last executing test programs: 13m53.504948108s ago: executing program 4 (id=119): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x0, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x4, 0x100000, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) write$sysctl(r0, &(0x7f0000000040)='1\x00', 0x1) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x80000) accept4$x25(r1, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="4c00308014000400f94b54cce6396cb599431c882366da0105000200fd0000002c0001802000038006000100020000000800020003000300000000000000aaaaaaaaaaaa080001"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x44000) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000200)={0xfffffff9, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/address_bits', 0x311902, 0x1d) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x5a42, &(0x7f0000000040)={0x0, 0xdaa8, 0x10, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r12 = syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0xc, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r12, 0x2) ioctl$UBLK_U_CMD_SET_PARAMS(r6, 0xc0207508, &(0x7f0000000480)={r12, 0xffff, 0x70, &(0x7f0000000400)={0x70, 0x4, {0x1, 0xa, 0x9, 0x13, 0x81, 0xf, 0xfffffffe, 0x7fffffff, 0x3}, {0x9, 0xc, 0x3315aefb, 0xd, 0x200}, {0x8, 0xffffffda, 0x0, 0x9}, {0x4, 0x48000000}}}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042c1180c800aaaa2f91556147"], 0x14) r13 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r13, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_STEREO(r13, 0xc0045003, &(0x7f0000000140)=0x1) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x1, 0x700, 0x1, 0x20000000, {{0x1c, 0x4, 0x2, 0x23, 0x70, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @loopback, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x7, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x40, 0x1, [{0x1, 0x9, "af9c64442274c2"}, {0x0, 0xf, "06fe41e99d746d58007b4eb38a"}, {0x7, 0x8, "1ef3c8612b4a"}, {0x6, 0xd, "a7a5efa6a0b74de48a0663"}, {0x7, 0x9, "651b4c18e70ad4"}, {0x2, 0x4, "ee8f"}]}]}}}}}) r14 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) 13m50.568165025s ago: executing program 4 (id=124): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r0 = open(0x0, 0x60840, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 13m50.352683488s ago: executing program 4 (id=127): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) unshare(0x2a020480) tee(r2, r1, 0xff, 0x8) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x140f, 0x1, 0x70bd21, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_usb_control_io$uac1(r0, 0x0, 0x0) 13m45.722136033s ago: executing program 4 (id=137): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) writev(r3, &(0x7f0000002740)=[{0x0}, {&(0x7f0000001740)='$', 0x1}], 0x2) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x240, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 13m42.233661432s ago: executing program 1 (id=142): ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000100)={{0x1, 0xe, 0x80000000, 0x6, 0x5}, [{0x19, 0x7, 0x5, 0x5}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4, 0x3, 0xc4, 0x4}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) r1 = socket$inet(0x2, 0x3, 0x8d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYRES8=r2, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r7, 0x164}, 0x0, &(0x7f0000000a00)="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", 0x0) r8 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, r9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f"], 0x0, 0x18, 0x0, 0x2}, 0x28) r10 = socket(0xa, 0x1, 0x0) ioctl(r10, 0x8916, &(0x7f0000000000)) ioctl(r10, 0x8936, &(0x7f0000000000)) 13m42.218277455s ago: executing program 4 (id=143): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) (async, rerun: 64) syz_emit_vhci(&(0x7f0000002300)=ANY=[@ANYBLOB="02c8802f002b00f806df010010095d055fe4da5f33e6040003000700f3ff0400070008000d0f0800090009001f25485b9264e2d78afd54ac1e135cd463b499979378f1e9506d8ffa34c20f2ad0712649d0eb33e66054e09ec13a11375bd6456bc1d96edd90bf0641b0081c3ddba5c04b733113a3051332653b468c6ec129b44328055c30aaa85271fbcf5d4349449041559b0b62ca9385b71388dbd851c6960000000000000000"], 0x34) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x6, &(0x7f0000002080)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) get_robust_list(r0, &(0x7f0000002180)=&(0x7f0000002100)={&(0x7f00000020c0)}, &(0x7f0000002200)=0x18) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40010040, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000002140)='net/netstat\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000002240)='hugetlbfs\x00', 0x18204c2, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x29) write(r4, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) mkdirat(0xffffffffffffffff, 0x0, 0x67) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) (async, rerun: 32) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) (rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x42) write$cgroup_int(r5, &(0x7f0000000000)=0x7ff, 0x12) (async) landlock_create_ruleset(&(0x7f0000000040)={0x1010, 0x3}, 0x30, 0x0) 13m38.608817054s ago: executing program 1 (id=146): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x10d) syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xfffffffc, 0x3ba}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000600)) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000480)={{0x77359400}}, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x16, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x22, 0x7fff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) 13m36.466922622s ago: executing program 4 (id=152): ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r4, 0x0) close_range(r2, r2, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000740)={{&(0x7f0000000200)=[{0x2, 0x8000000000000000, 0x6, {0x4, 0x2}, 0x3, 0x8, 0x2}, {0xfa99, 0x2, 0x2, {0x1, 0x8}, 0xe, 0xc2, 0x9}, {0xffffffffffffffff, 0x3, 0xa, {0xcc, 0x1}, 0x8, 0x4, 0x4}, {0x1, 0x9, 0x1, {0x2, 0xbf9}, 0x373c, 0x42f, 0x1000}], 0x4, 0x40, 0xfffe, 0x8001}, {&(0x7f0000000300)=[{0x4, 0x200}], 0x1, 0x10, 0x6, 0x7}, {&(0x7f0000000340)=[0x1], 0x1, 0x8, 0x3, 0xd}, {&(0x7f0000000540)=[{0x7ff, 0x6, 0x8, 0x5, 0x2}, {0x8, 0x5, 0x0, 0x2e, 0x5}, {0x1, 0x57, 0xfff, 0x0, 0x9}, {0x7f, 0x6, 0x8, 0x0, 0x80}, {0x52, 0x1, 0x5, 0x0, 0x8}, {0x1, 0x7fffffffffffffff, 0x2, 0x3, 0x1}, {0x1ff, 0x0, 0x7, 0x6}, {0x7f, 0x8, 0x8, 0x1, 0x100}, {0x100, 0x5, 0x8927, 0x4, 0x3}, {0x3, 0x8, 0x4, 0x736, 0x5}], 0xa, 0x28, 0x6, 0x3ff}, {&(0x7f0000000700)=[0x10, 0x3, 0x2000, 0xfd, 0x7d3], 0x5, 0x8, 0x9, 0xff}}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='zstd', 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000001c0)={0xff, @multicast2, 0x4e21, 0x1, 'wlc\x00', 0x20, 0x2, 0x2c}, 0x2c) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 13m36.424168453s ago: executing program 1 (id=153): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) writev(r3, &(0x7f0000002740)=[{0x0}, {&(0x7f0000001740)='$', 0x1}], 0x2) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x240, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 13m36.114916925s ago: executing program 1 (id=154): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x12, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) read(r2, &(0x7f0000001000)=""/215, 0xd7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="f10000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r3, &(0x7f0000001600), &(0x7f0000001700)=@udp=r1}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r4, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2058d}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 13m33.487169092s ago: executing program 1 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone3(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000008c0)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x400}) dup2(0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, 0x0, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) ioctl(r5, 0xc138fd02, &(0x7f0000000000)="0400000000000000") sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmmsg$inet6(r7, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000880)="0d98fffd1671", 0x6}], 0x1}}], 0x1, 0x24000082) 13m31.372308059s ago: executing program 1 (id=159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x4b, 0x2}, 0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9fab000003067903000000000000000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x3007, 0x3c59}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$incfs_metadata(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0) write$binfmt_aout(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="938d62fa8f"], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000000040), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x20}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x24}, 0x94) 13m20.247176526s ago: executing program 32 (id=152): ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r4, 0x0) close_range(r2, r2, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000740)={{&(0x7f0000000200)=[{0x2, 0x8000000000000000, 0x6, {0x4, 0x2}, 0x3, 0x8, 0x2}, {0xfa99, 0x2, 0x2, {0x1, 0x8}, 0xe, 0xc2, 0x9}, {0xffffffffffffffff, 0x3, 0xa, {0xcc, 0x1}, 0x8, 0x4, 0x4}, {0x1, 0x9, 0x1, {0x2, 0xbf9}, 0x373c, 0x42f, 0x1000}], 0x4, 0x40, 0xfffe, 0x8001}, {&(0x7f0000000300)=[{0x4, 0x200}], 0x1, 0x10, 0x6, 0x7}, {&(0x7f0000000340)=[0x1], 0x1, 0x8, 0x3, 0xd}, {&(0x7f0000000540)=[{0x7ff, 0x6, 0x8, 0x5, 0x2}, {0x8, 0x5, 0x0, 0x2e, 0x5}, {0x1, 0x57, 0xfff, 0x0, 0x9}, {0x7f, 0x6, 0x8, 0x0, 0x80}, {0x52, 0x1, 0x5, 0x0, 0x8}, {0x1, 0x7fffffffffffffff, 0x2, 0x3, 0x1}, {0x1ff, 0x0, 0x7, 0x6}, {0x7f, 0x8, 0x8, 0x1, 0x100}, {0x100, 0x5, 0x8927, 0x4, 0x3}, {0x3, 0x8, 0x4, 0x736, 0x5}], 0xa, 0x28, 0x6, 0x3ff}, {&(0x7f0000000700)=[0x10, 0x3, 0x2000, 0xfd, 0x7d3], 0x5, 0x8, 0x9, 0xff}}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='zstd', 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000001c0)={0xff, @multicast2, 0x4e21, 0x1, 'wlc\x00', 0x20, 0x2, 0x2c}, 0x2c) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 13m16.193762648s ago: executing program 33 (id=159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x4b, 0x2}, 0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9fab000003067903000000000000000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x3007, 0x3c59}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$incfs_metadata(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0) write$binfmt_aout(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="938d62fa8f"], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000000040), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x20}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x24}, 0x94) 1m0.667483849s ago: executing program 0 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket(0x2, 0xa, 0x300) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 54.017651475s ago: executing program 0 (id=1440): creat(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$MEMGETREGIONCOUNT(0xffffffffffffffff, 0x80044d07, 0x0) 52.293090903s ago: executing program 2 (id=1443): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240900012700006cdc020101112402010102000000000000000002130009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e020000070581054ad1944eedeb825c6ec03c6274a6f24264"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='user.incfs.id\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 50.171671655s ago: executing program 3 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x4, 0xff, 0x800, 0x80000001, 0x2}, 0x0, &(0x7f0000003880)={0x1e, 0x3, 0x7, 0x9, 0x1000, 0x10000000}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000001e80)=ANY=[@ANYBLOB="f674723d59c1479807fe2a229d2ced8368884d15e328fce9c4892cf5a0c902522a37d9aa48a0c448fa5e5f704f4451eae6fa01d6ce273006bca356f44b9cf7bed0b8776883a0290322e130fa6f1887d02bbe9f6906958cda8f86d5ff75687150a2ae799fba35c8622b1653c2f7683f9a3dc4e0ff80d6f359a40b", @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES8=r2], 0x1c}}, 0x40000) mmap(&(0x7f000065a000/0x3000)=nil, 0x3000, 0xb635773f06ebbee6, 0x4000010, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x41) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r5, 0x1b00, 0x2}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000007c0)="df80") 49.880839864s ago: executing program 0 (id=1445): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0xff86, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_CFG_CMD={0x0, 0x1, {0x0, 0x0, 0x1a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xf}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000000}, 0x810) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) futex(0x0, 0x189, 0x0, 0x0, 0x0, 0x2) write$cgroup_pid(r1, &(0x7f0000000400)=0xffffffffffffffff, 0x12) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x10}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x175, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@hyper, 0x4}, 0x2, 0x7, 0x5, 0x8001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) 49.836066978s ago: executing program 3 (id=1446): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x6) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x12000, 0x84, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8000000008, 0x400080000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) fsync(r0) setreuid(0x0, 0xee01) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000200)={&(0x7f0000000740)=[{0x50, 0x6011, 0x0, 0x0}], 0x1}) 49.693876024s ago: executing program 0 (id=1447): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x3, 0xff, 0x81, 0x57e, 0xfffffffffbfffffd, 0x4002004c4, 0xfffffffffffffffa, 0x3, 0x8, 0x10, 0x1, 0x2, 0x0, 0x8, 0xfffffffffffff001], 0x10000, 0x2100}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)=@arm64={0x9, 0x6, 0x75, '\x00', 0x80}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x6d, 0x4}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0xe000, 0xd000, 0x1f, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0xeeef0000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x29, 0x0, 0x0, 0x4}, {0x80a0000, 0x7}, {0x7000, 0x4}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$kcm(0x2, 0xa, 0x2) r3 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) 49.320140557s ago: executing program 2 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket(0x2, 0xa, 0x300) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 47.822249639s ago: executing program 3 (id=1449): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') write$smackfs_ipv6host(r3, &(0x7f0000000840)=@l2={{0x107, 0x3a, 0x0, 0x3a, 0x9, 0x3a, 0x6, 0x3a, 0x4, 0x3a, 0x3ff, 0x3a, 0x0, 0x3a, 0x9000000}, 0x2f, 0x2, 0x20, 'oom_adj\x00'}, 0xb6) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="2e57a0dbcf727bbcbf029591306e389ea704e8be4dc79c5e2508ff9e6d927359b4b6826fd9d648aa5c41cc1f209070615170bd04728bc3749d3176f03876c943ad862616bf6e31b0a0d4397ec33174906813ded1800f2987d515625f56f8518950dcee41c047fa3d2803d1d08e78e7e4d06d6f553b105776385f69621fac88c2ae379cd9af78f9a0499ba5744190666b726f"], 0xac}, 0x1, 0x0, 0x0, 0x884}, 