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 1282.343160][ T5789] microsoft 0003:045E:07DA.0004: implement() called with n (56) > 32! (kworker/1:5) [ 1282.439993][T14542] hsr_slave_0: entered promiscuous mode [ 1282.457644][ T5789] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1282.480890][ T5789] usb 2-1: USB disconnect, device number 33 [ 1282.484484][T14542] hsr_slave_1: entered promiscuous mode [ 1282.521293][T14542] debugfs: 'hsr0' already exists in 'hsr' [ 1282.521327][T14542] Cannot create hsr debugfs directory [ 1283.055517][ T4947] Bluetooth: hci1: command tx timeout [ 1283.081798][T14708] fido_id[14708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1283.131569][T14676] rxe_eth0 speed is unknown, defaulting to 1000 [ 1285.078629][ T7814] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1285.079176][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1285.147776][ T4947] Bluetooth: hci1: command tx timeout [ 1285.256439][ T7814] usb 10-1: device descriptor read/64, error -32 [ 1285.544142][ T7814] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1285.899256][ T7814] usb 10-1: not running at top speed; connect to a high speed hub [ 1285.899305][ T7814] usb 10-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 1285.938472][ T7814] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1285.938513][ T7814] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1285.972646][ T7814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.972690][ T7814] usb 10-1: Product: syz [ 1285.972717][ T7814] usb 10-1: Manufacturer: syz [ 1285.972745][ T7814] usb 10-1: SerialNumber: syz [ 1286.027673][ T7814] oti6858 10-1:1.0: oti6858 converter detected [ 1286.046884][ T3295] hsr_slave_0: left promiscuous mode [ 1286.060286][ T7814] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 1286.079928][ T3295] hsr_slave_1: left promiscuous mode [ 1286.092702][ T3295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.116352][ T3295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.240312][ T7814] usb 10-1: USB disconnect, device number 19 [ 1286.269674][ T7814] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1286.283486][ T7814] oti6858 10-1:1.0: device disconnected [ 1286.885609][ T6021] IPVS: starting estimator thread 0... [ 1286.886358][T14734] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1286.981740][T14735] IPVS: using max 22 ests per chain, 52800 per kthread [ 1288.318354][ T4947] Bluetooth: hci1: command tx timeout [ 1288.765828][ T3295] team0 (unregistering): Port device team_slave_1 removed [ 1288.830319][ T3295] team0 (unregistering): Port device team_slave_0 removed [ 1290.720644][T14752] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 1292.136058][ T5647] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1292.285874][ T5647] usb 5-1: Using ep0 maxpacket: 16 [ 1292.288233][ T5647] usb 5-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1292.295628][ T5647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1292.307227][ T5647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.307270][ T5647] usb 5-1: Product: syz [ 1292.307296][ T5647] usb 5-1: Manufacturer: syz [ 1292.307323][ T5647] usb 5-1: SerialNumber: syz [ 1292.333054][ T5647] usb 5-1: config 0 descriptor?? [ 1292.339986][ T5647] hub 5-1:0.0: bad descriptor, ignoring hub [ 1292.340022][ T5647] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1292.360167][ T5647] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1292.571793][T14435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.786075][T14435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.973528][ T5647] usb 5-1: USB disconnect, device number 38 [ 1292.977186][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.977315][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.274142][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.274269][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.241229][T14676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.241443][T14676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.241872][T14676] bridge_slave_0: entered allmulticast mode [ 1295.266342][T14676] bridge_slave_0: entered promiscuous mode [ 1295.316569][T14676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.317139][T14676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.317304][T14676] bridge_slave_1: entered allmulticast mode [ 1295.320810][T14676] bridge_slave_1: entered promiscuous mode [ 1295.625506][T14676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.809441][T14676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.084068][T14542] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1296.112243][T14542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1296.129141][T14676] team0: Port device team_slave_0 added [ 1296.140066][T14676] team0: Port device team_slave_1 added [ 1296.150648][T14542] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1296.157642][T14811] FAULT_INJECTION: forcing a failure. [ 1296.157642][T14811] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1296.157689][T14811] CPU: 1 UID: 0 PID: 14811 Comm: syz.1.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.157743][T14811] Tainted: [L]=SOFTLOCKUP [ 1296.157757][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1296.157780][T14811] Call Trace: [ 1296.157801][T14811] [ 1296.157816][T14811] dump_stack_lvl+0x100/0x190 [ 1296.157879][T14811] should_fail_ex.cold+0x5/0xa [ 1296.157939][T14811] _copy_from_user+0x2e/0xd0 [ 1296.157996][T14811] __do_sys_landlock_create_ruleset+0x1bf/0x790 [ 1296.158052][T14811] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 1296.158118][T14811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.158174][T14811] do_syscall_64+0x123/0x790 [ 1296.158228][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.158267][T14811] RIP: 0033:0x7f63d1b9f559 [ 1296.158298][T14811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.158336][T14811] RSP: 002b:00007f63d2a0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 1296.158373][T14811] RAX: ffffffffffffffda RBX: 00007f63d1e25fa0 RCX: 00007f63d1b9f559 [ 1296.158399][T14811] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000200000000700 [ 1296.158423][T14811] RBP: 00007f63d1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1296.158447][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1296.158471][T14811] R13: 00007f63d1e26038 R14: 00007f63d1e25fa0 R15: 00007ffd9caa7ca8 [ 1296.158523][T14811] [ 1296.302997][T14542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1296.373087][T14813] FAULT_INJECTION: forcing a failure. [ 1296.373087][T14813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1296.373139][T14813] CPU: 0 UID: 0 PID: 14813 Comm: syz.9.1194 Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.373194][T14813] Tainted: [L]=SOFTLOCKUP [ 1296.373209][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1296.373233][T14813] Call Trace: [ 1296.373246][T14813] [ 1296.373261][T14813] dump_stack_lvl+0x100/0x190 [ 1296.373335][T14813] should_fail_ex.cold+0x5/0xa [ 1296.373392][T14813] should_fail_alloc_page+0xeb/0x140 [ 1296.373453][T14813] prepare_alloc_pages+0x1f0/0x5b0 [ 1296.373510][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.373565][T14813] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 1296.373611][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.373658][T14813] ? stack_trace_save+0x8e/0xc0 [ 1296.373710][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.373757][T14813] ? stack_depot_save_flags+0x27/0xa10 [ 1296.373803][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.373850][T14813] ? stack_depot_save_flags+0x27/0xa10 [ 1296.373901][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.373947][T14813] ? kasan_save_stack+0x3f/0x50 [ 1296.373996][T14813] ? kasan_save_stack+0x30/0x50 [ 1296.374044][T14813] ? kasan_save_track+0x14/0x30 [ 1296.374093][T14813] ? __kasan_kmalloc+0xaa/0xb0 [ 1296.374140][T14813] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 1296.374189][T14813] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1296.374233][T14813] ? blk_trace_setup+0x217/0x440 [ 1296.374290][T14813] ? __x64_sys_ioctl+0x18e/0x210 [ 1296.374339][T14813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.374425][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.374473][T14813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1296.374536][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.374583][T14813] ? policy_nodemask+0xed/0x5e0 [ 1296.374648][T14813] alloc_pages_mpol+0x201/0x560 [ 1296.374712][T14813] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1296.374769][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.374821][T14813] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1296.374876][T14813] alloc_pages_noprof+0x1a/0x160 [ 1296.374920][T14813] relay_open_buf.part.0+0x261/0xb70 [ 1296.374990][T14813] relay_open+0x7b9/0xa00 [ 1296.375049][T14813] blk_trace_setup_prepare+0x35c/0x6c0 [ 1296.375109][T14813] blk_trace_setup+0x217/0x440 [ 1296.375171][T14813] ? __pfx_blk_trace_setup+0x10/0x10 [ 1296.375222][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.375280][T14813] ? find_held_lock+0x2b/0x80 [ 1296.375327][T14813] ? tomoyo_path_number_perm+0x28f/0x580 [ 1296.375381][T14813] ? tomoyo_path_number_perm+0x28f/0x580 [ 1296.375475][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.375522][T14813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1296.375588][T14813] sg_ioctl+0x10fe/0x26d0 [ 1296.375667][T14813] ? __pfx_sg_ioctl+0x10/0x10 [ 1296.375727][T14813] ? __fget_files+0x34/0x3d0 [ 1296.375793][T14813] ? find_held_lock+0x2b/0x80 [ 1296.375831][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.375879][T14813] ? hook_file_ioctl_common+0x140/0x440 [ 1296.375947][T14813] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.375994][T14813] ? __fget_files+0x21f/0x3d0 [ 1296.376066][T14813] ? __pfx_sg_ioctl+0x10/0x10 [ 1296.376128][T14813] __x64_sys_ioctl+0x18e/0x210 [ 1296.376183][T14813] do_syscall_64+0x123/0x790 [ 1296.376238][T14813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.376280][T14813] RIP: 0033:0x7f1fde39f559 [ 1296.376317][T14813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.376356][T14813] RSP: 002b:00007f1fdf2cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.376394][T14813] RAX: ffffffffffffffda RBX: 00007f1fde625fa0 RCX: 00007f1fde39f559 [ 1296.376422][T14813] RDX: 0000200000000400 RSI: 00000000c0481273 RDI: 0000000000000005 [ 1296.376448][T14813] RBP: 00007f1fde436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1296.376473][T14813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1296.376498][T14813] R13: 00007f1fde626038 R14: 00007f1fde625fa0 R15: 00007ffe5ddcf3f8 [ 1296.376551][T14813] [ 1296.527576][T14542] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1296.563340][T14542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1296.576706][T14542] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1296.610386][T14542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1296.625330][T14676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.625353][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.625399][T14676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.659921][T14676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.659944][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.659991][T14676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.120072][T14828] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 1297.186077][T14676] hsr_slave_0: entered promiscuous mode [ 1297.195566][T14676] hsr_slave_1: entered promiscuous mode [ 1297.196435][T14676] debugfs: 'hsr0' already exists in 'hsr' [ 1297.196465][T14676] Cannot create hsr debugfs directory [ 1299.728200][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.728333][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.738043][T14542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.834743][T14542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.870057][T14807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.870181][T14807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.914828][T10906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.915036][T10906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.344555][T14435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.417188][T14676] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1304.437275][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1304.438413][T14676] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1304.462037][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 1304.479170][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1304.480296][T14676] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1304.502648][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1304.508955][ T4947] Bluetooth: to_multiplier 8192 > 3200 [ 1304.523998][T14676] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1304.784126][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1306.023041][T14676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.110714][T14676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.139998][T14802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.140094][T14802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.157805][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.157934][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.855885][ T4947] Bluetooth: hci2: command 0x0406 tx timeout [ 1308.907019][ T8314] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1309.017580][T14435] veth0_vlan: entered promiscuous mode [ 1309.058022][ T8314] usb 10-1: Using ep0 maxpacket: 32 [ 1309.061720][ T8314] usb 10-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1309.065691][ T8314] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.065728][ T8314] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1309.074851][ T8314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.075670][ T8314] usb 10-1: Product: syz [ 1309.075697][ T8314] usb 10-1: Manufacturer: syz [ 1309.075724][ T8314] usb 10-1: SerialNumber: syz [ 1309.079457][T14435] veth1_vlan: entered promiscuous mode [ 1309.091676][ T8314] usb 10-1: config 0 descriptor?? [ 1309.284277][T14435] veth0_macvtap: entered promiscuous mode [ 1309.324336][T14435] veth1_macvtap: entered promiscuous mode [ 