0x10) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) setuid(0xee01) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0xfdb, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x52e0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x140440d4}, 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) r9 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0x20b034, 0x0, 0x2, 0x400022a}) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r9, 0x17, &(0x7f0000000300)={0x0}, 0x1) sendto$inet(r2, &(0x7f00000002c0)="ab", 0xfffffffffffffdd8, 0x4008825, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, r3, 0x0, 0x18000, 0x0, 0x4, 0x3108bf, 0x1e5cf6}) 46.4014806s ago: executing program 0 (id=1450): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9f"], 0x0) fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="bf1600000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100000dffffffb702000008000000b7030000020000008500000006000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000630000001500020000000000bf01000000000000850000005600000095"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000380)={0xffff, 0xd45b, 0x5, 0x5}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1040, 0x0) r2 = dup(r1) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) io_setup(0x2, &(0x7f0000001280)=0x0) io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r4) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="b7070000000000007b7af0ff00000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b7050000fdffff0f8500000063000000150002000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b00100000000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000005600000095"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r3, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(r5, &(0x7f0000005400)=[{&(0x7f0000002200)="636f6e6e6563742016", 0x9}], 0x1) write$UHID_INPUT(r2, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) 44.700021437s ago: executing program 2 (id=1451): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) listen(r0, 0x10000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r2, &(0x7f0000000740)='loop\n', 0x5) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x2}}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed802, 0x0) sendfile(r4, r4, 0x0, 0x201300) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x2e, 0x4, @thr={&(0x7f0000000140)="c946b0fd98eaa6ad4fba34273ff112f6df5a361ad42a727052b0f896ace94b420c7b4233c388fa6a7de732dea276bfd365607a", &(0x7f0000000180)="86488e21190acd34b9cfe07fc44560"}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000280)={{r6, r7+10000000}, {0x0, 0x3938700}}, &(0x7f0000000300)) 44.696211291s ago: executing program 0 (id=1452): ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000100)={{0x1, 0xe, 0x80000000, 0x6, 0x5}, [{0x19, 0x7, 0x5, 0x5}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4, 0x3, 0xc4, 0x4}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) r1 = socket$inet(0x2, 0x3, 0x8d) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000a00), 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, r7}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket(0xa, 0x1, 0x0) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) 44.528339593s ago: executing program 3 (id=1453): creat(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$MEMGETREGIONCOUNT(0xffffffffffffffff, 0x80044d07, 0x0) 43.678923178s ago: executing program 2 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x4, 0xff, 0x800, 0x80000001, 0x2}, 0x0, &(0x7f0000003880)={0x1e, 0x3, 0x7, 0x9, 0x1000, 0x10000000}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000001e80)=ANY=[@ANYBLOB="f674723d59c1479807fe2a229d2ced8368884d15e328fce9c4892cf5a0c902522a37d9aa48a0c448fa5e5f704f4451eae6fa01d6ce273006bca356f44b9cf7bed0b8776883a0290322e130fa6f1887d02bbe9f6906958cda8f86d5ff75687150a2ae799fba35c8622b1653c2f7683f9a3dc4e0ff80d6f359a40b", @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES8=r2], 0x1c}}, 0x40000) mmap(&(0x7f000065a000/0x3000)=nil, 0x3000, 0xb635773f06ebbee6, 0x4000010, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x41) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r5, 0x1b00, 0x2}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000007c0)="df80") 43.039554743s ago: executing program 2 (id=1455): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0xff86, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_CFG_CMD={0x0, 0x1, {0x0, 0x0, 0x1a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xf}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000000}, 0x810) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) futex(0x0, 0x189, 0x0, 0x0, 0x0, 0x2) write$cgroup_pid(r1, &(0x7f0000000400)=0xffffffffffffffff, 0x12) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x10}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x175, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@hyper, 0x4}, 0x2, 0x7, 0x5, 0x8001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 42.66130027s ago: executing program 3 (id=1456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000200)="6d31d8429eb88dad6a51c21b199223d62307", 0x12}, {&(0x7f0000000040)="18f17419b146a84cbeda9224297dac92d747ced31a35cd6d7b9b442343ada863ecd2a9abcae9c24f89e086f890db26e60abb098b3c5dbf9d2ef1b9c77d874baabb4b8f78e051d4632866ae642a2651fe1cb76754cd5b59fa84e2d937c49821003116b8ba4ab0293456b739", 0x6b}, {&(0x7f0000000500)="edb4a0cdd18a271cdbaace5806cf8a2692bea8933fc7b9e8f05c9d5150d5e56f76c53ebff12630745660e26f01c67083b94f8b4b057788c24b8eb47837899455e593c0cabc47ff2ba3ac6bad652739262852c58d03d2c3a2e47a69855d1f43606791bbae8273", 0x66}], 0x3) 42.522575814s ago: executing program 2 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x2, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x80000001, 0x1}], "409b7c"}, @typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @fwd={0x1}, @fwd={0x5}]}}, 0x0, 0x5a, 0x0, 0x1, 0x80, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x80, 0x8, 0x9, 0x680, 0xffffffffffffffff, 0x5, '\x00', r5, r6, 0x2, 0x3, 0x3}, 0x50) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_gettime(0x0, &(0x7f0000000180)) futex$unlock_wake_list32(0x0, 0x60a, 0x85, 0x0, &(0x7f00000002c0)=0x9, 0x401) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4c42bb4f92, 0x0) shutdown(0xffffffffffffffff, 0x0) 34.912166228s ago: executing program 3 (id=1458): syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ff00f500140600fe800000000000000000000000000034fe8008000000000000000000000000aa00024e239135be629aad764abcf48d5e27485eb265cb26a8b8bc6f28307a11a316d725293271a6ae034ee0e3f6879caf8c21a788547f3b1785f5bad4d6b69eee7c4a09c2bec048dca6403663bf5cb2ab3b2cd92ed0054281083b1a834b5f02340ef4a645f385d5784720cb7eaddeb7a39abd73e1b5d37d9ae382fb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040ffff90780000"], 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000940)=""/114, 0x72}], 0x2) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 15.630691355s ago: executing program 34 (id=1452): ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000100)={{0x1, 0xe, 0x80000000, 0x6, 0x5}, [{0x19, 0x7, 0x5, 0x5}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4, 0x3, 0xc4, 0x4}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) r1 = socket$inet(0x2, 0x3, 0x8d) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000a00), 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, r7}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket(0xa, 0x1, 0x0) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) 0s ago: executing program 35 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x2, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x80000001, 0x1}], "409b7c"}, @typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @fwd={0x1}, @fwd={0x5}]}}, 0x0, 0x5a, 0x0, 0x1, 0x80, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x80, 0x8, 0x9, 0x680, 0xffffffffffffffff, 0x5, '\x00', r5, r6, 0x2, 0x3, 0x3}, 0x50) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_gettime(0x0, &(0x7f0000000180)) futex$unlock_wake_list32(0x0, 0x60a, 0x85, 0x0, &(0x7f00000002c0)=0x9, 0x401) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4c42bb4f92, 0x0) shutdown(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.252521][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.371296][ T5591] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 705.602249][ T5591] usb 1-1: Using ep0 maxpacket: 8 [ 705.605098][ T5591] usb 1-1: unable to get BOS descriptor or descriptor too short [ 705.605152][ T5591] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 705.607076][ T5591] usb 1-1: config 8 has an invalid interface number: 42 but max is 0 [ 705.607102][ T5591] usb 1-1: config 8 has no interface number 0 [ 705.607522][ T5591] usb 1-1: config 8 interface 42 has no altsetting 0 [ 705.611522][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.611550][ T5591] usb 1-1: Product: syz [ 705.611565][ T5591] usb 1-1: Manufacturer: syz [ 705.611581][ T5591] usb 1-1: SerialNumber: syz [ 705.931990][ T5591] empeg 1-1:8.42: empeg converter detected [ 705.932070][ T5591] usb 1-1: active config #8 != 1 ?? [ 705.978841][ T5591] usb 1-1: USB disconnect, device number 43 [ 705.993827][ T5592] Bluetooth: hci4: command tx timeout [ 707.512404][ T5592] Bluetooth: hci1: command tx timeout [ 708.076816][ T5592] Bluetooth: hci4: command tx timeout [ 708.384103][ T1001] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 708.536143][ T1001] usb 3-1: not running at top speed; connect to a high speed hub [ 708.536188][ T1001] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 708.539264][ T1001] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 148, changing to 4 [ 708.539299][ T1001] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 53578, setting to 1023 [ 708.539344][ T1001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.669927][ T1001] uvcvideo 3-1:1.0: Found UVC 0.00 device (046d:0825) [ 709.084106][ T1001] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 709.086336][ T1001] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 709.086859][ T1001] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 709.086932][ T1001] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 709.230799][ T1001] usb 3-1: USB disconnect, device number 43 [ 709.593256][ T5592] Bluetooth: hci1: command tx timeout [ 710.644486][ T5592] Bluetooth: hci4: command tx timeout [ 710.671345][ T5832] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 710.853971][ T5832] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.856260][ T5832] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.885806][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.885839][ T5832] usb 1-1: Product: syz [ 710.885852][ T5832] usb 1-1: Manufacturer: syz [ 710.885865][ T5832] usb 1-1: SerialNumber: syz [ 711.678572][ T5595] Bluetooth: hci1: command tx timeout [ 711.726595][T10509] can: request_module (can-proto-0) failed. [ 711.859249][T10509] binder: 10508:10509 ioctl c0306201 200000000040 returned -22 [ 713.408120][ T5595] Bluetooth: hci4: command tx timeout [ 713.736859][ T5832] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 713.737188][ T5832] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 713.752292][ T5595] Bluetooth: hci1: command tx timeout [ 713.759621][ T5832] cdc_ncm 1-1:1.0: bind() failure [ 713.876371][ T5832] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 713.876422][ T5832] cdc_ncm 1-1:1.1: bind() failure [ 713.943191][ T5832] usb 1-1: USB disconnect, device number 44 [ 715.188211][ T5595] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 717.472401][ T9484] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 717.647101][ T9484] usb 1-1: not running at top speed; connect to a high speed hub [ 717.647141][ T9484] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 717.693533][ T9484] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 148, changing to 4 [ 717.693580][ T9484] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 53578, setting to 1023 [ 717.693625][ T9484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.908604][ T9484] uvcvideo 1-1:1.0: Found UVC 0.00 device (046d:0825) [ 718.053897][ T9484] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 718.054448][ T9484] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 718.055087][ T9484] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 718.055150][ T9484] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 718.204927][ T9484] usb 1-1: USB disconnect, device number 45 [ 718.292244][ T1001] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 718.452208][ T1001] usb 4-1: not running at top speed; connect to a high speed hub [ 718.452252][ T1001] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 718.485316][ T1001] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 148, changing to 4 [ 718.485353][ T1001] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 53578, setting to 1023 [ 718.485398][ T1001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.557868][ T1001] uvcvideo 4-1:1.0: Found UVC 0.00 device (046d:0825) [ 719.086146][ T1001] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 719.086670][ T1001] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 719.087618][ T1001] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 719.087665][ T1001] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 719.222470][ T1001] usb 4-1: USB disconnect, device number 46 [ 723.866558][ T819] bridge_slave_1: left allmulticast mode [ 723.866596][ T819] bridge_slave_1: left promiscuous mode [ 723.867004][ T819] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.173809][ T5591] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 725.060914][ T819] bridge_slave_0: left allmulticast mode [ 725.060952][ T819] bridge_slave_0: left promiscuous mode [ 725.061206][ T819] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.187307][ T5591] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 725.203345][ T5591] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.260806][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.260847][ T5591] usb 1-1: Product: syz [ 725.260861][ T5591] usb 1-1: Manufacturer: syz [ 725.260875][ T5591] usb 1-1: SerialNumber: syz [ 725.980418][ T819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.063454][ T819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.126660][ T819] bond0 (unregistering): Released all slaves [ 726.309885][ T5591] cdc_ncm 1-1:1.0: bind() failure [ 726.406875][ T5591] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 726.435657][ T5591] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 726.507795][ T5591] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 726.549826][ T5591] usb 1-1: USB disconnect, device number 46 [ 726.687017][ T5595] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 728.343491][T10611] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 728.732289][ T819] hsr_slave_0: left promiscuous mode [ 728.755536][ T819] hsr_slave_1: left promiscuous mode [ 728.757318][ T819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.803345][ T819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.022287][ T9484] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 729.222985][ T819] team0 (unregistering): Port device team_slave_1 removed [ 729.251308][ T819] team0 (unregistering): Port device team_slave_0 removed [ 729.395544][ T9484] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 729.396644][ T9484] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 729.396669][ T9484] usb 4-1: config 0 has no interface number 0 [ 729.396809][ T9484] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 729.396841][ T9484] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 729.396868][ T9484] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 729.398784][ T9484] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 729.398809][ T9484] usb 4-1: Product: syz [ 729.398824][ T9484] usb 4-1: SerialNumber: syz [ 729.403216][ T9484] usb 4-1: config 0 descriptor?? [ 729.471672][ T9484] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 729.486123][ T9484] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input20 [ 729.760020][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 729.904166][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.917455][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.951297][ C1] cm109_urb_ctl_callback: 486 callbacks suppressed [ 730.951326][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.951580][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.954149][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.954418][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.954649][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.954875][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.955144][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.955370][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.955603][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.955830][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.973104][ T1001] usb 4-1: USB disconnect, device number 47 [ 730.973283][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 731.253416][ T1001] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 731.384554][T10641] can: request_module (can-proto-0) failed. [ 731.390908][T10641] binder: 10640:10641 ioctl c0306201 200000000040 returned -22 [ 731.418417][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.418553][T10474] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.418892][T10474] bridge_slave_0: entered allmulticast mode [ 731.422370][T10474] bridge_slave_0: entered promiscuous mode [ 731.438369][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.438549][T10474] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.441900][T10474] bridge_slave_1: entered allmulticast mode [ 731.450092][T10474] bridge_slave_1: entered promiscuous mode [ 731.454605][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.454878][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.455517][T10464] bridge_slave_0: entered allmulticast mode [ 731.460435][T10464] bridge_slave_0: entered promiscuous mode [ 731.578798][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.578973][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.579179][T10464] bridge_slave_1: entered allmulticast mode [ 731.605102][T10464] bridge_slave_1: entered promiscuous mode [ 731.733609][T10474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.952880][T10474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.015337][T10464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.230364][T10464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.392083][ T13] rpcbind: server 127.0.0.1 not responding, timed out [ 733.684556][T10474] team0: Port device team_slave_0 added [ 733.925274][T10474] team0: Port device team_slave_1 added [ 733.930622][T10464] team0: Port device team_slave_0 added [ 734.107850][T10464] team0: Port device team_slave_1 added [ 735.250450][T10474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.250470][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.250499][T10474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.474064][T10474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.474082][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.474111][T10474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.494858][T10464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.494875][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.494900][T10464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.591558][T10464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.591577][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.591602][T10464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.983122][T10695] FAULT_INJECTION: forcing a failure. [ 735.983122][T10695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.983165][T10695] CPU: 1 UID: 0 PID: 10695 Comm: syz.2.1030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 735.983195][T10695] Tainted: [L]=SOFTLOCKUP [ 735.983203][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.983218][T10695] Call Trace: [ 735.983265][T10695] [ 735.983340][T10695] dump_stack_lvl+0xe8/0x150 [ 735.983529][T10695] should_fail_ex+0x46b/0x600 [ 735.983606][T10695] core_sys_select+0x8c0/0xb40 [ 735.983674][T10695] ? __pfx_core_sys_select+0x10/0x10 [ 735.983733][T10695] ? reacquire_held_locks+0x117/0x1a0 [ 735.983812][T10695] ? __pfx_set_user_sigmask+0x10/0x10 [ 735.983851][T10695] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 735.983961][T10695] __se_sys_pselect6+0x267/0x320 [ 735.983988][T10695] ? __pfx___se_sys_pselect6+0x10/0x10 [ 735.984019][T10695] ? __x64_sys_pselect6+0x21/0xf0 [ 735.984044][T10695] do_syscall_64+0x166/0x520 [ 735.984100][T10695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.984136][T10695] ? clear_bhb_loop+0x70/0xc0 [ 735.984162][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.984184][T10695] RIP: 0033:0x7f8b8a6de159 [ 735.984210][T10695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.984229][T10695] RSP: 002b:00007f8b88936028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 735.984258][T10695] RAX: ffffffffffffffda RBX: 00007f8b8a965fa0 RCX: 00007f8b8a6de159 [ 735.984275][T10695] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 735.984290][T10695] RBP: 00007f8b8a77506b R08: 0000200000000280 R09: 0000200000000300 [ 735.984307][T10695] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 735.984321][T10695] R13: 00007f8b8a966038 R14: 00007f8b8a965fa0 R15: 00007fffffada8d8 [ 735.984355][T10695] [ 736.032000][ T5248] 8021q: adding VLAN 0 to HW filter on device eth10 [ 737.367811][T10474] hsr_slave_0: entered promiscuous mode [ 737.370058][T10474] hsr_slave_1: entered promiscuous mode [ 737.371211][T10474] debugfs: 'hsr0' already exists in 'hsr' [ 737.371237][T10474] Cannot create hsr debugfs directory [ 737.424174][T10464] hsr_slave_0: entered promiscuous mode [ 737.427258][T10464] hsr_slave_1: entered promiscuous mode [ 737.429365][T10464] debugfs: 'hsr0' already exists in 'hsr' [ 737.429392][T10464] Cannot create hsr debugfs directory [ 738.305261][T10708] uprobe: syz.0.1034:10708 failed to unregister, leaking uprobe [ 740.035176][ T1110] rpcbind: server 127.0.0.1 not responding, timed out [ 740.920292][ T5595] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 744.791999][T10780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1052'. [ 744.847448][ T5595] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 745.008594][T10784] netlink: 548 bytes leftover after parsing attributes in process `syz.2.1052'. [ 745.015916][ T2246] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 745.104024][ T5248] 8021q: adding VLAN 0 to HW filter on device eth11 [ 745.108539][T10782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1052'. [ 745.176002][ T2246] usb 4-1: device descriptor read/64, error -71 [ 745.415485][ T2246] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 745.857586][ T2246] usb 4-1: device descriptor read/64, error -71 [ 745.965647][ T2246] usb usb4-port1: attempt power cycle [ 746.822454][ T2246] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 746.843406][ T2246] usb 4-1: device descriptor read/8, error -71 [ 747.068992][ T36] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 747.096024][ T2246] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 747.122944][ T2246] usb 4-1: device descriptor read/8, error -71 [ 747.537488][ T2246] usb usb4-port1: unable to enumerate USB device [ 747.983117][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.985761][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.012574][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 748.023885][ T36] usb 3-1: unable to get BOS descriptor or descriptor too short [ 748.024007][ T36] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 748.073253][ T36] usb 3-1: config 8 has an invalid interface number: 42 but max is 0 [ 748.073282][ T36] usb 3-1: config 8 has no interface number 0 [ 748.073313][ T36] usb 3-1: config 8 interface 42 has no altsetting 0 [ 748.076291][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.076319][ T36] usb 3-1: Product: syz [ 748.076334][ T36] usb 3-1: Manufacturer: syz [ 748.076349][ T36] usb 3-1: SerialNumber: syz [ 748.494000][ T36] empeg 3-1:8.42: empeg converter detected [ 748.494115][ T36] usb 3-1: active config #8 != 1 ?? [ 748.500790][ T36] usb 3-1: USB disconnect, device number 44 [ 749.603939][ T5595] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 753.093967][T10854] FAULT_INJECTION: forcing a failure. [ 753.093967][T10854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.094010][T10854] CPU: 1 UID: 0 PID: 10854 Comm: syz.0.1068 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 753.094042][T10854] Tainted: [L]=SOFTLOCKUP [ 753.094050][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.094064][T10854] Call Trace: [ 753.094073][T10854] [ 753.094083][T10854] dump_stack_lvl+0xe8/0x150 [ 753.094122][T10854] should_fail_ex+0x46b/0x600 [ 753.094158][T10854] core_sys_select+0x8c0/0xb40 [ 753.094208][T10854] ? __pfx_core_sys_select+0x10/0x10 [ 753.094239][T10854] ? reacquire_held_locks+0x117/0x1a0 [ 753.094305][T10854] ? __pfx_set_user_sigmask+0x10/0x10 [ 753.094337][T10854] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 753.094375][T10854] __se_sys_pselect6+0x267/0x320 [ 753.094403][T10854] ? __pfx___se_sys_pselect6+0x10/0x10 [ 753.094433][T10854] ? __x64_sys_pselect6+0x21/0xf0 [ 753.094457][T10854] do_syscall_64+0x166/0x520 [ 753.094480][T10854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.094501][T10854] ? clear_bhb_loop+0x70/0xc0 [ 753.094527][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.094548][T10854] RIP: 0033:0x7fa39027e159 [ 753.094568][T10854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.094587][T10854] RSP: 002b:00007fa38e4b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 753.094609][T10854] RAX: ffffffffffffffda RBX: 00007fa390506090 RCX: 00007fa39027e159 [ 753.094626][T10854] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 753.094640][T10854] RBP: 00007fa39031506b R08: 0000200000000280 R09: 0000200000000300 [ 753.094656][T10854] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 753.094669][T10854] R13: 00007fa390506128 R14: 00007fa390506090 R15: 00007fff61a32ba8 [ 753.094705][T10854] [ 753.680641][ T3385] rpcbind: server 127.0.0.1 not responding, timed out [ 753.881804][ T819] bridge_slave_1: left allmulticast mode [ 753.881839][ T819] bridge_slave_1: left promiscuous mode [ 753.882838][ T819] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.358557][ T819] bridge_slave_0: left allmulticast mode [ 754.394989][ T819] bridge_slave_0: left promiscuous mode [ 754.396816][ T819] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.754780][ T819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.968592][ T819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.090781][ T819] bond0 (unregistering): Released all slaves [ 758.209312][ T5595] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 759.611957][T10904] trusted_key: encrypted_key: insufficient parameters specified [ 759.668851][ T819] hsr_slave_0: left promiscuous mode [ 759.702376][ T819] hsr_slave_1: left promiscuous mode [ 759.705664][ T819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.720056][T10905] FAULT_INJECTION: forcing a failure. [ 759.720056][T10905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.720102][T10905] CPU: 1 UID: 0 PID: 10905 Comm: syz.0.1080 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 759.720132][T10905] Tainted: [L]=SOFTLOCKUP [ 759.720139][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 759.720152][T10905] Call Trace: [ 759.720160][T10905] [ 759.720169][T10905] dump_stack_lvl+0xe8/0x150 [ 759.720207][T10905] should_fail_ex+0x46b/0x600 [ 759.720242][T10905] _copy_to_user+0x31/0xb0 [ 759.720299][T10905] bpf_verifier_vlog+0x52a/0x900 [ 759.720357][T10905] __btf_verifier_log+0xe2/0x140 [ 759.720393][T10905] ? __pfx___btf_verifier_log+0x10/0x10 [ 759.720432][T10905] __btf_verifier_log_type+0x4fd/0x6a0 [ 759.720484][T10905] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 759.720517][T10905] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 759.720550][T10905] btf_enum_check_meta+0x49b/0xdc0 [ 759.720577][T10905] ? __pfx_sort+0x10/0x10 [ 759.720604][T10905] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 759.720641][T10905] btf_parse_type_sec+0x3cf/0x2360 [ 759.720677][T10905] ? __pfx_btf_check_sec_info+0x10/0x10 [ 759.720710][T10905] ? btf_parse_str_sec+0x244/0x2f0 [ 759.720741][T10905] btf_new_fd+0x4ad/0xc70 [ 759.720777][T10905] __sys_bpf+0xd2e/0xd90 [ 759.720816][T10905] ? __pfx___sys_bpf+0x10/0x10 [ 759.720848][T10905] ? do_futex+0x3e7/0x4e0 [ 759.720915][T10905] ? rcu_is_watching+0x16/0xb0 [ 759.720953][T10905] __x64_sys_bpf+0xba/0xd0 [ 759.720983][T10905] do_syscall_64+0x166/0x520 [ 759.721006][T10905] ? trace_irq_disable+0x3b/0x140 [ 759.721044][T10905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.721065][T10905] ? clear_bhb_loop+0x70/0xc0 [ 759.721096][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.721117][T10905] RIP: 0033:0x7fa39027e159 [ 759.721137][T10905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.721157][T10905] RSP: 002b:00007fa38e4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 759.721179][T10905] RAX: ffffffffffffffda RBX: 00007fa390505fa0 RCX: 00007fa39027e159 [ 759.721195][T10905] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 759.721209][T10905] RBP: 00007fa39031506b R08: 0000000000000000 R09: 0000000000000000 [ 759.721223][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.721235][T10905] R13: 00007fa390506038 R14: 00007fa390505fa0 R15: 00007fff61a32ba8 [ 759.721269][T10905] [ 760.044863][ T819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.472927][ T5894] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 762.274541][ T5894] usb 4-1: not running at top speed; connect to a high speed hub [ 762.274571][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 762.323027][ T5894] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 148, changing to 4 [ 762.323062][ T5894] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 53578, setting to 1023 [ 762.323108][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.480053][ T5894] uvcvideo 4-1:1.0: Found UVC 0.00 