1309.400059][T14435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.422680][T14435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.469101][T14806] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.470145][T14806] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.470236][T14806] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.523854][T14542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.555303][T14803] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.939364][ T7489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.939397][ T7489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.968196][T14963] FAULT_INJECTION: forcing a failure. [ 1309.968196][T14963] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1309.968258][T14963] CPU: 1 UID: 0 PID: 14963 Comm: syz.1.1204 Tainted: G L syzkaller #0 PREEMPT(full) [ 1309.968312][T14963] Tainted: [L]=SOFTLOCKUP [ 1309.968326][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1309.968350][T14963] Call Trace: [ 1309.968362][T14963] [ 1309.968377][T14963] dump_stack_lvl+0x100/0x190 [ 1309.968445][T14963] should_fail_ex.cold+0x5/0xa [ 1309.968503][T14963] get_futex_key+0x1c9/0x13e0 [ 1309.968571][T14963] ? __pfx_get_futex_key+0x10/0x10 [ 1309.968629][T14963] ? wakeup_preempt_fair+0x4fc/0xf60 [ 1309.968699][T14963] futex_wait_setup+0x91/0x540 [ 1309.968763][T14963] __futex_wait+0x19f/0x360 [ 1309.968818][T14963] ? __pfx___futex_wait+0x10/0x10 [ 1309.968866][T14963] ? __pfx_try_to_wake_up+0x10/0x10 [ 1309.968916][T14963] ? futex_hash+0x311/0x400 [ 1309.968982][T14963] ? __pfx_futex_wake_mark+0x10/0x10 [ 1309.969041][T14963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1309.969088][T14963] ? find_held_lock+0x2b/0x80 [ 1309.969126][T14963] ? futex_wake+0x4ea/0x5e0 [ 1309.969176][T14963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1309.969223][T14963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1309.969285][T14963] futex_wait+0xe6/0x370 [ 1309.969336][T14963] ? __pfx_futex_wait+0x10/0x10 [ 1309.969396][T14963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1309.969443][T14963] ? rcu_read_lock_any_held+0x6a/0x90 [ 1309.969484][T14963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1309.969531][T14963] ? find_held_lock+0x2b/0x80 [ 1309.969564][T14963] ? ksys_write+0x190/0x250 [ 1309.969610][T14963] ? ksys_write+0x190/0x250 [ 1309.969664][T14963] do_futex+0x265/0x440 [ 1309.969712][T14963] ? __pfx_do_futex+0x10/0x10 [ 1309.969755][T14963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1309.969819][T14963] __x64_sys_futex+0x34f/0x4d0 [ 1309.969863][T14963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1309.969909][T14963] ? fput+0x7c/0x100 [ 1309.969943][T14963] ? __pfx___x64_sys_futex+0x10/0x10 [ 1309.969983][T14963] ? ksys_write+0x1ac/0x250 [ 1309.970033][T14963] ? __pfx_ksys_write+0x10/0x10 [ 1309.970089][T14963] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1309.970145][T14963] do_syscall_64+0x123/0x790 [ 1309.970202][T14963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.970248][T14963] RIP: 0033:0x7f63d1b9f559 [ 1309.970279][T14963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1309.970318][T14963] RSP: 002b:00007f63d2a0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1309.970356][T14963] RAX: ffffffffffffffda RBX: 00007f63d1e25fa8 RCX: 00007f63d1b9f559 [ 1309.970384][T14963] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f63d1e25fa8 [ 1309.970408][T14963] RBP: 00007f63d1e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.970433][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1309.970458][T14963] R13: 00007f63d1e26038 R14: 00007ffd9caa7bc0 R15: 00007ffd9caa7ca8 [ 1309.970510][T14963] [ 1310.400022][ T7489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.400056][ T7489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.684472][ T5789] usb 10-1: USB disconnect, device number 20 [ 1314.550249][T14676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.824067][ T29] audit: type=1800 audit(1793365839.953:17): pid=14993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1218" name=08 dev="sda1" ino=2046 res=0 errno=-22 [ 1315.439861][T14542] veth0_vlan: entered promiscuous mode [ 1315.484662][T14542] veth1_vlan: entered promiscuous mode [ 1315.662673][T14542] veth0_macvtap: entered promiscuous mode [ 1315.844233][T14542] veth1_macvtap: entered promiscuous mode [ 1315.895911][ T5789] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1316.093271][T14542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.196930][ T5789] usb 10-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1316.272010][ T5789] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.272493][ T5789] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.474118][T14542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.541947][ T5789] usb 10-1: config 0 descriptor?? [ 1316.546791][ T5789] pwc: Askey VC010 type 2 USB webcam detected. [ 1316.658476][T14803] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.675467][T14803] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.677555][T14803] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.677649][T14803] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.047605][ T5789] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1317.048455][ T5789] pwc: recv_control_msg error -32 req 02 val 2700 [ 1317.054147][ T5789] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1317.055960][ T5789] pwc: recv_control_msg error -32 req 04 val 1000 [ 1317.062965][ T5789] pwc: recv_control_msg error -32 req 04 val 1300 [ 1317.063802][ T5789] pwc: recv_control_msg error -32 req 04 val 1400 [ 1317.064740][ T5789] pwc: recv_control_msg error -32 req 02 val 2000 [ 1317.072250][ T5789] pwc: recv_control_msg error -32 req 02 val 2100 [ 1317.111719][ T6001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.111779][ T6001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.286206][ T5789] pwc: recv_control_msg error -32 req 02 val 2500 [ 1317.303482][ T5789] pwc: recv_control_msg error -32 req 02 val 2400 [ 1317.308790][ T5789] pwc: recv_control_msg error -32 req 02 val 2600 [ 1317.309755][ T5789] pwc: recv_control_msg error -32 req 02 val 2900 [ 1319.016047][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.016080][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.226046][T14676] veth0_vlan: entered promiscuous mode [ 1319.269362][ T5789] pwc: recv_control_msg error -71 req 04 val 1100 [ 1319.271442][ T5789] pwc: recv_control_msg error -71 req 04 val 1200 [ 1319.282033][ T5789] pwc: Registered as video103. [ 1319.288810][T14676] veth1_vlan: entered promiscuous mode [ 1319.315447][ T5789] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input36 [ 1319.361617][ T5789] usb 10-1: USB disconnect, device number 21 [ 1319.503733][T14676] veth0_macvtap: entered promiscuous mode [ 1319.538839][T14676] veth1_macvtap: entered promiscuous mode [ 1319.581571][T14676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.648365][T14676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.755090][T14804] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.755472][T14804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.755536][T14804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.755595][T14804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.201208][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.201244][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.321020][T14804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.321044][T14804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.842588][T15108] tipc: Enabling of bearer rejected, failed to enable media [ 1333.862346][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1228'. [ 1343.449145][ T29] audit: type=1800 audit(1793365870.571:18): pid=15177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1250" name=08 dev="sda1" ino=2046 res=0 errno=-22 [ 1353.323875][ T4947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1353.334076][ T4947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1353.347606][ T4947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1353.357710][ T4947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1353.358881][ T4947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1356.750477][ T4947] Bluetooth: hci4: command tx timeout [ 1357.457584][T15205] rxe_eth0 speed is unknown, defaulting to 1000 [ 1357.806924][T10436] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1357.813295][T10436] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1357.822588][T10436] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1357.830158][T10436] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1357.844501][T10436] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1358.815900][ T4947] Bluetooth: hci4: command tx timeout [ 1361.001111][ T4947] Bluetooth: hci7: command tx timeout [ 1361.001908][ T4947] Bluetooth: hci4: command tx timeout [ 1361.141854][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.141942][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.056391][T10436] Bluetooth: hci4: command tx timeout [ 1363.056438][T10436] Bluetooth: hci7: command tx timeout [ 1363.903470][T14808] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.372436][T14808] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.135072][ T4947] Bluetooth: hci7: command tx timeout [ 1365.171957][T15238] rxe_eth0 speed is unknown, defaulting to 1000 [ 1365.853939][ T3212] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1365.872073][T14808] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.000146][ T29] audit: type=1800 audit(1793365893.131:19): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1266" name=08 dev="sda1" ino=2046 res=0 errno=-22 [ 1366.540402][ T3212] usb 9-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1366.541766][ T3212] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.541829][ T3212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.577403][ T3212] usb 9-1: config 0 descriptor?? [ 1366.618845][ T3212] pwc: Askey VC010 type 2 USB webcam detected. [ 1366.774832][T14808] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.941798][T15309] tipc: Enabling of bearer rejected, failed to enable media [ 1366.958819][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1271'. [ 1366.964650][T15205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.965013][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.974568][T15205] bridge_slave_0: entered allmulticast mode [ 1367.041597][T15205] bridge_slave_0: entered promiscuous mode [ 1367.118848][T15205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.119547][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.122422][T15205] bridge_slave_1: entered allmulticast mode [ 1367.125340][ T3212] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1367.170630][ T3212] pwc: recv_control_msg error -32 req 02 val 2700 [ 1367.209469][ T3212] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1367.215022][ T4947] Bluetooth: hci7: command tx timeout [ 1367.230731][T15205] bridge_slave_1: entered promiscuous mode [ 1367.250876][ T3212] pwc: recv_control_msg error -32 req 04 val 1000 [ 1367.292717][ T3212] pwc: recv_control_msg error -32 req 04 val 1300 [ 1367.385987][ T3212] pwc: recv_control_msg error -32 req 04 val 1400 [ 1367.428333][ T3212] pwc: recv_control_msg error -32 req 02 val 2000 [ 1367.540201][ T3212] pwc: recv_control_msg error -32 req 02 val 2100 [ 1367.572870][ T3212] pwc: recv_control_msg error -32 req 04 val 1500 [ 1367.623682][ T3212] pwc: recv_control_msg error -32 req 02 val 2500 [ 1367.684515][ T3212] pwc: recv_control_msg error -32 req 02 val 2400 [ 1367.777519][ T3212] pwc: recv_control_msg error -32 req 02 val 2600 [ 1367.785661][ T3212] pwc: recv_control_msg error -32 req 02 val 2900 [ 1367.956946][T15205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.968425][T15205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.998717][ T3212] pwc: recv_control_msg error -71 req 04 val 1100 [ 1367.999162][ T3212] pwc: recv_control_msg error -71 req 04 val 1200 [ 1368.012757][ T3212] pwc: Registered as video103. [ 1368.017910][ T3212] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input37 [ 1368.055530][ T3212] usb 9-1: USB disconnect, device number 2 [ 1368.946879][T15205] team0: Port device team_slave_0 added [ 1369.009853][T15205] team0: Port device team_slave_1 added [ 1371.820222][T15205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.820250][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.820303][T15205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.833228][T15205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.833250][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.833296][T15205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.582621][T15205] hsr_slave_0: entered promiscuous mode [ 1373.588783][T15205] hsr_slave_1: entered promiscuous mode [ 1373.591296][T15205] debugfs: 'hsr0' already exists in 'hsr' [ 1373.591325][T15205] Cannot create hsr debugfs directory [ 1373.648151][T14808] bridge_slave_1: left allmulticast mode [ 1373.648190][T14808] bridge_slave_1: left promiscuous mode [ 1373.648436][T14808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.678447][T14808] bridge_slave_0: left allmulticast mode [ 1373.678484][T14808] bridge_slave_0: left promiscuous mode [ 1373.680266][T14808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.487565][T14808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.501638][T14808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.531097][T14808] bond0 (unregistering): Released all slaves [ 1376.596648][ T5647] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1376.799503][ T5647] usb 9-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1376.825187][ T5647] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.825808][ T5647] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.018997][ T5647] usb 9-1: config 0 descriptor?? [ 1377.261307][ T5647] pwc: Askey VC010 type 2 USB webcam detected. [ 1377.583159][ T5647] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1377.583989][ T5647] pwc: recv_control_msg error -32 req 02 val 2700 [ 1377.584595][ T5647] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1377.623655][ T5647] pwc: recv_control_msg error -32 req 04 val 1000 [ 1377.624244][ T5647] pwc: recv_control_msg error -32 req 04 val 1300 [ 1377.639709][ T5647] pwc: recv_control_msg error -32 req 04 val 1400 [ 1377.642225][ T5647] pwc: recv_control_msg error -32 req 02 val 2000 [ 1377.643268][ T5647] pwc: recv_control_msg error -32 req 02 val 2100 [ 1377.644267][ T5647] pwc: recv_control_msg error -32 req 04 val 1500 [ 1377.668075][ T5647] pwc: recv_control_msg error -32 req 02 val 2500 [ 1377.687076][ T5647] pwc: recv_control_msg error -32 req 02 val 2400 [ 1377.697725][ T5647] pwc: recv_control_msg error -32 req 02 val 2600 [ 1377.703463][ T5647] pwc: recv_control_msg error -32 req 02 val 2900 [ 1377.816293][T15238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.816552][T15238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.816755][T15238] bridge_slave_0: entered allmulticast mode [ 1377.849398][T15238] bridge_slave_0: entered promiscuous mode [ 1377.910186][ T5647] pwc: recv_control_msg error -71 req 04 val 1100 [ 1377.912133][ T5647] pwc: recv_control_msg error -71 req 04 val 1200 [ 1377.936933][ T5647] pwc: Registered as video103. [ 1377.939562][T15238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.939683][T15238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.939843][T15238] bridge_slave_1: entered allmulticast mode [ 1377.985046][T15238] bridge_slave_1: entered promiscuous mode [ 1378.001335][ T5647] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input38 [ 1378.055892][ T5647] usb 9-1: USB disconnect, device number 3 [ 1380.608627][T15238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.200191][T15238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.061496][T14808] hsr_slave_0: left promiscuous mode [ 1384.124205][T14808] hsr_slave_1: left promiscuous mode [ 1384.133331][T14808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.133356][T14808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.153192][T14808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.153222][T14808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.219973][T14808] veth1_macvtap: left promiscuous mode [ 1384.220025][T14808] veth0_macvtap: left promiscuous mode [ 1384.220147][T14808] veth1_vlan: left promiscuous mode [ 1384.220231][T14808] veth0_vlan: left promiscuous mode [ 1384.655449][ T5647] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1384.815947][ T5647] usb 9-1: Using ep0 maxpacket: 8 [ 1384.816942][ T5647] usb 9-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1384.842280][ T5647] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.842323][ T5647] usb 9-1: Product: syz [ 1384.842350][ T5647] usb 9-1: Manufacturer: syz [ 1384.842377][ T5647] usb 9-1: SerialNumber: syz [ 1384.907694][ T5647] usb 9-1: config 0 descriptor?? [ 1385.099802][T14808] team0 (unregistering): Port device team_slave_1 removed [ 1385.130964][ T5647] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1385.144813][T14808] team0 (unregistering): Port device team_slave_0 removed [ 1387.320456][ T5647] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1387.686061][T15238] team0: Port device team_slave_0 added [ 1387.691543][ T5291] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1388.664805][T10815] usb 9-1: USB disconnect, device number 4 [ 1388.700788][T15238] team0: Port device team_slave_1 added [ 1388.860411][T15238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.860432][T15238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.860468][T15238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.375452][T10436] Bluetooth: hci0: command 0x0406 tx timeout [ 1390.839071][T15238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.839099][T15238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.839148][T15238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.957406][T15238] hsr_slave_0: entered promiscuous mode [ 1390.958358][T15238] hsr_slave_1: entered promiscuous mode [ 1392.187978][T15455] Process accounting resumed [ 1397.733389][ T6012] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.252620][ T6012] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.883032][T15484] ceph: No mds server is up or the cluster is laggy [ 1399.242547][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 1399.314497][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 1399.538200][ T6012] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.608003][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 1399.608198][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 1399.900952][ T6012] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.932012][T15205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1399.967505][T15205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1399.982172][T15205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1400.014343][T15205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1400.024154][T15205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1400.063875][T15205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1400.380434][T15205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1400.395700][T15205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1403.428822][ T6012] bridge_slave_1: left allmulticast mode [ 1403.428860][ T6012] bridge_slave_1: left promiscuous mode [ 1403.429102][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.465321][ T6012] bridge_slave_0: left allmulticast mode [ 1403.465352][ T6012] bridge_slave_0: left promiscuous mode [ 1403.477030][ T29] audit: type=1800 audit(1793365930.601:20): pid=15522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1318" name=08 dev="sda1" ino=2046 res=0 errno=-22 [ 1403.490102][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.270972][ T6012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.288867][ T6012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.299183][ T6012] bond0 (unregistering): Released all slaves [ 1404.415136][ T5888] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1405.466896][T15529] Process accounting resumed [ 1406.277069][ T5888] usb 10-1: Using ep0 maxpacket: 16 [ 1406.282422][ T5888] usb 10-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1406.283764][ T5888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.311537][ T5888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.311573][ T5888] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1406.311626][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.352576][ T5888] usb 10-1: config 0 descriptor?? [ 1406.809039][T15525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.809896][T15525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.840283][ T5888] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1406.840329][ T5888] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1406.840363][ T5888] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 1406.876801][ T5888] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1406.876847][ T5888] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1406.876881][ T5888] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0 [ 1406.879465][ T5888] microsoft 0003:045E:07DA.0005: implement() called with n (56) > 32! (kworker/1:8) [ 1406.933508][T15205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.976123][T15205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.032851][T14806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.032968][T14806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.113763][ T5888] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1407.115422][T14806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.115547][T14806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.203608][ T5888] usb 10-1: USB disconnect, device number 22 [ 1407.559925][T15534] fido_id[15534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1407.651269][T15238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1407.688332][T15238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1407.713222][T15238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1407.768906][T15238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1407.770043][T15238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1409.489626][T15238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1409.490636][T15238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1409.558500][T15238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1409.758574][ T6012] hsr_slave_0: left promiscuous mode [ 1409.772911][ T6012] hsr_slave_1: left promiscuous mode [ 1409.773889][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.773917][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.470787][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.470820][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.554802][ T6012] veth1_macvtap: left promiscuous mode [ 1411.554855][ T6012] veth0_macvtap: left promiscuous mode [ 1411.564134][ T6012] veth1_vlan: left promiscuous mode [ 1411.564227][ T6012] veth0_vlan: left promiscuous mode [ 1412.120143][T10436] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1412.132380][T10436] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1412.133203][T10436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1412.135888][T10436] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1412.149509][T10436] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1414.188358][ T6012] team0 (unregistering): Port device team_slave_1 removed [ 1416.122927][ T4947] Bluetooth: hci1: command tx timeout [ 1416.446648][ T6012] team0 (unregistering): Port device team_slave_0 removed [ 1419.112629][ T4947] Bluetooth: hci1: command tx timeout [ 1420.504098][T15555] rxe_eth0 speed is unknown, defaulting to 1000 [ 1420.583955][ T4947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1420.585413][ T4947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1420.609583][ T4947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1420.612873][ T4947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1420.613582][ T4947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1422.560314][ T4947] Bluetooth: hci1: command tx timeout [ 1422.578532][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.578606][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.737478][T10436] Bluetooth: hci3: command tx timeout [ 1426.301116][T10436] Bluetooth: hci1: command tx timeout [ 1426.301163][T10436] Bluetooth: hci3: command tx timeout [ 1426.736033][T15610] rxe_eth0 speed is unknown, defaulting to 1000 [ 1427.202366][T14802] bridge_slave_1: left allmulticast mode [ 1427.202405][T14802] bridge_slave_1: left promiscuous mode [ 1427.202648][T14802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.237448][T14802] bridge_slave_0: left allmulticast mode [ 1427.237485][T14802] bridge_slave_0: left promiscuous mode [ 1427.238808][T14802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.963089][ T29] audit: type=1800 audit(1793365955.091:21): pid=15688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1336" name=08 dev="sda1" ino=2046 res=0 errno=-22 [ 1428.003020][T14802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1428.066921][T14802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1428.081408][T14802] bond0 (unregistering): Released all slaves [ 1428.336037][T15663] Bluetooth: hci3: command tx timeout [ 1430.793115][T15663] Bluetooth: hci3: command tx timeout [ 1434.311324][T15555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.311499][T15555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.311649][T15555] bridge_slave_0: entered allmulticast mode [ 1434.405906][T15555] bridge_slave_0: entered promiscuous mode [ 1434.415676][T15555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.415841][T15555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.416030][T15555] bridge_slave_1: entered allmulticast mode [ 1434.495064][T15555] bridge_slave_1: entered promiscuous mode [ 1434.890264][T14802] hsr_slave_0: left promiscuous mode [ 1434.904555][T14802] hsr_slave_1: left promiscuous mode [ 1434.905637][T14802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1434.924998][T14802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.659921][T14802] team0 (unregistering): Port device team_slave_1 removed [ 1435.699546][T14802] team0 (unregistering): Port device team_slave_0 removed [ 1435.855447][ T5650] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1436.006063][ T5650] usb 10-1: Using ep0 maxpacket: 8 [ 1436.006929][ T5650] usb 10-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1436.014338][ T5650] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.014378][ T5650] usb 10-1: Product: syz [ 1436.014406][ T5650] usb 10-1: Manufacturer: syz [ 1436.014434][ T5650] usb 10-1: SerialNumber: syz [ 1436.072606][ T5650] usb 10-1: config 0 descriptor?? [ 1436.272517][T15555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.321434][ T5650] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1436.370429][T15555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.581891][T15555] team0: Port device team_slave_0 added [ 1436.597803][T15555] team0: Port device team_slave_1 added [ 1436.809134][T15555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1436.809170][T15555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.809217][T15555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.822907][T15555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.822930][T15555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.822980][T15555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.064556][T15555] hsr_slave_0: entered promiscuous mode [ 1437.073510][T15555] hsr_slave_1: entered promiscuous mode [ 1437.081458][T15555] debugfs: 'hsr0' already exists in 'hsr' [ 1437.081489][T15555] Cannot create hsr debugfs directory [ 1438.786035][ T5650] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1438.920424][ T5650] usb 10-1: USB disconnect, device number 23 [ 1439.878886][T15610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.879624][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.879798][T15610] bridge_slave_0: entered allmulticast mode [ 1439.906616][T15610] bridge_slave_0: entered promiscuous mode [ 1440.099675][T15610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.099843][T15610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.100016][T15610] bridge_slave_1: entered allmulticast mode [ 1440.133906][T15610] bridge_slave_1: entered promiscuous mode [ 1440.231800][T15783] tipc: Enabling of bearer rejected, failed to enable media [ 1440.244620][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1348'. [ 1440.358379][T15610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.389862][T15610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.567916][T15610] team0: Port device team_slave_0 added [ 1440.916130][T15610] team0: Port device team_slave_1 added [ 1441.563192][ T5650] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1441.758358][ T5650] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1441.812285][ T5650] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.812507][ T5650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.812607][ T5650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.812697][ T5650] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1441.813074][ T5650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.923446][ T5650] usb 2-1: config 0 descriptor?? [ 1443.279394][T15610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.279416][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1443.279464][T15610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.346213][ T5650] usbhid 2-1:0.0: can't add hid device: -71 [ 1443.346338][ T5650] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1443.374875][ T5650] usb 2-1: USB disconnect, device number 34 [ 1443.570664][T15610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.570692][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1443.570747][T15610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.750214][T15815] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1444.063065][T15610] hsr_slave_0: entered promiscuous mode [ 1444.078771][T15610] hsr_slave_1: entered promiscuous mode [ 1444.079405][T15610] debugfs: 'hsr0' already exists in 'hsr' [ 1444.079429][T15610] Cannot create hsr debugfs directory [ 1444.193733][T14802] bridge_slave_1: left allmulticast mode [ 1444.193779][T14802] bridge_slave_1: left promiscuous mode [ 1444.194038][T14802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.213754][T14802] bridge_slave_0: left allmulticast mode [ 1444.213796][T14802] bridge_slave_0: left promiscuous mode [ 1444.214057][T14802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.784519][T15812] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1445.689960][T14802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.730121][T14802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1445.753460][T14802] bond0 (unregistering): Released all slaves [ 1448.358099][T14802] hsr_slave_0: left promiscuous mode [ 1448.364407][T14802] hsr_slave_1: left promiscuous mode [ 1448.383697][T14802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1448.395410][T14802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.072831][T14802] team0 (unregistering): Port device team_slave_1 removed [ 1450.611271][T14802] team0 (unregistering): Port device team_slave_0 removed [ 1452.492381][T15869] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1452.730459][ T5888] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1452.890786][ T5888] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1452.896549][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.896613][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.896659][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.896699][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1452.896771][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.917516][ T5888] usb 2-1: config 0 descriptor?? [ 1453.068624][T15882] FAULT_INJECTION: forcing a failure. [ 1453.068624][T15882] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.068677][T15882] CPU: 0 UID: 0 PID: 15882 Comm: syz.9.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 1453.068732][T15882] Tainted: [L]=SOFTLOCKUP [ 1453.068747][T15882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1453.068777][T15882] Call Trace: [ 1453.068790][T15882] [ 1453.068805][T15882] dump_stack_lvl+0x100/0x190 [ 1453.068872][T15882] should_fail_ex.cold+0x5/0xa [ 1453.068929][T15882] should_failslab+0xc2/0x120 [ 1453.068986][T15882] __kmalloc_noprof+0xfc/0x840 [ 1453.069033][T15882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.069081][T15882] ? lsm_blob_alloc+0x68/0x90 [ 1453.069129][T15882] lsm_blob_alloc+0x68/0x90 [ 1453.069167][T15882] security_prepare_creds+0x2d/0x290 [ 1453.069235][T15882] prepare_creds+0x5d6/0x950 [ 1453.069284][T15882] restrict_one_thread_callback+0x17a/0xb70 [ 1453.069353][T15882] ? _raw_spin_unlock_irq+0x23/0x50 [ 1453.069404][T15882] task_work_run+0x150/0x240 [ 1453.069446][T15882] ? __pfx_task_work_run+0x10/0x10 [ 1453.069492][T15882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.069551][T15882] get_signal+0x1bd/0x21d0 [ 1453.069604][T15882] ? __pfx_io_submit_one+0x10/0x10 [ 1453.069658][T15882] ? __pfx_get_signal+0x10/0x10 [ 1453.069699][T15882] ? lock_acquire+0x1d1/0x380 [ 1453.069748][T15882] ? percpu_ref_put_many.constprop.0+0x23/0x2a0 [ 1453.069802][T15882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.069849][T15882] ? find_held_lock+0x2b/0x80 [ 1453.069892][T15882] arch_do_signal_or_restart+0x91/0x7e0 [ 1453.069959][T15882] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1453.070041][T15882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.070097][T15882] exit_to_user_mode_loop+0x139/0x700 [ 1453.070156][T15882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.070203][T15882] ? rcu_is_watching+0x13/0xc0 [ 1453.070246][T15882] do_syscall_64+0x661/0x790 [ 1453.070302][T15882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.070341][T15882] RIP: 0033:0x7f1fde39f559 [ 1453.070372][T15882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.070409][T15882] RSP: 002b:00007f1fdf2cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1453.070447][T15882] RAX: 0000000000000001 RBX: 00007f1fde625fa0 RCX: 00007f1fde39f559 [ 1453.070473][T15882] RDX: 0000200000000600 RSI: 0000000000000001 RDI: 00007f1fdf2aa000 [ 1453.070499][T15882] RBP: 00007f1fde436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1453.070524][T15882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.070549][T15882] R13: 00007f1fde626038 R14: 00007f1fde625fa0 R15: 00007ffe5ddcf3f8 [ 1453.070602][T15882] [ 1453.191799][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 1453.191930][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1453.219321][ T5888] usb 2-1: USB disconnect, device number 35 [ 1453.334080][T15555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1453.397392][T15555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1453.412424][T15555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1453.469977][T15555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1453.503955][T15555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1453.537566][T15555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1453.728430][T15555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1453.776353][T15555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1453.790063][ T5291] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1454.639709][T15605] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1454.805610][T15605] usb 5-1: Using ep0 maxpacket: 8 [ 1454.806828][T15605] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1454.844474][T15605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.844519][T15605] usb 5-1: Product: syz [ 1454.844546][T15605] usb 5-1: Manufacturer: syz [ 1454.844573][T15605] usb 5-1: SerialNumber: syz [ 1454.862585][T15555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.889345][T15605] usb 5-1: config 0 descriptor?? [ 1455.147785][T15605] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1455.164565][T15555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.266895][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.267012][ T7489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1455.395592][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.395721][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1455.584684][T15610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1455.618173][T15610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1455.675923][T15610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1455.711867][T15610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1455.739313][T15610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1455.778145][T15610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1455.790208][T15610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1456.041525][T15610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1457.095692][ T5291] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1457.325976][ T5888] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1457.478426][ T5888] usb 10-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1457.486326][ T5888] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.486425][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.499075][ T5888] usb 10-1: config 0 descriptor?? [ 1457.532763][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 1457.673288][T15605] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1457.709659][T15605] usb 5-1: USB disconnect, device number 39 [ 1457.737030][T15610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.907410][T15610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.961677][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.961780][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.017509][T14802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.017644][T14802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.026098][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1458.058079][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 1458.061071][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1458.066476][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 1458.087936][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 1458.088532][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 1458.093181][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 1458.313716][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 1458.319714][ T5888] pwc: recv_control_msg error -32 req 02 val 2500 [ 1458.325220][ T5888] pwc: recv_control_msg error -32 req 02 val 2400 [ 1458.339719][ T5888] pwc: recv_control_msg error -32 req 02 val 2600 [ 1458.344819][ T5888] pwc: recv_control_msg error -32 req 02 val 2900 [ 1458.560856][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 1458.561849][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 1458.573855][ T5888] pwc: Registered as video103. [ 1458.580628][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input39 [ 1458.620905][ T5888] usb 10-1: USB disconnect, device number 24 [ 1460.575452][ T5291] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1462.404829][T15976] FAULT_INJECTION: forcing a failure. [ 1462.404829][T15976] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.404885][T15976] CPU: 1 UID: 0 PID: 15976 Comm: syz.1.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.404944][T15976] Tainted: [L]=SOFTLOCKUP [ 1462.404960][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1462.404983][T15976] Call Trace: [ 1462.404996][T15976] [ 1462.405012][T15976] dump_stack_lvl+0x100/0x190 [ 1462.405081][T15976] should_fail_ex.cold+0x5/0xa [ 1462.405138][T15976] should_failslab+0xc2/0x120 [ 1462.405195][T15976] __kmalloc_noprof+0xfc/0x840 [ 1462.405242][T15976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1462.405291][T15976] ? lsm_blob_alloc+0x68/0x90 [ 1462.405339][T15976] lsm_blob_alloc+0x68/0x90 [ 1462.405377][T15976] security_prepare_creds+0x2d/0x290 [ 1462.405441][T15976] prepare_creds+0x5d6/0x950 [ 1462.405491][T15976] restrict_one_thread_callback+0x17a/0xb70 [ 1462.405556][T15976] ? _raw_spin_unlock_irq+0x23/0x50 [ 1462.405606][T15976] task_work_run+0x150/0x240 [ 1462.405647][T15976] ? __pfx_task_work_run+0x10/0x10 [ 1462.405689][T15976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1462.405753][T15976] get_signal+0x1bd/0x21d0 [ 1462.405805][T15976] ? __pfx_io_submit_one+0x10/0x10 [ 1462.405855][T15976] ? __pfx_get_signal+0x10/0x10 [ 1462.405890][T15976] ? lock_acquire+0x1d1/0x380 [ 1462.405934][T15976] ? percpu_ref_put_many.constprop.0+0x23/0x2a0 [ 1462.405978][T15976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1462.406022][T15976] ? find_held_lock+0x2b/0x80 [ 1462.406064][T15976] arch_do_signal_or_restart+0x91/0x7e0 [ 1462.406125][T15976] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1462.406199][T15976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1462.406249][T15976] exit_to_user_mode_loop+0x139/0x700 [ 1462.406303][T15976] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1462.406345][T15976] ? rcu_is_watching+0x13/0xc0 [ 1462.406385][T15976] do_syscall_64+0x661/0x790 [ 1462.406437][T15976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.406474][T15976] RIP: 0033:0x7f63d1b9f559 [ 1462.406501][T15976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.406536][T15976] RSP: 002b:00007f63d2a0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1462.406570][T15976] RAX: 0000000000000001 RBX: 00007f63d1e25fa0 RCX: 00007f63d1b9f559 [ 1462.406594][T15976] RDX: 0000200000000600 RSI: 0000000000000001 RDI: 00007f63d29eb000 [ 1462.406617][T15976] RBP: 00007f63d1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1462.406640][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.406661][T15976] R13: 00007f63d1e26038 R14: 00007f63d1e25fa0 R15: 00007ffd9caa7ca8 [ 1462.406709][T15976] [ 1462.702471][T15989] tipc: Enabling of bearer rejected, failed to enable media [ 1462.720997][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1382'. [ 1462.894405][T15555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.906058][ T8311] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1463.052623][T15555] veth0_vlan: entered promiscuous mode [ 1463.074508][ T8311] usb 10-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1463.079016][ T8311] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.079078][ T8311] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.079124][ T8311] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.079163][ T8311] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1463.079227][ T8311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.094424][ T8311] usb 10-1: config 0 descriptor?? [ 1463.152429][T15555] veth1_vlan: entered promiscuous mode [ 1463.256892][T15555] veth0_macvtap: entered promiscuous mode [ 1463.299192][T15555] veth1_macvtap: entered promiscuous mode [ 1463.356977][ T8311] usbhid 10-1:0.0: can't add hid device: -71 [ 1463.357111][ T8311] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1463.387537][ T8311] usb 10-1: USB disconnect, device number 25 [ 1463.493889][T15555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1463.564102][T15555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.627889][T14808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.634567][ T7489] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.636687][T11111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.636756][T11111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.096838][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.096871][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.191742][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.191781][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.340421][T16020] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1466.867276][T15610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.205915][T15610] veth0_vlan: entered promiscuous mode [ 1467.280505][T15610] veth1_vlan: entered promiscuous mode [ 1467.973945][T15610] veth0_macvtap: entered promiscuous mode [ 1468.390710][T16040] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1468.390741][T16040] block device autoloading is deprecated and will be removed. [ 1468.490790][T15610] veth1_macvtap: entered promiscuous mode [ 1468.657459][T16053] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 1468.657493][T16053] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1394'. [ 1468.714677][T15610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1468.778160][T15610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.017875][ T5818] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1469.087494][T10906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.087550][T10906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.087608][T10906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.087655][T10906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.095359][T16055] FAULT_INJECTION: forcing a failure. [ 1469.095359][T16055] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.095407][T16055] CPU: 0 UID: 0 PID: 16055 Comm: syz.4.1395 Tainted: G L syzkaller #0 PREEMPT(full) [ 1469.095460][T16055] Tainted: [L]=SOFTLOCKUP [ 1469.095475][T16055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1469.095498][T16055] Call Trace: [ 1469.095511][T16055] [ 1469.095526][T16055] dump_stack_lvl+0x100/0x190 [ 1469.095590][T16055] should_fail_ex.cold+0x5/0xa [ 1469.095646][T16055] should_failslab+0xc2/0x120 [ 1469.095702][T16055] __kmalloc_noprof+0xfc/0x840 [ 1469.095747][T16055] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.095795][T16055] ? lsm_blob_alloc+0x68/0x90 [ 1469.095843][T16055] lsm_blob_alloc+0x68/0x90 [ 1469.095880][T16055] security_prepare_creds+0x2d/0x290 [ 1469.095943][T16055] prepare_creds+0x5d6/0x950 [ 1469.095992][T16055] restrict_one_thread_callback+0x17a/0xb70 [ 1469.096054][T16055] ? _raw_spin_unlock_irq+0x23/0x50 [ 1469.096103][T16055] task_work_run+0x150/0x240 [ 1469.096143][T16055] ? __pfx_task_work_run+0x10/0x10 [ 1469.096186][T16055] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.096247][T16055] get_signal+0x1bd/0x21d0 [ 1469.096299][T16055] ? __pfx_io_submit_one+0x10/0x10 [ 1469.096353][T16055] ? __pfx_get_signal+0x10/0x10 [ 1469.096392][T16055] ? lock_acquire+0x1d1/0x380 [ 1469.096441][T16055] ? percpu_ref_put_many.constprop.0+0x23/0x2a0 [ 1469.096489][T16055] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.096534][T16055] ? find_held_lock+0x2b/0x80 [ 1469.096579][T16055] arch_do_signal_or_restart+0x91/0x7e0 [ 1469.096645][T16055] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1469.096726][T16055] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.096782][T16055] exit_to_user_mode_loop+0x139/0x700 [ 1469.096840][T16055] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1469.096886][T16055] ? rcu_is_watching+0x13/0xc0 [ 1469.096930][T16055] do_syscall_64+0x661/0x790 [ 1469.096986][T16055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.097025][T16055] RIP: 0033:0x7f771c59f559 [ 1469.097061][T16055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1469.097098][T16055] RSP: 002b:00007f771d4bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1469.097135][T16055] RAX: 0000000000000001 RBX: 00007f771c825fa0 RCX: 00007f771c59f559 [ 1469.097161][T16055] RDX: 0000200000000600 RSI: 0000000000000001 RDI: 00007f771d49b000 [ 1469.097186][T16055] RBP: 00007f771c636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1469.097210][T16055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1469.097234][T16055] R13: 00007f771c826038 R14: 00007f771c825fa0 R15: 00007fff7fd86d68 [ 1469.097291][T16055] [ 1470.828538][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1470.828601][ T5818] usb 2-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 1470.845137][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.859245][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.859286][ T5818] usb 2-1: Product: syz [ 1470.859312][ T5818] usb 2-1: Manufacturer: syz [ 1470.859339][ T5818] usb 2-1: SerialNumber: syz [ 1471.192719][T16053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.232202][T16053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.443728][ T3295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.443762][ T3295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.555912][T11111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.555944][T11111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.924022][ T5818] usb 2-1: unknown interface protocol 0x1, assuming v1 [ 1473.924062][ T5818] usb 2-1: cannot find UAC_HEADER [ 1474.364184][ T5818] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1474.429807][ T5818] usb 2-1: USB disconnect, device number 36 [ 1476.490181][T15872] udevd[15872]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1476.493641][T16089] FAULT_INJECTION: forcing a failure. [ 1476.493641][T16089] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1476.493690][T16089] CPU: 0 UID: 0 PID: 16089 Comm: syz.0.1262 Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.493752][T16089] Tainted: [L]=SOFTLOCKUP [ 1476.493768][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1476.493791][T16089] Call Trace: [ 1476.493804][T16089] [ 1476.493819][T16089] dump_stack_lvl+0x100/0x190 [ 1476.493870][T16089] should_fail_ex.cold+0x5/0xa [ 1476.493914][T16089] get_futex_key+0x1c9/0x13e0 [ 1476.493967][T16089] ? __pfx_get_futex_key+0x10/0x10 [ 1476.494014][T16089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.494049][T16089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.494084][T16089] ? _parse_integer_limit+0x1ac/0x220 [ 1476.494124][T16089] futex_wait_setup+0x91/0x540 [ 1476.494173][T16089] __futex_wait+0x19f/0x360 [ 1476.494215][T16089] ? __pfx___futex_wait+0x10/0x10 [ 1476.494253][T16089] ? futex_hash+0x311/0x400 [ 1476.494303][T16089] ? __pfx_futex_wake_mark+0x10/0x10 [ 1476.494347][T16089] ? __pfx_futex_hash+0x10/0x10 [ 1476.494391][T16089] ? __pfx_get_futex_key+0x10/0x10 [ 1476.494437][T16089] ? get_pid_task+0xfc/0x250 [ 1476.494481][T16089] ? get_pid_task+0xfc/0x250 [ 1476.494527][T16089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.494573][T16089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.494627][T16089] futex_wait+0xe6/0x370 [ 1476.494677][T16089] ? __pfx_futex_wait+0x10/0x10 [ 1476.494724][T16089] ? find_held_lock+0x2b/0x80 [ 1476.494780][T16089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.494826][T16089] ? rcu_read_lock_any_held+0x6a/0x90 [ 1476.494867][T16089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.494916][T16089] ? find_held_lock+0x2b/0x80 [ 1476.494953][T16089] ? ksys_write+0x190/0x250 [ 1476.495003][T16089] ? ksys_write+0x190/0x250 [ 1476.495058][T16089] do_futex+0x265/0x440 [ 1476.495100][T16089] ? __pfx_do_futex+0x10/0x10 [ 1476.495142][T16089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1476.495204][T16089] __x64_sys_futex+0x34f/0x4d0 [ 1476.495247][T16089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.495293][T16089] ? fput+0x7c/0x100 [ 1476.495326][T16089] ? __pfx___x64_sys_futex+0x10/0x10 [ 1476.495365][T16089] ? ksys_write+0x1ac/0x250 [ 1476.495414][T16089] ? __pfx_ksys_write+0x10/0x10 [ 1476.495467][T16089] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.495522][T16089] do_syscall_64+0x123/0x790 [ 1476.495576][T16089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.495615][T16089] RIP: 0033:0x7f063999f559 [ 1476.495646][T16089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.495683][T16089] RSP: 002b:00007f063a80b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1476.495721][T16089] RAX: ffffffffffffffda RBX: 00007f0639c25fa8 RCX: 00007f063999f559 [ 1476.495754][T16089] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0639c25fa8 [ 1476.495780][T16089] RBP: 00007f0639c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.495805][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1476.495830][T16089] R13: 00007f0639c26038 R14: 00007ffed2ada0d0 R15: 00007ffed2ada1b8 [ 1476.495882][T16089] [ 1476.512357][T16086] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1482.155965][T16149] FAULT_INJECTION: forcing a failure. [ 1482.155965][T16149] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1482.156018][T16149] CPU: 1 UID: 0 PID: 16149 Comm: syz.9.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 1482.156073][T16149] Tainted: [L]=SOFTLOCKUP [ 1482.156088][T16149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1482.156112][T16149] Call Trace: [ 1482.156125][T16149] [ 1482.156141][T16149] dump_stack_lvl+0x100/0x190 [ 1482.156208][T16149] should_fail_ex.cold+0x5/0xa [ 1482.156266][T16149] get_futex_key+0x1c9/0x13e0 [ 1482.156337][T16149] ? __pfx_get_futex_key+0x10/0x10 [ 1482.156397][T16149] ? wakeup_preempt_fair+0x4fc/0xf60 [ 1482.156470][T16149] futex_wait_setup+0x91/0x540 [ 1482.156540][T16149] __futex_wait+0x19f/0x360 [ 1482.156596][T16149] ? __pfx___futex_wait+0x10/0x10 [ 1482.156644][T16149] ? __pfx_try_to_wake_up+0x10/0x10 [ 1482.156695][T16149] ? futex_hash+0x311/0x400 [ 1482.156770][T16149] ? __pfx_futex_wake_mark+0x10/0x10 [ 1482.156828][T16149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.156876][T16149] ? find_held_lock+0x2b/0x80 [ 1482.156913][T16149] ? futex_wake+0x4ea/0x5e0 [ 1482.156962][T16149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.157012][T16149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.157067][T16149] futex_wait+0xe6/0x370 [ 1482.157118][T16149] ? __pfx_futex_wait+0x10/0x10 [ 1482.157179][T16149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.157227][T16149] ? rcu_read_lock_any_held+0x6a/0x90 [ 1482.157267][T16149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.157315][T16149] ? find_held_lock+0x2b/0x80 [ 1482.157345][T16149] ? ksys_write+0x190/0x250 [ 1482.157383][T16149] ? ksys_write+0x190/0x250 [ 1482.157425][T16149] do_futex+0x265/0x440 [ 1482.157458][T16149] ? __pfx_do_futex+0x10/0x10 [ 1482.157491][T16149] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1482.157538][T16149] __x64_sys_futex+0x34f/0x4d0 [ 1482.157571][T16149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.157606][T16149] ? fput+0x7c/0x100 [ 1482.157632][T16149] ? __pfx___x64_sys_futex+0x10/0x10 [ 1482.157662][T16149] ? ksys_write+0x1ac/0x250 [ 1482.157701][T16149] ? __pfx_ksys_write+0x10/0x10 [ 1482.157743][T16149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.157790][T16149] do_syscall_64+0x123/0x790 [ 1482.157832][T16149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.157862][T16149] RIP: 0033:0x7f1fde39f559 [ 1482.157886][T16149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.157915][T16149] RSP: 002b:00007f1fdf2cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1482.157944][T16149] RAX: ffffffffffffffda RBX: 00007f1fde625fa8 RCX: 00007f1fde39f559 [ 1482.157964][T16149] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1fde625fa8 [ 1482.157983][T16149] RBP: 00007f1fde625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1482.158001][T16149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1482.158020][T16149] R13: 00007f1fde626038 R14: 00007ffe5ddcf310 R15: 00007ffe5ddcf3f8 [ 1482.158061][T16149] [ 1484.019848][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.019910][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.135687][ T5650] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1486.155325][ T5818] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1486.266824][T16187] syzkaller0: entered promiscuous mode [ 1486.266860][T16187] syzkaller0: entered allmulticast mode [ 1486.296368][ T5650] usb 4-1: New USB device found: idVendor=054c, idProduct=024b, bcdDevice=0.00 [ 1486.298212][ T5650] usb 4-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1486.298256][ T5650] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1486.298295][ T5650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.348744][ T5650] usb 4-1: config 0 descriptor?? [ 1486.379523][ T5818] usb 9-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1486.381390][ T5818] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.381488][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.416402][ T5818] usb 9-1: config 0 descriptor?? [ 1486.434021][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 1486.844789][ T5650] sony 0003:054C:024B.0006: unbalanced collection at end of report description [ 1486.861644][ T5650] sony 0003:054C:024B.0006: parse failed [ 1486.861810][ T5650] sony 0003:054C:024B.0006: probe with driver sony failed with error -22 [ 1486.881659][ T5818] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1486.894182][ T5818] pwc: recv_control_msg error -32 req 02 val 2700 [ 1486.925817][ T5818] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1486.944673][ T5818] pwc: recv_control_msg error -32 req 04 val 1000 [ 1486.966868][ T5818] pwc: recv_control_msg error -32 req 04 val 1300 [ 1486.970353][ T5818] pwc: recv_control_msg error -32 req 04 val 1400 [ 1487.001643][ T5818] pwc: recv_control_msg error -32 req 02 val 2000 [ 1487.052566][ T8311] usb 4-1: USB disconnect, device number 3 [ 1487.204112][ T5818] pwc: recv_control_msg error -32 req 04 val 1500 [ 1487.225131][ T5818] pwc: recv_control_msg error -32 req 02 val 2500 [ 1487.256235][ T5818] pwc: recv_control_msg error -32 req 02 val 2400 [ 1487.262882][ T5818] pwc: recv_control_msg error -32 req 02 val 2600 [ 1487.263674][ T5818] pwc: recv_control_msg error -32 req 02 val 2900 [ 1487.507199][ T5818] pwc: recv_control_msg error -71 req 04 val 1100 [ 1487.509452][ T5818] pwc: recv_control_msg error -71 req 04 val 1200 [ 1487.539452][ T5818] pwc: Registered as video103. [ 1487.552050][ T5818] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input40 [ 1487.577772][ T5818] usb 9-1: USB disconnect, device number 5 [ 1488.098704][T16212] FAULT_INJECTION: forcing a failure. [ 1488.098704][T16212] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1488.098746][T16212] CPU: 1 UID: 0 PID: 16212 Comm: syz.3.1435 Tainted: G L syzkaller #0 PREEMPT(full) [ 1488.098786][T16212] Tainted: [L]=SOFTLOCKUP [ 1488.098797][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1488.098815][T16212] Call Trace: [ 1488.098825][T16212] [ 1488.098837][T16212] dump_stack_lvl+0x100/0x190 [ 1488.098888][T16212] should_fail_ex.cold+0x5/0xa [ 1488.098932][T16212] get_futex_key+0x1c9/0x13e0 [ 1488.098984][T16212] ? __pfx_get_futex_key+0x10/0x10 [ 1488.099030][T16212] ? wakeup_preempt_fair+0x4fc/0xf60 [ 1488.099084][T16212] futex_wait_setup+0x91/0x540 [ 1488.099134][T16212] __futex_wait+0x19f/0x360 [ 1488.099175][T16212] ? __pfx___futex_wait+0x10/0x10 [ 1488.099211][T16212] ? __pfx_try_to_wake_up+0x10/0x10 [ 1488.099255][T16212] ? futex_hash+0x311/0x400 [ 1488.099306][T16212] ? __pfx_futex_wake_mark+0x10/0x10 [ 1488.099349][T16212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1488.099385][T16212] ? find_held_lock+0x2b/0x80 [ 1488.099412][T16212] ? futex_wake+0x4ea/0x5e0 [ 1488.099449][T16212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1488.099486][T16212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1488.099528][T16212] futex_wait+0xe6/0x370 [ 1488.099566][T16212] ? __pfx_futex_wait+0x10/0x10 [ 1488.099612][T16212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1488.099647][T16212] ? rcu_read_lock_any_held+0x6a/0x90 [ 1488.099678][T16212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1488.099713][T16212] ? find_held_lock+0x2b/0x80 [ 1488.099741][T16212] ? ksys_write+0x190/0x250 [ 1488.099780][T16212] ? ksys_write+0x190/0x250 [ 1488.099822][T16212] do_futex+0x265/0x440 [ 1488.099855][T16212] ? __pfx_do_futex+0x10/0x10 [ 1488.099887][T16212] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1488.099935][T16212] __x64_sys_futex+0x34f/0x4d0 [ 1488.099969][T16212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1488.100004][T16212] ? fput+0x7c/0x100 [ 1488.100030][T16212] ? __pfx___x64_sys_futex+0x10/0x10 [ 1488.100060][T16212] ? ksys_write+0x1ac/0x250 [ 1488.100098][T16212] ? __pfx_ksys_write+0x10/0x10 [ 1488.100143][T16212] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1488.100185][T16212] do_syscall_64+0x123/0x790 [ 1488.100227][T16212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.100262][T16212] RIP: 0033:0x7fae9559f559 [ 1488.100286][T16212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.100315][T16212] RSP: 002b:00007fae9643d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1488.100343][T16212] RAX: ffffffffffffffda RBX: 00007fae95825fa8 RCX: 00007fae9559f559 [ 1488.100364][T16212] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fae95825fa8 [ 1488.100383][T16212] RBP: 00007fae95825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.100401][T16212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.100420][T16212] R13: 00007fae95826038 R14: 00007ffe080604b0 R15: 00007ffe08060598 [ 1488.100460][T16212] [ 1488.586522][ T5818] libceph: connect (1)[c::]:6789 error -97 [ 1488.587512][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 1488.965307][ T5647] libceph: connect (1)[c::]:6789 error -97 [ 1489.046276][ T5647] libceph: mon0 (1)[c::]:6789 connect error [ 1489.212514][T16215] ceph: No mds server is up or the cluster is laggy [ 1498.267710][ T5818] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1498.303051][T11749] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1498.432519][ T5818] usb 10-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1498.452730][ T5818] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.452803][ T5818] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.475260][T11749] usb 9-1: Using ep0 maxpacket: 16 [ 1498.489433][T11749] usb 9-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1498.494025][T11749] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.494065][T11749] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.494095][T11749] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1498.494144][T11749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.601104][ T5818] usb 10-1: config 0 descriptor?? [ 1498.609469][T11749] usb 9-1: config 0 descriptor?? [ 1498.622761][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 1499.071668][T11749] usbhid 9-1:0.0: can't add hid device: -71 [ 1499.071809][T11749] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1499.125511][T11749] usb 9-1: USB disconnect, device number 6 [ 1499.155133][ T5647] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1499.213503][ T5818] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1499.214230][ T5818] pwc: recv_control_msg error -32 req 02 val 2700 [ 1499.252748][ T5818] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1499.254137][ T5818] pwc: recv_control_msg error -32 req 04 val 1000 [ 1499.274247][ T5818] pwc: recv_control_msg error -32 req 04 val 1300 [ 1499.286998][ T5818] pwc: recv_control_msg error -32 req 04 val 1400 [ 1499.291409][ T5818] pwc: recv_control_msg error -32 req 02 val 2000 [ 1499.311469][ T5647] usb 2-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1499.327605][ T5647] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1499.327647][ T5647] usb 2-1: Product: syz [ 1499.327705][ T5647] usb 2-1: Manufacturer: syz [ 1499.327732][ T5647] usb 2-1: SerialNumber: syz [ 1499.363197][ T5647] usb 2-1: config 0 descriptor?? [ 1499.518681][ T5818] pwc: recv_control_msg error -32 req 04 val 1500 [ 1499.545283][ T5818] pwc: recv_control_msg error -32 req 02 val 2500 [ 1499.569089][ T5818] pwc: recv_control_msg error -32 req 02 val 2400 [ 1499.574099][ T5818] pwc: recv_control_msg error -32 req 02 val 2600 [ 1499.593435][ T5818] pwc: recv_control_msg error -32 req 02 val 2900 [ 1499.724072][T16284] FAULT_INJECTION: forcing a failure. [ 1499.724072][T16284] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.724125][T16284] CPU: 0 UID: 0 PID: 16284 Comm: syz.4.1452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.724179][T16284] Tainted: [L]=SOFTLOCKUP [ 1499.724194][T16284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1499.724218][T16284] Call Trace: [ 1499.724231][T16284] [ 1499.724247][T16284] dump_stack_lvl+0x100/0x190 [ 1499.724311][T16284] should_fail_ex.cold+0x5/0xa [ 1499.724368][T16284] should_failslab+0xc2/0x120 [ 1499.724426][T16284] __kmalloc_cache_noprof+0x91/0x6d0 [ 1499.724468][T16284] ? landlock_merge_ruleset+0x232/0xdd0 [ 1499.724518][T16284] landlock_merge_ruleset+0x232/0xdd0 [ 1499.724568][T16284] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 1499.724634][T16284] do_syscall_64+0x123/0x790 [ 1499.724691][T16284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.724733][T16284] RIP: 0033:0x7f771c59f559 [ 1499.724771][T16284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.724807][T16284] RSP: 002b:00007f771d4bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1499.724845][T16284] RAX: ffffffffffffffda RBX: 00007f771c825fa0 RCX: 00007f771c59f559 [ 1499.724872][T16284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1499.724900][T16284] RBP: 00007f771c636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1499.724925][T16284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.724950][T16284] R13: 00007f771c826038 R14: 00007f771c825fa0 R15: 00007fff7fd86d68 [ 1499.725004][T16284] [ 1499.927776][ T5818] pwc: recv_control_msg error -71 req 04 val 1100 [ 1499.929293][ T5818] pwc: recv_control_msg error -71 req 04 val 1200 [ 1499.932916][ T5818] pwc: Registered as video103. [ 1499.957474][ T5818] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input41 [ 1499.988395][ T5818] usb 10-1: USB disconnect, device number 26 [ 1500.148687][T15605] usb 2-1: USB disconnect, device number 37 [ 1503.017641][T16304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1503.044369][T16304] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1504.053527][T16311] nbd9: detected capacity change from 0 to 63 [ 1504.159580][T16311] block nbd9: NBD_DISCONNECT [ 1504.165985][T16311] block nbd9: Disconnected due to user request. [ 1504.166039][T16311] block nbd9: shutting down sockets [ 1504.210997][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.211113][ T1949] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1504.213734][ T1949] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1504.213789][ T1949] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1504.220879][ T1949] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1504.272899][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.273015][ T1949] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1504.273066][ T1949] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1504.273111][ T1949] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1504.273240][ T1949] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1504.280593][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.280655][ T1949] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1504.280703][ T1949] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1504.298863][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.299822][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.300376][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.301198][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.301864][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.302101][T16278] ldm_validate_partition_table(): Disk read failed. [ 1504.302527][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.303119][ T1949] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1504.309653][T16278] Dev nbd9: unable to read RDB block 0 [ 1504.348746][T16278] nbd9: unable to read partition table [ 1505.297601][ T5656] Bluetooth: hci4: command 0x1003 tx timeout [ 1505.333622][T15663] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1506.930165][T16278] ldm_validate_partition_table(): Disk read failed. [ 1506.933349][T16278] Dev nbd9: unable to read RDB block 0 [ 1506.941505][T16278] nbd9: unable to read partition table [ 1508.642953][T16340] ceph: No mds server is up or the cluster is laggy [ 1508.688430][ T3212] libceph: connect (1)[c::]:6789 error -101 [ 1508.721920][ T3212] libceph: mon0 (1)[c::]:6789 connect error [ 1508.988684][ T3212] libceph: connect (1)[c::]:6789 error -101 [ 1508.989520][ T3212] libceph: mon0 (1)[c::]:6789 connect error [ 1509.495717][ T3212] libceph: connect (1)[c::]:6789 error -101 [ 1509.495934][ T3212] libceph: mon0 (1)[c::]:6789 connect error [ 1513.172928][T16362] FAULT_INJECTION: forcing a failure. [ 1513.172928][T16362] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.172969][T16362] CPU: 1 UID: 0 PID: 16362 Comm: syz.9.1465 Tainted: G L syzkaller #0 PREEMPT(full) [ 1513.173013][T16362] Tainted: [L]=SOFTLOCKUP [ 1513.173025][T16362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1513.173045][T16362] Call Trace: [ 1513.173055][T16362] [ 1513.173068][T16362] dump_stack_lvl+0x100/0x190 [ 1513.173119][T16362] should_fail_ex.cold+0x5/0xa [ 1513.173164][T16362] should_failslab+0xc2/0x120 [ 1513.173209][T16362] __kmalloc_cache_noprof+0x91/0x6d0 [ 1513.173250][T16362] ? landlock_merge_ruleset+0x232/0xdd0 [ 1513.173291][T16362] landlock_merge_ruleset+0x232/0xdd0 [ 1513.173330][T16362] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 1513.173383][T16362] do_syscall_64+0x123/0x790 [ 1513.173427][T16362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.173460][T16362] RIP: 0033:0x7f1fde39f559 [ 1513.173484][T16362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1513.173516][T16362] RSP: 002b:00007f1fdf2cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1513.173547][T16362] RAX: ffffffffffffffda RBX: 00007f1fde625fa0 RCX: 00007f1fde39f559 [ 1513.173569][T16362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1513.173590][T16362] RBP: 00007f1fde436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1513.173610][T16362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1513.173631][T16362] R13: 00007f1fde626038 R14: 00007f1fde625fa0 R15: 00007ffe5ddcf3f8 [ 1513.173674][T16362] [ 1517.401014][ T5656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1517.414136][ T5656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1517.423269][ T5656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1517.435297][ T5656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1517.436112][ T5656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1517.506576][T15605] libceph: connect (1)[c::]:6789 error -97 [ 1517.506747][T15605] libceph: mon0 (1)[c::]:6789 connect error [ 1517.792042][T16383] ceph: No mds server is up or the cluster is laggy [ 1519.473938][ T6004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.535156][T15663] Bluetooth: hci4: command tx timeout [ 1522.081712][ T5656] Bluetooth: hci4: command tx timeout [ 1523.111782][ T6004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.613455][ T6004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.522834][T15663] Bluetooth: hci4: command tx timeout [ 1526.660011][ T5656] Bluetooth: hci4: command tx timeout [ 1528.467090][T16433] syz.4.1477 (16433) used greatest stack depth: 18952 bytes left [ 1528.921739][ T6004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.715922][T16454] nbd8: detected capacity change from 0 to 63 [ 1530.732168][T16454] block nbd8: NBD_DISCONNECT [ 1530.732606][T16454] block nbd8: Disconnected due to user request. [ 1530.732721][T16454] block nbd8: shutting down sockets [ 1531.108537][T16386] rxe_eth0 speed is unknown, defaulting to 1000 [ 1532.454249][T15663] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1532.464868][T15663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1532.472648][T15663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1532.501685][T15663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1532.502290][T15663] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1532.862959][ T5656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1532.875399][ T5656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1532.877773][ T5656] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1532.882722][ T5656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1532.909271][ T5656] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1533.184411][ T6004] bridge_slave_1: left allmulticast mode [ 1533.184449][ T6004] bridge_slave_1: left promiscuous mode [ 1533.184683][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.282495][ T6004] bridge_slave_0: left allmulticast mode [ 1533.282532][ T6004] bridge_slave_0: left promiscuous mode [ 1533.282955][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.575710][T15663] Bluetooth: hci1: command tx timeout [ 1534.627310][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1534.670967][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1534.716539][ T6004] bond0 (unregistering): Released all slaves [ 1534.983115][T15663] Bluetooth: hci7: command tx timeout [ 1536.655389][T15663] Bluetooth: hci1: command tx timeout [ 1537.055622][T15663] Bluetooth: hci7: command tx timeout [ 1537.637605][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 1538.744193][T15663] Bluetooth: hci1: command tx timeout [ 1539.135320][T15663] Bluetooth: hci7: command tx timeout [ 1542.125787][T15663] Bluetooth: hci1: command tx timeout [ 1542.125832][T15663] Bluetooth: hci7: command tx timeout [ 1544.655806][T16464] rxe_eth0 speed is unknown, defaulting to 1000 [ 1544.720312][T15663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1544.737685][T15663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1544.751141][T15663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1544.764591][T15663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1544.774492][T15663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1545.458940][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.459019][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.572747][ T6004] hsr_slave_0: left promiscuous mode [ 1545.594668][ T6004] hsr_slave_1: left promiscuous mode [ 1545.595871][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.595900][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.645536][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.645570][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.711576][ T6004] veth1_macvtap: left promiscuous mode [ 1545.711629][ T6004] veth0_macvtap: left promiscuous mode [ 1545.711762][ T6004] veth1_vlan: left promiscuous mode [ 1545.711850][ T6004] veth0_vlan: left promiscuous mode [ 1546.895473][ T5656] Bluetooth: hci0: command tx timeout [ 1547.783666][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 1547.930240][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 1548.975348][ T5656] Bluetooth: hci0: command tx timeout [ 1549.293135][T16469] rxe_eth0 speed is unknown, defaulting to 1000 [ 1549.561047][T16386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.561714][T16386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.566886][T16386] bridge_slave_0: entered allmulticast mode [ 1549.578096][T16386] bridge_slave_0: entered promiscuous mode [ 1549.688160][T16386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.688290][T16386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.688468][T16386] bridge_slave_1: entered allmulticast mode [ 1549.717614][T16386] bridge_slave_1: entered promiscuous mode [ 1549.973866][ T100] Bluetooth: hci3: Frame reassembly failed (-84) [ 1549.985431][T16539] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1550.015250][T16386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.055153][T16386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.279487][T16386] team0: Port device team_slave_0 added [ 1550.304141][T16386] team0: Port device team_slave_1 added [ 1550.563814][T16386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.563841][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.564530][T16386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.700481][T16386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.700503][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.700539][T16386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.055033][T15663] Bluetooth: hci0: command tx timeout [ 1552.017071][T15663] Bluetooth: hci3: command 0x1003 tx timeout [ 1552.017575][ T5656] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1552.476284][ T6004] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.633378][T16386] hsr_slave_0: entered promiscuous mode [ 1552.634257][T16386] hsr_slave_1: entered promiscuous mode [ 1552.756910][ T6004] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.986016][T16524] rxe_eth0 speed is unknown, defaulting to 1000 [ 1553.065230][ T8311] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1553.135134][ T5656] Bluetooth: hci0: command tx timeout [ 1553.191001][ T6004] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.227900][ T8311] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 1553.229498][ T8311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.229567][ T8311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1553.229617][ T8311] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1553.229682][ T8311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.141232][ T8311] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 1556.141310][ T8311] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 1556.143230][ T8311] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 1556.143308][ T8311] ATM dev 0: poll status: error -71 [ 1556.143361][ T8311] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 1556.143386][ T8311] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d5efd00 submission failed (-8)! [ 1556.143669][ T8311] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d5ef400 submission failed (-8)! [ 1556.143705][ T8311] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d5eff00 submission failed (-8)! [ 1556.143738][ T8311] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d5efe00 submission failed (-8)! [ 1556.245482][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d5efe00 submission failed (-8)! [ 1556.326170][ T6004] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.348390][ T8311] usb 2-1: USB disconnect, device number 38 [ 1556.365043][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d5efe00 submission failed (-19)! [ 1559.070891][T16464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.071243][T16464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.071415][T16464] bridge_slave_0: entered allmulticast mode [ 1559.097025][T16464] bridge_slave_0: entered promiscuous mode [ 1559.209182][T16464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.209359][T16464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.209507][T16464] bridge_slave_1: entered allmulticast mode [ 1559.241039][T16464] bridge_slave_1: entered promiscuous mode [ 1560.204829][T16464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.367990][T16464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.154717][T16469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.154867][T16469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.156418][T16469] bridge_slave_0: entered allmulticast mode [ 1561.189346][T16469] bridge_slave_0: entered promiscuous mode [ 1561.323450][T16469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.323774][T16469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.323929][T16469] bridge_slave_1: entered allmulticast mode [ 1561.353395][T16469] bridge_slave_1: entered promiscuous mode [ 1561.556386][T16464] team0: Port device team_slave_0 added [ 1561.585888][T16464] team0: Port device team_slave_1 added [ 1561.733314][T16469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1562.034238][T16469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1562.226718][ T6004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.307866][T16464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.308377][T16464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.308494][T16464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.311940][T16464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.312256][T16464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.312305][T16464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.883182][T16469] team0: Port device team_slave_0 added [ 1563.020969][ T6004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.052836][T16469] team0: Port device team_slave_1 added [ 1563.397295][T16612] kAFS: No cell specified [ 1564.607681][T16612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1504'. [ 1564.881029][T16464] hsr_slave_0: entered promiscuous mode [ 1564.882339][T16464] hsr_slave_1: entered promiscuous mode [ 1564.883183][T16464] debugfs: 'hsr0' already exists in 'hsr' [ 1564.883212][T16464] Cannot create hsr debugfs directory [ 1565.002074][ T6004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.027259][T16469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.027290][T16469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.027337][T16469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.032031][T16469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.032050][T16469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.032085][T16469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.205012][ T5888] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1565.345162][ T5888] usb 5-1: device descriptor read/64, error -71 [ 1565.510990][ T6004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.595066][ T5888] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1565.731218][ T5888] usb 5-1: device descriptor read/64, error -71 [ 1565.836924][ T5888] usb usb5-port1: attempt power cycle [ 1565.977830][T16469] hsr_slave_0: entered promiscuous mode [ 1565.991334][T16469] hsr_slave_1: entered promiscuous mode [ 1565.992006][T16469] debugfs: 'hsr0' already exists in 'hsr' [ 1565.992036][T16469] Cannot create hsr debugfs directory [ 1566.170853][T16524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.170947][T16524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.171084][T16524] bridge_slave_0: entered allmulticast mode [ 1566.199536][T16524] bridge_slave_0: entered promiscuous mode [ 1566.205019][ T5888] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1566.225855][ T5888] usb 5-1: device descriptor read/8, error -71 [ 1566.350869][T16524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.351046][T16524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.351238][T16524] bridge_slave_1: entered allmulticast mode [ 1566.382185][T16524] bridge_slave_1: entered promiscuous mode [ 1566.465320][ T5888] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1566.482463][T16386] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1566.495312][ T5888] usb 5-1: device descriptor read/8, error -71 [ 1566.517762][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1566.521880][T16386] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1566.567867][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1566.606542][ T5888] usb usb5-port1: unable to enumerate USB device [ 1567.364555][T16386] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1567.458095][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1567.542149][T16524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.625459][T16386] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1567.643877][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1567.683616][T16524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.130880][T16524] team0: Port device team_slave_0 added [ 1568.478390][ T6004] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.536870][T16524] team0: Port device team_slave_1 added [ 1568.809759][ T6004] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.129709][T16524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.129737][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.129791][T16524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.413209][T16524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.413236][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.413284][T16524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.633075][ T6004] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.979594][ T6004] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.165630][T16524] hsr_slave_0: entered promiscuous mode [ 1570.170218][T16524] hsr_slave_1: entered promiscuous mode [ 1570.174202][T16524] debugfs: 'hsr0' already exists in 'hsr' [ 1570.174225][T16524] Cannot create hsr debugfs directory [ 1570.240720][T16678] IPVS: Unknown mcast interface: pim6reg [ 1571.082139][T16686] [ 1571.084516][T16686] ====================================================== [ 1571.091548][T16686] WARNING: possible circular locking dependency detected [ 1571.098596][T16686] syzkaller #0 Tainted: G L [ 1571.104688][T16686] ------------------------------------------------------ [ 1571.111728][T16686] syz.4.1513/16686 is trying to acquire lock: [ 1571.117814][T16686] ffffffff916b23a0 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 1571.126786][T16686] [ 1571.126786][T16686] but task is already holding lock: [ 1571.134169][T16686] ffff888034acc390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 1571.143234][T16686] [ 1571.143234][T16686] which lock already depends on the new lock. [ 1571.143234][T16686] [ 1571.153661][T16686] [ 1571.153661][T16686] the existing dependency chain (in reverse order) is: [ 1571.162700][T16686] [ 1571.162700][T16686] -> #2 (&gi->lock){+.+.