device (046d:0825) [ 762.589079][ T819] team0 (unregistering): Port device team_slave_1 removed [ 762.639711][ T819] team0 (unregistering): Port device team_slave_0 removed [ 762.791036][ T5894] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 762.803862][ T5894] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 762.804790][ T5894] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 762.804843][ T5894] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 762.953999][ T5894] usb 4-1: USB disconnect, device number 52 [ 764.991639][T10949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1087'. [ 765.201341][ T48] rpcbind: server 127.0.0.1 not responding, timed out [ 765.562002][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 765.646900][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 765.666325][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 765.688561][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 765.694802][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 766.276941][ T5595] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 768.542896][ T5592] Bluetooth: hci5: command tx timeout [ 768.658191][ T5592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 768.735887][ T5592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 768.842369][ T5592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 768.874822][ T5592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 768.877818][ T5592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 770.565640][ T5595] Bluetooth: hci5: command tx timeout [ 770.946076][ T5595] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 771.199964][ T5595] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 771.303558][ T5595] Bluetooth: hci6: command tx timeout [ 772.712754][ T5595] Bluetooth: hci5: command tx timeout [ 773.152398][ T819] bridge_slave_1: left allmulticast mode [ 773.152436][ T819] bridge_slave_1: left promiscuous mode [ 773.152983][ T819] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.282334][ T5720] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 773.323355][ T819] bridge_slave_0: left allmulticast mode [ 773.323381][ T819] bridge_slave_0: left promiscuous mode [ 773.323551][ T819] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.352223][ T5595] Bluetooth: hci6: command tx timeout [ 773.581885][ T5720] usb 1-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 773.592225][ T5720] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 773.592261][ T5720] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.592288][ T5720] usb 1-1: config 0 interface 0 has no altsetting 0 [ 773.592323][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.597068][ T5720] usb 1-1: config 0 descriptor?? [ 774.551940][ T5720] hid_parser_main: 1 callbacks suppressed [ 774.551996][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.552031][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.552059][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.584425][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.584461][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.584489][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.584515][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.584549][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.584577][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.584604][ T5720] sony 0003:1430:474C.0005: unknown main item tag 0x0 [ 774.796067][ T5595] Bluetooth: hci5: command tx timeout [ 774.851517][ T5720] sony 0003:1430:474C.0005: hidraw0: USB HID v0.10 Device [HID 1430:474c] on usb-dummy_hcd.0-1/input0 [ 774.851556][ T5720] sony 0003:1430:474C.0005: failed to claim input [ 775.774630][ T5595] Bluetooth: hci6: command tx timeout [ 775.903503][ T5720] usb 1-1: USB disconnect, device number 47 [ 775.924632][ T5595] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 776.162916][ T819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.242907][ T819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.305742][ T819] bond0 (unregistering): Released all slaves [ 777.762841][ T5832] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 777.804737][ T5720] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 777.855096][ T5595] Bluetooth: hci6: command tx timeout [ 777.932183][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 777.934876][ T5832] usb 3-1: unable to get BOS descriptor or descriptor too short [ 777.934932][ T5832] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 777.936239][ T5832] usb 3-1: config 8 has an invalid interface number: 42 but max is 0 [ 777.936263][ T5832] usb 3-1: config 8 has no interface number 0 [ 777.936296][ T5832] usb 3-1: config 8 interface 42 has no altsetting 0 [ 777.943873][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.943898][ T5832] usb 3-1: Product: syz [ 777.943913][ T5832] usb 3-1: Manufacturer: syz [ 777.943928][ T5832] usb 3-1: SerialNumber: syz [ 777.983553][ T5720] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 777.985272][ T5720] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.989066][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.989091][ T5720] usb 4-1: Product: syz [ 777.989106][ T5720] usb 4-1: Manufacturer: syz [ 777.989121][ T5720] usb 4-1: SerialNumber: syz [ 778.291935][ T5832] empeg 3-1:8.42: empeg converter detected [ 778.298754][ T5832] usb 3-1: active config #8 != 1 ?? [ 778.315215][ T5832] usb 3-1: USB disconnect, device number 45 [ 778.352280][ T819] hsr_slave_0: left promiscuous mode [ 778.362240][ T5894] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 778.382371][ T819] hsr_slave_1: left promiscuous mode [ 778.386749][ T819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.423300][ T819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.507485][ T5720] cdc_ncm 4-1:1.0: bind() failure [ 778.517464][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 778.519816][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.528303][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.528331][ T5894] usb 1-1: Product: syz [ 778.528345][ T5894] usb 1-1: Manufacturer: syz [ 778.528360][ T5894] usb 1-1: SerialNumber: syz [ 778.546459][ T5720] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 778.546558][ T5720] cdc_ncm 4-1:1.1: bind() failure [ 778.564733][ T5720] usb 4-1: USB disconnect, device number 53 [ 779.047195][ T5894] cdc_ncm 1-1:1.0: bind() failure [ 779.067620][ T5894] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 779.067734][ T5894] cdc_ncm 1-1:1.1: bind() failure [ 780.384581][ T819] team0 (unregistering): Port device team_slave_1 removed [ 780.451549][ T819] team0 (unregistering): Port device team_slave_0 removed [ 780.619645][ T5894] usb 1-1: USB disconnect, device number 48 [ 780.832224][ T5832] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 780.984462][ T5832] usb 4-1: not running at top speed; connect to a high speed hub [ 780.984506][ T5832] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 780.988084][ T5832] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 148, changing to 4 [ 780.988117][ T5832] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 53578, setting to 1023 [ 780.988158][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.146647][ T5832] uvcvideo 4-1:1.0: Found UVC 0.00 device (046d:0825) [ 781.455235][ T5832] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 781.458154][ T5832] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 781.461651][ T5832] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 781.461813][ T5832] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 781.643894][ T5832] usb 4-1: USB disconnect, device number 54 [ 782.182245][ T36] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 782.443031][ T36] usb 1-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 782.444787][ T36] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 782.444822][ T36] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.444848][ T36] usb 1-1: config 0 interface 0 has no altsetting 0 [ 782.444883][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.450505][ T36] usb 1-1: config 0 descriptor?? [ 782.562273][ T819] rpcbind: server 127.0.0.1 not responding, timed out [ 782.961129][ T36] hid_parser_main: 1 callbacks suppressed [ 782.961342][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 782.961379][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 782.961758][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 782.961789][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 782.961830][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 782.961858][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 782.961885][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 782.961911][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 782.961938][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 782.961965][ T36] sony 0003:1430:474C.0006: unknown main item tag 0x0 [ 783.104500][ T36] sony 0003:1430:474C.0006: hidraw0: USB HID v0.10 Device [HID 1430:474c] on usb-dummy_hcd.0-1/input0 [ 783.104537][ T36] sony 0003:1430:474C.0006: failed to claim input [ 783.179762][T11097] bridge0: port 3(syz_tun) entered blocking state [ 783.180849][T11097] bridge0: port 3(syz_tun) entered disabled state [ 783.213790][T11097] syz_tun: entered allmulticast mode [ 783.274650][ T5720] usb 1-1: USB disconnect, device number 49 [ 783.323580][T11097] syz_tun: entered promiscuous mode [ 783.458662][T11098] bridge0: port 4(ip6gretap0) entered blocking state [ 783.458907][T11098] bridge0: port 4(ip6gretap0) entered disabled state [ 783.459121][T11098] ip6gretap0: entered allmulticast mode [ 783.787241][T11098] ip6gretap0: entered promiscuous mode [ 784.228178][T11103] fido_id[11103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 784.752241][ T36] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 785.252372][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.254272][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.259350][T10953] bridge_slave_0: entered allmulticast mode [ 785.598231][T10953] bridge_slave_0: entered promiscuous mode [ 785.667645][ T36] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 785.669257][ T36] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 785.669284][ T36] usb 4-1: config 0 has no interface number 0 [ 785.669335][ T36] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 785.669432][ T36] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 785.669460][ T36] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 785.671718][ T36] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 785.671742][ T36] usb 4-1: Product: syz [ 785.671755][ T36] usb 4-1: SerialNumber: syz [ 785.827342][ T36] usb 4-1: config 0 descriptor?? [ 785.867632][ T36] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 785.898021][ T36] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input21 [ 785.918308][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.918450][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.918650][T10953] bridge_slave_1: entered allmulticast mode [ 785.944562][T10953] bridge_slave_1: entered promiscuous mode [ 786.876467][T11112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.877348][T11112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.195926][ C1] cm109_urb_ctl_callback: 85 callbacks suppressed [ 787.195956][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 787.196196][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 787.196436][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 787.196682][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 787.196924][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 787.197159][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 787.197399][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 787.197422][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 787.197435][ T2246] usb 4-1: USB disconnect, device number 55 [ 787.389810][T10953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.391920][ T2246] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 787.590041][T10953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.590297][T10973] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.590420][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.590515][T10973] bridge_slave_0: entered allmulticast mode [ 787.596946][T10973] bridge_slave_0: entered promiscuous mode [ 787.659124][T10973] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.659202][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.659326][T10973] bridge_slave_1: entered allmulticast mode [ 787.668171][T10973] bridge_slave_1: entered promiscuous mode [ 787.781158][T10953] team0: Port device team_slave_0 added [ 787.833865][T10953] team0: Port device team_slave_1 added [ 788.992769][ T36] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 789.086247][T11135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.151798][T10973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.165595][ T36] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 789.169807][ T36] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 789.169841][ T36] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 789.169868][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 789.169897][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.276860][ T36] usb 4-1: config 0 descriptor?? [ 790.629659][ T36] usbhid 4-1:0.0: can't add hid device: -71 [ 790.629863][ T36] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 790.656347][T10973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.672654][ T36] usb 4-1: USB disconnect, device number 56 [ 791.224883][T10953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.224901][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.224916][T10953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.295364][T10953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.295378][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.295392][T10953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.308919][T10973] team0: Port device team_slave_0 added [ 791.408618][T10973] team0: Port device team_slave_1 added [ 792.686806][T10973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.686824][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.686851][T10973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.769062][T10973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.769080][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.769104][T10973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.824739][T10953] hsr_slave_0: entered promiscuous mode [ 792.825889][T10953] hsr_slave_1: entered promiscuous mode [ 793.257757][T10973] hsr_slave_0: entered promiscuous mode [ 793.271251][T10973] hsr_slave_1: entered promiscuous mode [ 793.283902][T10973] debugfs: 'hsr0' already exists in 'hsr' [ 793.283921][T10973] Cannot create hsr debugfs directory [ 793.674739][T11169] tmpfs: Bad value for 'mpol' [ 793.675909][T11169] PKCS7: Unsupported SignedData version [ 798.193777][ T2246] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 800.536132][ T2246] usb 1-1: device descriptor read/all, error -71 [ 802.259601][ T819] bridge_slave_1: left allmulticast mode [ 802.259638][ T819] bridge_slave_1: left promiscuous mode [ 802.259937][ T819] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.274922][ T2246] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 802.425838][ T2246] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.427164][ T2246] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.431017][ T819] bridge_slave_0: left allmulticast mode [ 802.431051][ T819] bridge_slave_0: left promiscuous mode [ 802.431308][ T819] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.452917][ T2246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.452945][ T2246] usb 4-1: Product: syz [ 802.452961][ T2246] usb 4-1: Manufacturer: syz [ 802.452976][ T2246] usb 4-1: SerialNumber: syz [ 803.394911][ T2246] cdc_ncm 4-1:1.0: bind() failure [ 803.487087][ T2246] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 803.489119][ T2246] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 803.494746][ T2246] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 803.521544][ T2246] usb 4-1: USB disconnect, device number 57 [ 803.973371][ T819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.317862][ T819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.188411][ T819] bond0 (unregistering): Released all slaves [ 805.474862][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 805.948888][ T2246] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 806.273275][ T2246] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 806.275024][ T2246] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 806.275060][ T2246] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.275089][ T2246] usb 4-1: config 0 interface 0 has no altsetting 0 [ 806.275123][ T2246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.277943][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 806.357952][ T2246] usb 4-1: config 0 descriptor?? [ 806.945915][ T2246] usbhid 4-1:0.0: can't add hid device: -71 [ 806.946061][ T2246] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 807.008083][ T2246] usb 4-1: USB disconnect, device number 58 [ 808.725305][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.725390][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.945992][ T819] hsr_slave_0: left promiscuous mode [ 810.854988][ T819] hsr_slave_1: left promiscuous mode [ 810.856265][ T819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.892956][ T819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.164900][ T819] team0 (unregistering): Port device team_slave_1 removed [ 812.171374][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1167'. [ 812.225381][ T819] team0 (unregistering): Port device team_slave_0 removed [ 812.508448][ T5248] 8021q: adding VLAN 0 to HW filter on device eth10 [ 815.272800][ T5791] rpcbind: server 127.0.0.1 not responding, timed out [ 816.425961][ T3385] rpcbind: server 127.0.0.1 not responding, timed out [ 818.364473][ T5894] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 818.643079][ T5894] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 818.644566][ T5894] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 818.644592][ T5894] usb 3-1: config 0 has no interface number 0 [ 818.644636][ T5894] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 818.644734][ T5894] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 818.644759][ T5894] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 818.654069][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 818.654096][ T5894] usb 3-1: Product: syz [ 818.654116][ T5894] usb 3-1: SerialNumber: syz [ 819.505834][ T5894] usb 3-1: config 0 descriptor?? [ 819.531157][ T5894] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 819.616079][ T5894] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input22 [ 819.863270][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.099858][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.528396][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 820.528663][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 820.528899][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 820.529148][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 820.529385][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 820.529521][ T9484] usb 3-1: USB disconnect, device number 46 [ 820.529653][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 820.529679][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 820.655809][ T9484] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 820.873327][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 822.359907][T11378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1186'. [ 822.360955][T11378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1186'. [ 823.696422][ T5791] rpcbind: server 127.0.0.1 not responding, timed out [ 824.608293][T10973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 824.687332][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 824.689036][T10973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 824.714882][T11172] rpcbind: server 127.0.0.1 not responding, timed out [ 824.758589][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 824.760137][T10973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 824.847880][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 824.887540][T10973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 825.085080][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 825.681178][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 825.764862][ T5592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 825.766927][ T5592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 825.769276][ T5592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 825.770932][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 827.992270][ T5595] Bluetooth: hci1: command tx timeout [ 828.524986][T11451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1196'. [ 828.666799][T11454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1196'. [ 829.587527][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 829.661118][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 829.664339][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 829.677399][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 829.682878][ T5592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 830.076429][ T5592] Bluetooth: hci1: command tx timeout [ 831.289379][ T3385] rpcbind: server 127.0.0.1 not responding, timed out [ 831.993511][ T5592] Bluetooth: hci4: command tx timeout [ 832.159636][ T5592] Bluetooth: hci1: command tx timeout [ 834.072174][ T5592] Bluetooth: hci4: command tx timeout [ 834.232196][ T5592] Bluetooth: hci1: command tx timeout [ 835.752916][ T1256] rpcbind: server 127.0.0.1 not responding, timed out [ 836.751960][ T5592] Bluetooth: hci4: command tx timeout [ 838.792470][ T5592] Bluetooth: hci4: command tx timeout [ 842.278085][T11565] tmpfs: Bad value for 'mpol' [ 842.279642][T11565] PKCS7: Unsupported SignedData version [ 842.655879][T11568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1223'. [ 842.779270][ T5592] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 842.973935][T11577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1226'. [ 847.740281][T11423] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.740420][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.740614][T11423] bridge_slave_0: entered allmulticast mode [ 847.784731][T11423] bridge_slave_0: entered promiscuous mode [ 847.875511][T11423] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.875766][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.875961][T11423] bridge_slave_1: entered allmulticast mode [ 847.879140][T11423] bridge_slave_1: entered promiscuous mode [ 848.246441][T11423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.293935][T11423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.978942][ T5791] rpcbind: server 127.0.0.1 not responding, timed out [ 849.447869][T11423] team0: Port device team_slave_0 added [ 849.594951][T11423] team0: Port device team_slave_1 added [ 849.932386][ T5591] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 849.973467][ T4914] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 850.363596][ T4914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.579180][ T4914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.603567][ T4914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.603598][ T4914] usb 3-1: Product: syz [ 850.603614][ T4914] usb 3-1: Manufacturer: syz [ 850.603629][ T4914] usb 3-1: SerialNumber: syz [ 850.752817][T11423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.752835][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.752916][T11423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.915202][ T5591] usb 1-1: Using ep0 maxpacket: 8 [ 850.927060][ T5591] usb 1-1: unable to get BOS descriptor or descriptor too short [ 850.927121][ T5591] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 850.928724][ T5591] usb 1-1: config 8 has an invalid interface number: 42 but max is 0 [ 850.928750][ T5591] usb 1-1: config 8 has no interface number 0 [ 850.928783][ T5591] usb 1-1: config 8 interface 42 has no altsetting 0 [ 850.931769][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.931795][ T5591] usb 1-1: Product: syz [ 850.931810][ T5591] usb 1-1: Manufacturer: syz [ 850.931825][ T5591] usb 1-1: SerialNumber: syz [ 851.997045][T11423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.997065][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.997091][T11423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.080959][ T5591] empeg 1-1:8.42: empeg converter detected [ 852.081042][ T5591] usb 1-1: active config #8 != 1 ?? [ 852.102264][ T5591] usb 1-1: USB disconnect, device number 52 [ 852.399228][ T4914] cdc_ncm 3-1:1.0: bind() failure [ 852.427246][ T4914] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 852.431341][ T4914] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 852.451612][ T4914] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 852.481214][ T4914] usb 3-1: USB disconnect, device number 47 [ 852.818505][T11468] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.818776][T11468] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.818913][T11468] bridge_slave_0: entered allmulticast mode [ 852.820537][T11468] bridge_slave_0: entered promiscuous mode [ 853.873340][ T3379] bridge_slave_1: left allmulticast mode [ 853.873376][ T3379] bridge_slave_1: left promiscuous mode [ 853.873622][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.043394][ T3379] bridge_slave_0: left allmulticast mode [ 854.043431][ T3379] bridge_slave_0: left promiscuous mode [ 854.043598][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.082412][ T5894] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 854.232216][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 854.235391][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 854.235505][ T5894] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 854.236775][ T5894] usb 1-1: config 8 has an invalid interface number: 42 but max is 0 [ 854.236805][ T5894] usb 1-1: config 8 has no interface number 0 [ 854.236842][ T5894] usb 1-1: config 8 interface 42 has no altsetting 0 [ 854.239349][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.239374][ T5894] usb 1-1: Product: syz [ 854.239388][ T5894] usb 1-1: Manufacturer: syz [ 854.239403][ T5894] usb 1-1: SerialNumber: syz [ 854.422218][ T4914] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 854.496946][ T5894] empeg 1-1:8.42: empeg converter detected [ 854.497014][ T5894] usb 1-1: active config #8 != 1 ?? [ 854.518237][ T5894] usb 1-1: USB disconnect, device number 53 [ 854.651897][ T4914] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 854.662764][ T4914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.662841][ T4914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 854.662869][ T4914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 854.662894][ T4914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 854.662915][ T4914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 854.667118][ T4914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 854.667147][ T4914] usb 4-1: Product: syz [ 854.667162][ T4914] usb 4-1: Manufacturer: syz [ 854.667178][ T4914] usb 4-1: SerialNumber: syz [ 854.795746][ T4914] usb 4-1: config 0 descriptor?? [ 855.044019][ T3379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.317847][ T4914] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 855.318162][ T4914] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 856.168435][ T3379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.212488][ T4914] usb 4-1: USB disconnect, device number 59 [ 856.258433][ T3379] bond0 (unregistering): Released all slaves [ 856.322582][T11468] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.322744][T11468] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.322889][T11468] bridge_slave_1: entered allmulticast mode [ 856.324538][T11468] bridge_slave_1: entered promiscuous mode [ 856.337926][T11423] hsr_slave_0: entered promiscuous mode [ 856.339177][T11423] hsr_slave_1: entered promiscuous mode [ 856.340155][T11423] debugfs: 'hsr0' already exists in 'hsr' [ 856.340179][T11423] Cannot create hsr debugfs directory [ 856.501496][T11468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.557158][T11468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.642550][ T9484] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 856.689914][T11468] team0: Port device team_slave_0 added [ 856.706888][T11468] team0: Port device team_slave_1 added [ 856.793616][ T9484] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 856.795766][ T9484] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 856.795797][ T9484] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 856.795818][ T9484] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.795867][ T9484] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 856.795894][ T9484] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 856.865369][T11468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.865388][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.865415][T11468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.912505][ T9484] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 856.912534][ T9484] usb 1-1: Product: syz [ 856.912549][ T9484] usb 1-1: Manufacturer: syz [ 857.959015][ T9484] cdc_wdm 1-1:1.0: skipping garbage [ 857.959040][ T9484] cdc_wdm 1-1:1.0: skipping garbage [ 858.079465][ T9484] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 858.080006][ T9484] cdc_wdm 1-1:1.0: Unknown control protocol [ 858.120450][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.138383][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.245904][ T3379] hsr_slave_0: left promiscuous mode [ 858.292331][ T3379] hsr_slave_1: left promiscuous mode [ 858.293628][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.342907][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.520734][ T5706] usb 1-1: USB disconnect, device number 54 [ 858.662305][T11661] netlink: 'syz.0.1249': attribute type 9 has an invalid length. [ 