}-{4:4}: [ 1571.169892][T16686] lock_acquire+0x1d1/0x380 [ 1571.174973][T16686] __mutex_lock+0x19f/0x1c10 [ 1571.180129][T16686] config_usb_cfg_link+0x57/0x3a0 [ 1571.185728][T16686] configfs_symlink+0x695/0x1340 [ 1571.191236][T16686] vfs_symlink+0x17b/0x4e0 [ 1571.196226][T16686] filename_symlinkat+0x2a6/0x560 [ 1571.201820][T16686] __x64_sys_symlinkat+0x9c/0xe0 [ 1571.207333][T16686] do_syscall_64+0x123/0x790 [ 1571.212490][T16686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.218938][T16686] [ 1571.218938][T16686] -> #1 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 1571.227701][T16686] lock_acquire+0x1d1/0x380 [ 1571.232786][T16686] down_write+0x86/0x1f0 [ 1571.237613][T16686] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1571.244105][T16686] usbg_make_tpg+0x251/0x610 [ 1571.249275][T16686] target_fabric_make_tpg+0xab/0x8c0 [ 1571.255137][T16686] configfs_mkdir+0x525/0xd40 [ 1571.260411][T16686] vfs_mkdir+0x367/0x850 [ 1571.265228][T16686] filename_mkdirat+0x48b/0x5e0 [ 1571.270647][T16686] __x64_sys_mkdirat+0x89/0xc0 [ 1571.275997][T16686] do_syscall_64+0x123/0x790 [ 1571.281163][T16686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.287613][T16686] [ 1571.287613][T16686] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 1571.295575][T16686] check_prev_add+0xeb/0xe60 [ 1571.300758][T16686] __lock_acquire+0x1528/0x1f40 [ 1571.306191][T16686] lock_acquire+0x1d1/0x380 [ 1571.311271][T16686] __mutex_lock+0x19f/0x1c10 [ 1571.316429][T16686] tcm_alloc+0x20/0x440 [ 1571.321157][T16686] usb_get_function+0x5e/0xd0 [ 1571.326404][T16686] config_usb_cfg_link+0x1ed/0x3a0 [ 1571.332104][T16686] configfs_symlink+0x695/0x1340 [ 1571.337604][T16686] vfs_symlink+0x17b/0x4e0 [ 1571.342595][T16686] filename_symlinkat+0x2a6/0x560 [ 1571.348183][T16686] __x64_sys_symlinkat+0x9c/0xe0 [ 1571.353679][T16686] do_syscall_64+0x123/0x790 [ 1571.358845][T16686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.365311][T16686] [ 1571.365311][T16686] other info that might help us debug this: [ 1571.365311][T16686] [ 1571.375563][T16686] Chain exists of: [ 1571.375563][T16686] tpg_instances_lock --> &sb->s_type->i_mutex_key#26 --> &gi->lock [ 1571.375563][T16686] [ 1571.389483][T16686] Possible unsafe locking scenario: [ 1571.389483][T16686] [ 1571.396954][T16686] CPU0 CPU1 [ 1571.402336][T16686] ---- ---- [ 1571.407719][T16686] lock(&gi->lock); [ 1571.411669][T16686] lock(&sb->s_type->i_mutex_key#26); [ 1571.419707][T16686] lock(&gi->lock); [ 1571.426160][T16686] lock(tpg_instances_lock); [ 1571.430877][T16686] [ 1571.430877][T16686] *** DEADLOCK *** [ 1571.430877][T16686] [ 1571.439036][T16686] locks held by syz.4.1513/16686: 3, last CPU#0: [ 1571.445370][T16686] #0: ffff88801f364460 (sb_writers#15){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1571.454933][T16686] #1: ffff8880672ed900 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 1571.465863][T16686] #2: ffff888034acc390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 1571.475318][T16686] [ 1571.475318][T16686] stack backtrace: [ 1571.481218][T16686] CPU: 0 UID: 0 PID: 16686 Comm: syz.4.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1571.492267][T16686] Tainted: [L]=SOFTLOCKUP [ 1571.496588][T16686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1571.506648][T16686] Call Trace: [ 1571.509926][T16686] [ 1571.512861][T16686] dump_stack_lvl+0x100/0x190 [ 1571.517611][T16686] print_circular_bug.cold+0x178/0x1be [ 1571.523102][T16686] check_noncircular+0x146/0x160 [ 1571.528053][T16686] ? lockdep_hardirqs_on+0x7d/0x110 [ 1571.533282][T16686] check_prev_add+0xeb/0xe60 [ 1571.537924][T16686] __lock_acquire+0x1528/0x1f40 [ 1571.542811][T16686] lock_acquire+0x1d1/0x380 [ 1571.547343][T16686] ? tcm_alloc+0x20/0x440 [ 1571.551721][T16686] ? __pfx___might_resched+0x10/0x10 [ 1571.557038][T16686] __mutex_lock+0x19f/0x1c10 [ 1571.561644][T16686] ? tcm_alloc+0x20/0x440 [ 1571.566004][T16686] ? tcm_alloc+0x20/0x440 [ 1571.570359][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.576025][T16686] ? __mutex_lock+0x8ef/0x1c10 [ 1571.580819][T16686] ? config_usb_cfg_link+0x57/0x3a0 [ 1571.586094][T16686] ? __pfx___mutex_lock+0x10/0x10 [ 1571.591173][T16686] ? tcm_alloc+0x20/0x440 [ 1571.595526][T16686] tcm_alloc+0x20/0x440 [ 1571.599715][T16686] usb_get_function+0x5e/0xd0 [ 1571.604423][T16686] config_usb_cfg_link+0x1ed/0x3a0 [ 1571.609573][T16686] ? mntput_no_expire+0xe8/0x220 [ 1571.614550][T16686] configfs_symlink+0x695/0x1340 [ 1571.619517][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.625169][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.630847][T16686] ? security_inode_permission+0xc4/0x280 [ 1571.636597][T16686] ? __pfx_configfs_symlink+0x10/0x10 [ 1571.642449][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.648114][T16686] vfs_symlink+0x17b/0x4e0 [ 1571.652561][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.658219][T16686] filename_symlinkat+0x2a6/0x560 [ 1571.663259][T16686] ? __pfx_filename_symlinkat+0x10/0x10 [ 1571.668827][T16686] ? strncpy_from_user+0x19d/0x2d0 [ 1571.673959][T16686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.679611][T16686] ? do_getname+0x191/0x390 [ 1571.684143][T16686] __x64_sys_symlinkat+0x9c/0xe0 [ 1571.689101][T16686] do_syscall_64+0x123/0x790 [ 1571.693707][T16686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.699619][T16686] RIP: 0033:0x7f771c59f559 [ 1571.704042][T16686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.723663][T16686] RSP: 002b:00007f771d49b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1571.732117][T16686] RAX: ffffffffffffffda RBX: 00007f771c826090 RCX: 00007f771c59f559 [ 1571.740103][T16686] RDX: 0000200000000400 RSI: ffffffffffffff9c RDI: 00002000000003c0 [ 1571.748087][T16686] RBP: 00007f771c636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1571.756069][T16686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1571.764045][T16686] R13: 00007f771c826128 R14: 00007f771c826090 R15: 00007fff7fd86d68 [ 1571.772037][T16686] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1572.888275][ T6004] bridge_slave_1: left allmulticast mode [ 1572.888303][ T6004] bridge_slave_1: left promiscuous mode [ 1572.888446][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.058819][ T6004] bridge_slave_0: left allmulticast mode [ 1573.058847][ T6004] bridge_slave_0: left promiscuous mode [ 1573.058983][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.315589][ T6004] bridge_slave_1: left allmulticast mode [ 1573.315626][ T6004] bridge_slave_1: left promiscuous mode [ 1573.315799][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.366863][ T6004] bridge_slave_0: left allmulticast mode [ 1573.366897][ T6004] bridge_slave_0: left promiscuous mode [ 1573.367053][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.562879][ T6004] bridge_slave_1: left allmulticast mode [ 1573.562916][ T6004] bridge_slave_1: left promiscuous mode [ 1573.563089][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.602111][ T6004] bridge_slave_0: left allmulticast mode [ 1573.602142][ T6004] bridge_slave_0: left promiscuous mode [ 1573.602292][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.191460][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.214472][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.226993][ T6004] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1574.228443][ T6004] bond0 (unregistering): Released all slaves [ 1574.301618][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.303130][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.304114][ T6004] bond0 (unregistering): Released all slaves [ 1574.364503][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.378767][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.379774][ T6004] bond0 (unregistering): Released all slaves [ 1575.879540][ T6004] hsr_slave_0: left promiscuous mode [ 1575.880434][ T6004] hsr_slave_1: left promiscuous mode [ 1575.880926][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.880947][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.881644][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.881669][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.939437][ T6004] hsr_slave_0: left promiscuous mode [ 1575.939904][ T6004] hsr_slave_1: left promiscuous mode [ 1575.940615][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.940637][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.941627][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.941653][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.998958][ T6004] hsr_slave_0: left promiscuous mode [ 1576.001872][ T6004] hsr_slave_1: left promiscuous mode [ 1576.002675][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1576.002703][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1576.004206][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1576.004489][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.060904][ T6004] veth1_macvtap: left promiscuous mode [ 1576.060937][ T6004] veth0_macvtap: left promiscuous mode [ 1576.061002][ T6004] veth1_vlan: left promiscuous mode [ 1576.061048][ T6004] veth0_vlan: left promiscuous mode [ 1576.088629][ T6004] veth1_macvtap: left promiscuous mode [ 1576.088669][ T6004] veth0_macvtap: left promiscuous mode [ 1576.088758][ T6004] veth1_vlan: left promiscuous mode [ 1576.088818][ T6004] veth0_vlan: left promiscuous mode [ 1576.089900][ T6004] veth1_macvtap: left promiscuous mode [ 1576.089928][ T6004] veth0_macvtap: left promiscuous mode [ 1576.090013][ T6004] veth1_vlan: left promiscuous mode [ 1576.090061][ T6004] veth0_vlan: left promiscuous mode [ 1576.628922][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 1576.661136][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 1576.850302][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 1576.864869][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 1577.067390][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 1577.073707][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 1578.132769][ T6004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.192398][ T6004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.234757][ T6004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.270785][ T6004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.371997][ T6004] bridge_slave_1: left allmulticast mode [ 1578.372034][ T6004] bridge_slave_1: left promiscuous mode [ 1578.372191][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.374767][ T6004] bridge_slave_0: left allmulticast mode [ 1578.374796][ T6004] bridge_slave_0: left promiscuous mode [ 1578.405682][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.418464][ T6004] bridge_slave_1: left allmulticast mode [ 1578.419745][ T6004] bridge_slave_1: left promiscuous mode [ 1578.419898][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.421255][ T6004] bridge_slave_0: left allmulticast mode [ 1578.421282][ T6004] bridge_slave_0: left promiscuous mode [ 1578.421425][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.428885][ T6004] bridge_slave_1: left allmulticast mode [ 1578.428914][ T6004] bridge_slave_1: left promiscuous mode [ 1578.429061][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.442160][ T6004] bridge_slave_0: left allmulticast mode [ 1578.442190][ T6004] bridge_slave_0: left promiscuous mode [ 1578.442339][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.471894][ T6004] bridge_slave_1: left allmulticast mode [ 1578.471927][ T6004] bridge_slave_1: left promiscuous mode [ 1578.472083][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.480875][ T6004] bridge_slave_0: left allmulticast mode [ 1578.480903][ T6004] bridge_slave_0: left promiscuous mode [ 1578.481045][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.516357][ T6004] bridge_slave_1: left allmulticast mode [ 1578.516390][ T6004] bridge_slave_1: left promiscuous mode [ 1578.516567][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.530449][ T6004] bridge_slave_0: left allmulticast mode [ 1578.530478][ T6004] bridge_slave_0: left promiscuous mode [ 1578.530627][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.644020][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.654311][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.656127][ T6004] bond0 (unregistering): Released all slaves [ 1578.713022][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.715853][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.734762][ T6004] bond0 (unregistering): Released all slaves [ 1578.781519][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.800196][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.801359][ T6004] bond0 (unregistering): Released all slaves [ 1578.870061][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.870342][ T6004] bond_slave_0: left promiscuous mode [ 1578.872260][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.872669][ T6004] bond_slave_1: left promiscuous mode [ 1578.873687][ T6004] bond0 (unregistering): Released all slaves [ 1578.951485][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.971221][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.972406][ T6004] bond0 (unregistering): Released all slaves [ 1579.771439][ T6004] hsr_slave_0: left promiscuous mode [ 1579.771927][ T6004] hsr_slave_1: left promiscuous mode [ 1579.772507][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.772978][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.802064][ T6004] hsr_slave_0: left promiscuous mode [ 1579.803115][ T6004] hsr_slave_1: left promiscuous mode [ 1579.803682][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.804161][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.840905][ T6004] hsr_slave_0: left promiscuous mode [ 1579.841903][ T6004] hsr_slave_1: left promiscuous mode [ 1579.842510][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.843044][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.855877][ T6004] hsr_slave_0: left promiscuous mode [ 1579.863022][ T6004] hsr_slave_1: left promiscuous mode [ 1579.863631][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.863657][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.870960][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.870985][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.888680][ T6004] hsr_slave_0: left promiscuous mode [ 1579.895808][ T6004] hsr_slave_1: left promiscuous mode [ 1579.896408][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.903627][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.928491][ T6004] veth1_macvtap: left promiscuous mode [ 1579.928534][ T6004] veth0_macvtap: left promiscuous mode [ 1579.928632][ T6004] veth1_vlan: left promiscuous mode [ 1579.928696][ T6004] veth0_vlan: left promiscuous mode [ 1580.118118][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 1580.132551][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 1580.304218][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 1580.316758][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 1580.493244][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 1580.508827][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 1580.705804][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 1580.712250][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 1580.873992][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 1580.890979][ T6004] team0 (unregistering): Port device team_slave_0 removed