859.425332][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1255'. [ 859.582892][ T3379] team0 (unregistering): Port device team_slave_1 removed [ 859.634852][ T3379] team0 (unregistering): Port device team_slave_0 removed [ 859.843604][T11468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.843623][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.843713][T11468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.067270][T11702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1257'. [ 860.087935][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 860.095980][T11697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1255'. [ 860.154227][T11705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1257'. [ 860.516033][T11468] hsr_slave_0: entered promiscuous mode [ 860.565527][T11468] hsr_slave_1: entered promiscuous mode [ 860.566189][T11468] debugfs: 'hsr0' already exists in 'hsr' [ 860.566206][T11468] Cannot create hsr debugfs directory [ 862.311484][ T5592] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 863.400510][T11733] tmpfs: Bad value for 'mpol' [ 863.414947][T11733] PKCS7: Unsupported SignedData version [ 865.076879][T11172] rpcbind: server 127.0.0.1 not responding, timed out [ 866.172532][ T9484] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 866.358025][ T9484] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 866.365897][ T9484] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 866.365971][ T9484] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 866.366029][ T9484] usb 4-1: config 220 has no interface number 2 [ 866.366203][ T9484] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 866.366233][ T9484] usb 4-1: config 220 interface 0 has no altsetting 0 [ 866.366252][ T9484] usb 4-1: config 220 interface 76 has no altsetting 0 [ 866.366311][ T9484] usb 4-1: config 220 interface 1 has no altsetting 0 [ 866.485132][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.485250][ T9484] usb 4-1: Product: syz [ 866.485267][ T9484] usb 4-1: Manufacturer: syz [ 866.485283][ T9484] usb 4-1: SerialNumber: syz [ 867.594784][ T819] rpcbind: server 127.0.0.1 not responding, timed out [ 868.608408][ T9484] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 868.608447][ T9484] uvcvideo 4-1:220.0: No valid video chain found. [ 868.631713][ T9484] usb 4-1: selecting invalid altsetting 0 [ 868.735968][ T9484] usb 4-1: selecting invalid altsetting 0 [ 868.735994][ T9484] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 868.756162][ T9484] usb 4-1: USB disconnect, device number 60 [ 869.088989][ T5248] 8021q: adding VLAN 0 to HW filter on device eth10 [ 870.158030][T11783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1276'. [ 870.160028][T11783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1276'. [ 870.195282][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.195358][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.281279][T11785] FAULT_INJECTION: forcing a failure. [ 870.281279][T11785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 870.281318][T11785] CPU: 0 UID: 0 PID: 11785 Comm: syz.0.1274 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 870.281344][T11785] Tainted: [L]=SOFTLOCKUP [ 870.281352][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.281363][T11785] Call Trace: [ 870.281372][T11785] [ 870.281381][T11785] dump_stack_lvl+0xe8/0x150 [ 870.281418][T11785] should_fail_ex+0x46b/0x600 [ 870.281451][T11785] prepare_alloc_pages+0x223/0x650 [ 870.281529][T11785] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 870.281560][T11785] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 870.281592][T11785] ? __pfx_policy_nodemask+0x10/0x10 [ 870.281619][T11785] ? reacquire_held_locks+0x117/0x1a0 [ 870.281650][T11785] ? rt_spin_lock+0x1e2/0x400 [ 870.281688][T11785] alloc_pages_mpol+0xd4/0x280 [ 870.281712][T11785] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 870.281735][T11785] swap_cache_alloc_folio+0x1ac/0x5a0 [ 870.281775][T11785] read_swap_cache_async+0xe4/0x210 [ 870.281802][T11785] ? __pfx_read_swap_cache_async+0x10/0x10 [ 870.281827][T11785] ? madvise_vma_behavior+0xb9e/0x4160 [ 870.281850][T11785] madvise_vma_behavior+0x2ca5/0x4160 [ 870.281867][T11785] ? madvise_vma_behavior+0xb9e/0x4160 [ 870.281895][T11785] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 870.281914][T11785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 870.282004][T11785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 870.282023][T11785] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 870.282050][T11785] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 870.282071][T11785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 870.282101][T11785] ? __lock_acquire+0x747/0x2de0 [ 870.282132][T11785] ? __lock_acquire+0x747/0x2de0 [ 870.282164][T11785] ? __lock_acquire+0x747/0x2de0 [ 870.282192][T11785] ? lock_acquire+0x115/0x350 [ 870.282224][T11785] ? lock_acquire+0x115/0x350 [ 870.282264][T11785] ? mas_prev_slot+0xb79/0xc00 [ 870.282354][T11785] ? __lock_acquire+0x747/0x2de0 [ 870.282386][T11785] madvise_walk_vmas+0x576/0xb00 [ 870.282419][T11785] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 870.282444][T11785] ? blk_start_plug+0x6e/0x1b0 [ 870.282484][T11785] madvise_do_behavior+0x385/0x540 [ 870.282510][T11785] ? __pfx_madvise_do_behavior+0x10/0x10 [ 870.282528][T11785] ? down_read+0x156/0x200 [ 870.282569][T11785] do_madvise+0x26f/0x330 [ 870.282607][T11785] ? __pfx_do_madvise+0x10/0x10 [ 870.282645][T11785] ? __pfx_ksys_write+0x10/0x10 [ 870.282687][T11785] __x64_sys_madvise+0xa6/0xc0 [ 870.282709][T11785] do_syscall_64+0x166/0x520 [ 870.282728][T11785] ? trace_irq_disable+0x3b/0x140 [ 870.282753][T11785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.282780][T11785] ? clear_bhb_loop+0x70/0xc0 [ 870.282802][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.282820][T11785] RIP: 0033:0x7fa39027e159 [ 870.282839][T11785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.282855][T11785] RSP: 002b:00007fa38e473028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 870.282876][T11785] RAX: ffffffffffffffda RBX: 00007fa390506270 RCX: 00007fa39027e159 [ 870.282890][T11785] RDX: 0000000000000003 RSI: 0000000000600000 RDI: 0000200000000000 [ 870.282902][T11785] RBP: 00007fa38e473090 R08: 0000000000000000 R09: 0000000000000000 [ 870.282912][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.282923][T11785] R13: 00007fa390506308 R14: 00007fa390506270 R15: 00007fff61a32ba8 [ 870.282953][T11785] [ 870.302206][ T1001] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 870.454412][ T1001] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 870.456211][ T1001] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 870.456242][ T1001] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 870.456270][ T1001] usb 4-1: config 0 interface 0 has no altsetting 0 [ 870.456303][ T1001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.517736][ T1001] usb 4-1: config 0 descriptor?? [ 870.764211][ T1001] usbhid 4-1:0.0: can't add hid device: -71 [ 870.764309][ T1001] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 870.793770][ T1001] usb 4-1: USB disconnect, device number 61 [ 871.250891][ T3379] bridge_slave_1: left allmulticast mode [ 871.250928][ T3379] bridge_slave_1: left promiscuous mode [ 871.251282][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.414462][ T3379] bridge_slave_0: left allmulticast mode [ 871.414498][ T3379] bridge_slave_0: left promiscuous mode [ 871.414819][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.473186][ T1256] rpcbind: server 127.0.0.1 not responding, timed out [ 872.875102][ T5592] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 873.658504][T11172] rpcbind: server 127.0.0.1 not responding, timed out [ 873.902908][ T3379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.993544][ T3379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.074659][ T3379] bond0 (unregistering): Released all slaves [ 874.181099][ T5248] 8021q: adding VLAN 0 to HW filter on device eth11 [ 874.553443][T11814] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1285'. [ 874.706810][ T1001] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 874.852155][ T1001] usb 1-1: device descriptor read/64, error -71 [ 875.030814][T11817] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1285'. [ 875.095166][ T1001] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 875.215943][ T3379] hsr_slave_0: left promiscuous mode [ 875.227568][ T1001] usb 1-1: device descriptor read/64, error -71 [ 875.255874][ T3379] hsr_slave_1: left promiscuous mode [ 875.257290][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.278859][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.332765][ T1001] usb usb1-port1: attempt power cycle [ 875.442155][ T5720] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 875.603142][ T5720] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 875.604736][ T5720] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 875.604769][ T5720] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.604802][ T5720] usb 4-1: config 0 interface 0 has no altsetting 0 [ 875.604847][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.669902][ T5720] usb 4-1: config 0 descriptor?? [ 875.712182][ T1001] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 875.733250][ T1001] usb 1-1: device descriptor read/8, error -71 [ 875.899552][ T5720] usbhid 4-1:0.0: can't add hid device: -71 [ 875.899741][ T5720] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 875.943802][ T5720] usb 4-1: USB disconnect, device number 62 [ 875.982543][ T1001] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 876.003111][ T1001] usb 1-1: device descriptor read/8, error -71 [ 876.020436][ T3379] team0 (unregistering): Port device team_slave_1 removed [ 876.073868][ T3379] team0 (unregistering): Port device team_slave_0 removed [ 876.112756][ T1001] usb usb1-port1: unable to enumerate USB device [ 876.839818][T11847] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1291'. [ 876.967164][ T5592] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 876.967568][ T5592] Bluetooth: hci0: Injecting HCI hardware error event [ 876.974550][ T5595] Bluetooth: hci0: hardware error 0x00 [ 877.093529][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 878.889864][T11866] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1295'. [ 878.890792][T11866] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1295'. [ 880.765267][ T5595] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 883.364786][T11913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.009111][T11929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1304'. [ 885.030803][T11909] bond2: entered allmulticast mode [ 885.031382][T11909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 887.083158][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 887.127107][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 887.129307][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 887.145477][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 887.147154][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 887.681263][ T5850] rpcbind: server 127.0.0.1 not responding, timed out [ 888.224008][T11963] FAULT_INJECTION: forcing a failure. [ 888.224008][T11963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.224054][T11963] CPU: 0 UID: 0 PID: 11963 Comm: syz.2.1310 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 888.224084][T11963] Tainted: [L]=SOFTLOCKUP [ 888.224093][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.224106][T11963] Call Trace: [ 888.224115][T11963] [ 888.224126][T11963] dump_stack_lvl+0xe8/0x150 [ 888.224164][T11963] should_fail_ex+0x46b/0x600 [ 888.224200][T11963] core_sys_select+0x8c0/0xb40 [ 888.224250][T11963] ? __pfx_core_sys_select+0x10/0x10 [ 888.224285][T11963] ? reacquire_held_locks+0x117/0x1a0 [ 888.224343][T11963] ? __pfx_set_user_sigmask+0x10/0x10 [ 888.224383][T11963] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 888.224422][T11963] __se_sys_pselect6+0x267/0x320 [ 888.224451][T11963] ? __pfx___se_sys_pselect6+0x10/0x10 [ 888.224482][T11963] ? __x64_sys_pselect6+0x21/0xf0 [ 888.224507][T11963] do_syscall_64+0x166/0x520 [ 888.224529][T11963] ? trace_irq_disable+0x3b/0x140 [ 888.224558][T11963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.224580][T11963] ? clear_bhb_loop+0x70/0xc0 [ 888.224606][T11963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.224627][T11963] RIP: 0033:0x7f8b8a6de159 [ 888.224646][T11963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.224665][T11963] RSP: 002b:00007f8b88915028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 888.224689][T11963] RAX: ffffffffffffffda RBX: 00007f8b8a966090 RCX: 00007f8b8a6de159 [ 888.224705][T11963] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 888.224719][T11963] RBP: 00007f8b8a77506b R08: 0000200000000280 R09: 0000200000000300 [ 888.224735][T11963] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 888.224748][T11963] R13: 00007f8b8a966128 R14: 00007f8b8a966090 R15: 00007fffffada8d8 [ 888.224782][T11963] [ 889.363596][ T5595] Bluetooth: hci5: command tx timeout [ 891.485645][T12007] tmpfs: Bad value for 'mpol' [ 891.487240][T12007] PKCS7: Unsupported SignedData version [ 891.683317][ T5595] Bluetooth: hci5: command tx timeout [ 892.501345][ T5850] rpcbind: server 127.0.0.1 not responding, timed out [ 892.594544][ T5592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 892.662754][ T5592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 892.700729][ T5592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 892.751588][ T5592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 892.778139][ T5592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 894.141377][ T5595] Bluetooth: hci5: command tx timeout [ 896.459162][ T5595] Bluetooth: hci6: command tx timeout [ 896.475747][ T5595] Bluetooth: hci5: command tx timeout [ 898.553339][ T5592] Bluetooth: hci6: command tx timeout [ 899.809325][ T48] rpcbind: server 127.0.0.1 not responding, timed out [ 900.370520][T12072] FAULT_INJECTION: forcing a failure. [ 900.370520][T12072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.370558][T12072] CPU: 1 UID: 0 PID: 12072 Comm: syz.0.1321 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 900.370583][T12072] Tainted: [L]=SOFTLOCKUP [ 900.370590][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.370602][T12072] Call Trace: [ 900.370610][T12072] [ 900.370622][T12072] dump_stack_lvl+0xe8/0x150 [ 900.370661][T12072] should_fail_ex+0x46b/0x600 [ 900.370697][T12072] core_sys_select+0x8c0/0xb40 [ 900.370746][T12072] ? __pfx_core_sys_select+0x10/0x10 [ 900.370782][T12072] ? reacquire_held_locks+0x117/0x1a0 [ 900.370840][T12072] ? __pfx_set_user_sigmask+0x10/0x10 [ 900.370870][T12072] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 900.370906][T12072] __se_sys_pselect6+0x267/0x320 [ 900.370929][T12072] ? __pfx___se_sys_pselect6+0x10/0x10 [ 900.370958][T12072] ? __x64_sys_pselect6+0x21/0xf0 [ 900.370980][T12072] do_syscall_64+0x166/0x520 [ 900.371001][T12072] ? trace_irq_disable+0x3b/0x140 [ 900.371031][T12072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.371055][T12072] ? clear_bhb_loop+0x70/0xc0 [ 900.371079][T12072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.371100][T12072] RIP: 0033:0x7fa39027e159 [ 900.371130][T12072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.371149][T12072] RSP: 002b:00007fa38e4d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 900.371173][T12072] RAX: ffffffffffffffda RBX: 00007fa390505fa0 RCX: 00007fa39027e159 [ 900.371190][T12072] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 900.371203][T12072] RBP: 00007fa39031506b R08: 0000200000000280 R09: 0000200000000300 [ 900.371220][T12072] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 900.371234][T12072] R13: 00007fa390506038 R14: 00007fa390505fa0 R15: 00007fff61a32ba8 [ 900.371269][T12072] [ 900.402279][ T2246] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 900.554470][ T2246] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 900.556080][ T2246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.556145][ T2246] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 900.556172][ T2246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 900.556199][ T2246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 900.556221][ T2246] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 900.559739][ T2246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 900.559768][ T2246] usb 4-1: Product: syz [ 900.559784][ T2246] usb 4-1: Manufacturer: syz [ 900.559798][ T2246] usb 4-1: SerialNumber: syz [ 900.590844][ T2246] usb 4-1: config 0 descriptor?? [ 900.632512][ T5592] Bluetooth: hci6: command tx timeout [ 900.837090][T12075] sg_write: data in/out 55509038/29 bytes for SCSI command 0x22-- guessing data in; [ 900.837090][T12075] program syz.2.1322 not setting count and/or reply_len properly [ 901.001905][ T2246] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 901.050512][ T2246] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 901.225221][ T2246] usb 4-1: USB disconnect, device number 63 [ 902.714905][ T5592] Bluetooth: hci6: command tx timeout [ 902.931548][T12088] netlink: NAT attribute has 4 unknown bytes [ 902.931590][T12088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.822286][ T2246] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 904.972289][ T2246] usb 1-1: Using ep0 maxpacket: 8 [ 905.295567][ T2246] usb 1-1: unable to get BOS descriptor or descriptor too short [ 905.295943][ T2246] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 905.328413][ T2246] usb 1-1: config 8 has an invalid interface number: 42 but max is 0 [ 905.328483][ T2246] usb 1-1: config 8 has no interface number 0 [ 905.328567][ T2246] usb 1-1: config 8 interface 42 has no altsetting 0 [ 905.548523][ T2246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.548554][ T2246] usb 1-1: Product: syz [ 905.548569][ T2246] usb 1-1: Manufacturer: syz [ 905.548781][ T2246] usb 1-1: SerialNumber: syz [ 906.436560][ T2246] empeg 1-1:8.42: empeg converter detected [ 906.436601][ T2246] usb 1-1: active config #8 != 1 ?? [ 906.472971][ T2246] usb 1-1: USB disconnect, device number 59 [ 906.600209][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.601771][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.619741][T11954] bridge_slave_0: entered allmulticast mode [ 906.643384][T11954] bridge_slave_0: entered promiscuous mode [ 908.005897][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.006110][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.006297][T11954] bridge_slave_1: entered allmulticast mode [ 908.018309][T11954] bridge_slave_1: entered promiscuous mode [ 908.248801][T11954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.438034][T11954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.672158][ T9484] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 910.075216][ T9484] usb 4-1: device descriptor read/64, error -71 [ 910.253323][T11954] team0: Port device team_slave_0 added [ 910.332220][ T9484] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 910.514570][ T9484] usb 4-1: device descriptor read/64, error -71 [ 910.654820][ T9484] usb usb4-port1: attempt power cycle [ 910.742457][T11954] team0: Port device team_slave_1 added [ 910.917395][T11954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.917414][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.917441][T11954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.975714][T11954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.975733][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.975760][T11954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.002256][ T9484] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 911.033796][ T9484] usb 4-1: device descriptor read/8, error -71 [ 912.102176][ T9484] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 912.123229][ T9484] usb 4-1: device descriptor read/8, error -71 [ 913.205889][ T9484] usb usb4-port1: unable to enumerate USB device [ 913.540827][T11954] hsr_slave_0: entered promiscuous mode [ 913.543914][T11954] hsr_slave_1: entered promiscuous mode [ 913.716024][ T5592] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 914.012835][ T1001] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 914.166361][ T1001] usb 4-1: Using ep0 maxpacket: 8 [ 914.169404][ T1001] usb 4-1: unable to get BOS descriptor or descriptor too short [ 914.169463][ T1001] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 914.170926][ T1001] usb 4-1: config 8 has an invalid interface number: 42 but max is 0 [ 914.170952][ T1001] usb 4-1: config 8 has no interface number 0 [ 914.170985][ T1001] usb 4-1: config 8 interface 42 has no altsetting 0 [ 914.220160][ T1001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.220190][ T1001] usb 4-1: Product: syz [ 914.220205][ T1001] usb 4-1: Manufacturer: syz [ 914.220221][ T1001] usb 4-1: SerialNumber: syz [ 915.204287][ T1001] empeg 4-1:8.42: empeg converter detected [ 915.204330][ T1001] usb 4-1: active config #8 != 1 ?? [ 915.293745][ T1001] usb 4-1: USB disconnect, device number 68 [ 915.933902][T12168] binder: 12167:12168 ioctl c0306201 200000000040 returned -22 [ 915.934266][T12168] binder: 12167:12168 ioctl c0306201 200000000640 returned -22 [ 916.526742][T12179] tmpfs: Bad value for 'mpol' [ 916.544558][T12179] PKCS7: Unsupported SignedData version [ 917.158470][ T819] rpcbind: server 127.0.0.1 not responding, timed out [ 917.300300][T12000] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.300674][T12000] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.300875][T12000] bridge_slave_0: entered allmulticast mode [ 917.307060][T12000] bridge_slave_0: entered promiscuous mode [ 917.442333][ T1116] bridge_slave_1: left allmulticast mode [ 917.442370][ T1116] bridge_slave_1: left promiscuous mode [ 917.442765][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.512306][ T1001] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 917.595196][ T1116] bridge_slave_0: left allmulticast mode [ 917.595233][ T1116] bridge_slave_0: left promiscuous mode [ 917.595491][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.663596][ T1001] usb 1-1: not running at top speed; connect to a high speed hub [ 917.663712][ T1001] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 917.665007][ T1001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.665077][ T1001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.677744][ T1001] uvcvideo 1-1:1.0: Found UVC 0.00 device (046d:0825) [ 917.712247][ T5591] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 917.760694][ T5592] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 917.775518][ T5592] Bluetooth: hci3: Injecting HCI hardware error event [ 917.790531][ T5592] Bluetooth: hci3: hardware error 0x00 [ 917.882978][ T5591] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 917.884767][ T5591] usb 3-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x25, changing to 0x5 [ 917.884786][ T5591] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 153, changing to 7 [ 917.884801][ T5591] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x5 has invalid maxpacket 42383, setting to 1024 [ 917.884827][ T5591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.950987][ T1001] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 917.951455][ T1001] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 917.951906][ T1001] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 917.951938][ T1001] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 918.026013][ T1001] usb 1-1: USB disconnect, device number 60 [ 918.263704][ T5591] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 918.461560][T12192] FAULT_INJECTION: forcing a failure. [ 918.461560][T12192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.461599][T12192] CPU: 1 UID: 0 PID: 12192 Comm: syz.3.1362 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 918.461629][T12192] Tainted: [L]=SOFTLOCKUP [ 918.461636][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.461649][T12192] Call Trace: [ 918.461657][T12192] [ 918.461666][T12192] dump_stack_lvl+0xe8/0x150 [ 918.461712][T12192] should_fail_ex+0x46b/0x600 [ 918.461746][T12192] core_sys_select+0x8c0/0xb40 [ 918.461773][T12192] ? __pfx_core_sys_select+0x10/0x10 [ 918.461789][T12192] ? reacquire_held_locks+0x117/0x1a0 [ 918.461820][T12192] ? __pfx_set_user_sigmask+0x10/0x10 [ 918.461836][T12192] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 918.461856][T12192] __se_sys_pselect6+0x267/0x320 [ 918.461870][T12192] ? __pfx___se_sys_pselect6+0x10/0x10 [ 918.461881][T12192] ? __pfx_ksys_write+0x10/0x10 [ 918.461900][T12192] ? __x64_sys_pselect6+0x21/0xf0 [ 918.461913][T12192] do_syscall_64+0x166/0x520 [ 918.461925][T12192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.461936][T12192] ? clear_bhb_loop+0x70/0xc0 [ 918.461950][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.461961][T12192] RIP: 0033:0x7f1d3bb4e159 [ 918.461972][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.461982][T12192] RSP: 002b:00007f1d39da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 918.462001][T12192] RAX: ffffffffffffffda RBX: 00007f1d3bdd5fa0 RCX: 00007f1d3bb4e159 [ 918.462010][T12192] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 918.462023][T12192] RBP: 00007f1d3bbe506b R08: 0000200000000280 R09: 0000200000000300 [ 918.462036][T12192] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 918.462048][T12192] R13: 00007f1d3bdd6038 R14: 00007f1d3bdd5fa0 R15: 00007fff99bc5af8 [ 918.462079][T12192] [ 918.797114][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.938007][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.959175][T12189] cdc_acm 3-1:1.1: acm_start_wb - usb_submit_urb(write bulk) failed: -22 [ 918.985008][T12199] binder: 12198:12199 ioctl c0306201 200000000040 returned -22 [ 918.985364][T12199] binder: 12198:12199 ioctl c0306201 200000000640 returned -22 [ 919.025812][ T1116] bond0 (unregistering): Released all slaves [ 919.099385][T12000] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.099560][T12000] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.099875][T12000] bridge_slave_1: entered allmulticast mode [ 919.106784][T12000] bridge_slave_1: entered promiscuous mode [ 919.511029][T12000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.528149][T12000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.877253][T12000] team0: Port device team_slave_0 added [ 919.890145][T12000] team0: Port device team_slave_1 added [ 919.942671][ T5592] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 921.292218][ T1116] hsr_slave_0: left promiscuous mode [ 921.348101][ T1116] hsr_slave_1: left promiscuous mode [ 921.353171][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.447092][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.822205][ T5591] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 921.974442][ T5591] usb 4-1: not running at top speed; connect to a high speed hub [ 921.974484][ T5591] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 921.976338][ T5591] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.976670][ T5591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.017486][ T5706] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 922.079993][ T5591] uvcvideo 4-1:1.0: Found UVC 0.00 device (046d:0825) [ 922.183115][ T5706] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 922.184757][ T5706] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 922.184783][ T5706] usb 1-1: config 0 has no interface number 0 [ 922.184827][ T5706] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 922.188195][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 922.188232][ T5706] usb 1-1: Product: syz [ 922.188247][ T5706] usb 1-1: SerialNumber: syz [ 922.249270][ T5706] usb 1-1: config 0 descriptor?? [ 922.271849][ T5706] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 922.286288][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 922.338066][ T5591] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 922.339008][ T5591] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 922.340032][ T5591] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 922.340067][ T5591] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 922.429283][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 922.507100][T12236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.516543][ T5591] usb 4-1: USB disconnect, device number 69 [ 922.537071][T12236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.633578][ T5850] rpcbind: server 127.0.0.1 not responding, timed out [ 922.770463][ T5706] usb 1-1: USB disconnect, device number 61 [ 923.092796][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 923.095237][T12000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.095253][T12000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.095275][T12000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.265830][T12240] binder: 12239:12240 ioctl c0306201 200000000040 returned -22 [ 923.266099][T12240] binder: 12239:12240 ioctl c0306201 200000000640 returned -22 [ 923.784366][T12000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.784387][T12000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.784415][T12000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.959395][T12000] hsr_slave_0: entered promiscuous mode [ 923.960687][T12000] hsr_slave_1: entered promiscuous mode [ 923.961483][T12000] debugfs: 'hsr0' already exists in 'hsr' [ 924.007692][T12000] Cannot create hsr debugfs directory [ 924.510096][T12252] tmpfs: Bad value for 'mpol' [ 924.523269][T12252] PKCS7: Unsupported SignedData version [ 925.639799][ T5591] usb 3-1: USB disconnect, device number 48 [ 926.835774][T12277] binder: 12276:12277 ioctl c0306201 200000000040 returned -22 [ 926.836066][T12277] binder: 12276:12277 ioctl c0306201 200000000640 returned -22 [ 926.895950][ T5248] 8021q: adding VLAN 0 to HW filter on device eth10 [ 927.753470][ T5850] rpcbind: server 127.0.0.1 not responding, timed out [ 927.769045][ T5832] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 927.917146][ T5832] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 927.938992][ T5832] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 927.939020][ T5832] usb 3-1: config 0 has no interface number 0 [ 927.939063][ T5832] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 927.967751][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 927.967780][ T5832] usb 3-1: Product: syz [ 927.967795][ T5832] usb 3-1: SerialNumber: syz [ 927.971991][ T5832] usb 3-1: config 0 descriptor?? [ 928.001127][ T5832] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 928.052180][ T9484] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 928.232873][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.233459][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.637371][ T9484] usb 1-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 928.762216][ T9484] usb 1-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 928.763351][ T9484] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 928.965718][ T9484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.966027][ T9484] usb 1-1: Product: syz [ 928.966089][ T9484] usb 1-1: Manufacturer: syz [ 928.966255][ T9484] usb 1-1: SerialNumber: syz [ 929.317683][ T5706] usb 3-1: USB disconnect, device number 49 [ 929.336454][ T9484] usb 1-1: unsupported MDLM descriptors [ 929.653980][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.654703][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.598131][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.598216][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.260061][ T9484] usb 1-1: USB disconnect, device number 62 [ 933.302198][ T5591] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 934.322146][ T5591] usb 4-1: Using ep0 maxpacket: 16 [ 934.364228][ T5591] usb 4-1: unable to get BOS descriptor or descriptor too short [ 934.364288][ T5591] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 934.478727][ T5591] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 934.478757][ T5591] usb 4-1: config 1 has no interface number 0 [ 934.478790][ T5591] usb 4-1: config 1 interface 151 has no altsetting 0 [ 934.486114][ T5591] usb 4-1: string descriptor 0 read error: -22 [ 934.486252][ T5591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.515114][ T5591] gspca_main: pac7311-2.14.0 probing 093a:260e [ 934.884713][ T9484] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 935.053755][ T9484] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 935.056901][ T9484] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 935.056929][ T9484] usb 1-1: config 0 has no interface number 0 [ 935.056971][ T9484] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 935.098176][ T9484] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 935.098205][ T9484] usb 1-1: Product: syz [ 935.098221][ T9484] usb 1-1: SerialNumber: syz [ 935.133974][ T9484] usb 1-1: config 0 descriptor?? [ 935.151833][ T9484] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 935.225850][ T5591] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 935.225968][ T5591] pac7311 4-1:1.151: probe with driver pac7311 failed with error -71 [ 935.236903][ T5591] usb 4-1: USB disconnect, device number 70 [ 935.360511][T12351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.361403][T12351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.579226][ T5706] usb 1-1: USB disconnect, device number 63 [ 938.574307][T12430] X.509: signatureAlgorithm (12) differs from tbsCertificate.signature (13) [ 939.024129][ T5591] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 939.175812][ T5591] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 939.177672][ T5591] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 939.177699][ T5591] usb 3-1: config 0 has no interface number 0 [ 939.177744][ T5591] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 939.194777][ T5591] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 939.194820][ T5591] usb 3-1: Product: syz [ 939.194835][ T5591] usb 3-1: SerialNumber: syz [ 939.219251][ T5591] usb 3-1: config 0 descriptor?? [ 939.238294][ T1116] bridge_slave_1: left allmulticast mode [ 939.238328][ T1116] bridge_slave_1: left promiscuous mode [ 939.238576][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.252811][ T5591] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 939.429337][ T1116] bridge_slave_0: left allmulticast mode [ 939.429377][ T1116] bridge_slave_0: left promiscuous mode [ 939.429724][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.512388][T12433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.515534][T12433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.706085][ T5706] usb 3-1: USB disconnect, device number 50 [ 941.212262][ T5706] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 941.292896][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.312387][ T5591] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 941.363398][ T5706] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 941.364712][ T5706] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 941.367513][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.367542][ T5706] usb 3-1: Product: syz [ 941.367556][ T5706] usb 3-1: Manufacturer: syz [ 941.367565][ T5706] usb 3-1: SerialNumber: syz [ 941.373325][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.419211][ T9484] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 941.442758][ T5706] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 941.442870][ T5706] dvb-usb: bulk message failed: -22 (3/0) [ 941.449069][ T1116] bond0 (unregistering): Released all slaves [ 941.473560][ T5591] usb 4-1: not running at top speed; connect to a high speed hub [ 941.473710][ T5591] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 941.475196][ T5591] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.475266][ T5591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.509564][ T5591] uvcvideo 4-1:1.0: Found UVC 0.00 device (046d:0825) [ 941.579965][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 941.622149][ T9484] usb 1-1: Using ep0 maxpacket: 32 [ 941.641012][ T9484] usb 1-1: unable to get BOS descriptor or descriptor too short [ 941.641099][ T9484] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 941.711906][ T9484] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 941.711936][ T9484] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.711957][ T9484] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 941.745423][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 941.747431][ T5706] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 941.747695][ T5706] usb 3-1: media controller created [ 941.748804][ T9484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.748828][ T9484] usb 1-1: Product: syz [ 941.748843][ T9484] usb 1-1: Manufacturer: syz [ 941.748858][ T9484] usb 1-1: SerialNumber: syz [ 941.816835][ T5591] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 941.817581][ T5591] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 941.818198][ T5591] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 941.818265][ T5591] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 941.927001][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 942.150289][ T5591] usb 4-1: USB disconnect, device number 71 [ 942.220096][T12468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.241403][T12468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.388771][ T5706] DVB: Unable to find symbol mt352_attach() [ 942.388888][ T5706] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 942.440042][ T5706] dvb-usb: bulk message failed: -22 (3/0) [ 942.454925][ T5706] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 942.610443][ T9484] usb 1-1: 0:2 : does not exist [ 945.119852][ T67] rpcbind: server 127.0.0.1 not responding, timed out [ 945.650337][ T9484] usb 1-1: USB disconnect, device number 64 [ 945.696491][ T1116] hsr_slave_0: left promiscuous mode [ 945.705882][ T5832] usb 3-1: USB disconnect, device number 51 [ 945.751378][ T1116] hsr_slave_1: left promiscuous mode [ 945.758539][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.793284][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.886070][ T5832] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 947.327434][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 947.420428][T12438] udevd[12438]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 947.504305][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 947.682171][ T9484] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 947.843173][ T9484] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 947.843236][ T9484] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 947.846312][ T9484] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 947.846344][ T9484] usb 1-1: config 1 has no interface number 0 [ 947.849435][ T9484] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 947.849480][ T9484] usb 1-1: config 1 has no interface number 0 [ 947.901934][ T9484] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 947.901964][ T9484] usb 1-1: config 1 has no interface number 0 [ 947.920155][ T9484] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 947.920184][ T9484] usb 1-1: config 1 has no interface number 0 [ 947.939342][ T9484] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 947.939373][ T9484] usb 1-1: config 1 has no interface number 0 [ 947.955425][ T9484] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 947.970758][ T9484] usb 1-1: config 1 has no interface number 0 [ 947.982352][ T9484] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 947.982382][ T9484] usb 1-1: config 1 has no interface number 0 [ 947.983503][ T9484] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 947.983535][ T9484] usb 1-1: config 1 has no interface number 0 [ 947.991589][ T9484] usb 1-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 947.991694][ T9484] usb 1-1: Product: syz [ 947.991710][ T9484] usb 1-1: Manufacturer: syz [ 947.991794][ T9484] usb 1-1: SerialNumber: syz [ 948.158786][ T9484] usb 1-1: 3:0 : does not exist [ 948.158813][ T9484] usb 1-1: 3:0 : does not exist [ 948.414160][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 948.519091][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 948.522495][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 948.532732][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 948.536495][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.698403][ T1001] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 948.897686][T12512] FAULT_INJECTION: forcing a failure. [ 948.897686][T12512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.897722][T12512] CPU: 1 UID: 0 PID: 12512 Comm: syz.3.1425 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 948.897746][T12512] Tainted: [L]=SOFTLOCKUP [ 948.897753][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.897767][T12512] Call Trace: [ 948.897774][T12512] [ 948.897783][T12512] dump_stack_lvl+0xe8/0x150 [ 948.897819][T12512] should_fail_ex+0x46b/0x600 [ 948.897853][T12512] set_fd_set+0x3a/0xa0 [ 948.897873][T12512] core_sys_select+0x9f9/0xb40 [ 948.897917][T12512] ? __pfx_core_sys_select+0x10/0x10 [ 948.897946][T12512] ? reacquire_held_locks+0x117/0x1a0 [ 948.898001][T12512] ? __pfx_set_user_sigmask+0x10/0x10 [ 948.898030][T12512] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 948.898068][T12512] __se_sys_pselect6+0x267/0x320 [ 948.898094][T12512] ? __pfx___se_sys_pselect6+0x10/0x10 [ 948.898125][T12512] ? __x64_sys_pselect6+0x21/0xf0 [ 948.898147][T12512] do_syscall_64+0x166/0x520 [ 948.898166][T12512] ? trace_irq_disable+0x3b/0x140 [ 948.898192][T12512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.898213][T12512] ? clear_bhb_loop+0x70/0xc0 [ 948.898238][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.898256][T12512] RIP: 0033:0x7f1d3bb4e159 [ 948.898275][T12512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.898292][T12512] RSP: 002b:00007f1d39da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 948.898313][T12512] RAX: ffffffffffffffda RBX: 00007f1d3bdd5fa0 RCX: 00007f1d3bb4e159 [ 948.898328][T12512] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 948.898339][T12512] RBP: 00007f1d3bbe506b R08: 0000200000000280 R09: 0000200000000300 [ 948.898353][T12512] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 948.898377][T12512] R13: 00007f1d3bdd6038 R14: 00007f1d3bdd5fa0 R15: 00007fff99bc5af8 [ 948.898409][T12512] [ 949.020472][ T1001] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 949.031293][ T1001] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 949.031318][ T1001] usb 3-1: config 0 has no interface number 0 [ 949.031372][ T1001] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 949.031396][ T1001] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 949.035508][ T1001] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 949.035536][ T1001] usb 3-1: Product: syz [ 949.035549][ T1001] usb 3-1: SerialNumber: syz [ 949.249343][ T1001] usb 3-1: config 0 descriptor?? [ 949.325014][ T1001] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 949.528316][ T9484] usb 1-1: USB disconnect, device number 65 [ 949.631357][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1427'. [ 949.694415][ T5248] 8021q: adding VLAN 0 to HW filter on device eth10 [ 949.721762][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.731925][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.158523][ T1001] usb 3-1: USB disconnect, device number 52 [ 951.272154][ T5595] Bluetooth: hci1: command tx timeout [ 951.997506][T12554] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 952.331020][ T9484] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 952.487502][ T9484] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 952.489167][ T9484] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 952.567715][ T9484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.567745][ T9484] usb 3-1: Product: syz [ 952.567760][ T9484] usb 3-1: Manufacturer: syz [ 952.567776][ T9484] usb 3-1: SerialNumber: syz [ 952.690515][ T9484] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 952.690557][ T9484] dvb-usb: bulk message failed: -22 (3/0) [ 952.869293][ T9484] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 952.870276][ T9484] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 952.870328][ T9484] usb 3-1: media controller created [ 952.995685][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 953.055133][ T9484] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 953.078224][T12566] FAULT_INJECTION: forcing a failure. [ 953.078224][T12566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.078265][T12566] CPU: 0 UID: 0 PID: 12566 Comm: syz.3.1434 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 953.078289][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 953.078296][T12566] Tainted: [L]=SOFTLOCKUP [ 953.078304][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.078316][T12566] Call Trace: [ 953.078325][T12566] [ 953.078333][T12566] dump_stack_lvl+0xe8/0x150 [ 953.078367][T12566] should_fail_ex+0x46b/0x600 [ 953.078400][T12566] core_sys_select+0x8c0/0xb40 [ 953.078444][T12566] ? __pfx_core_sys_select+0x10/0x10 [ 953.078470][T12566] ? reacquire_held_locks+0x117/0x1a0 [ 953.078558][T12566] ? __pfx_set_user_sigmask+0x10/0x10 [ 953.078588][T12566] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 953.078622][T12566] __se_sys_pselect6+0x267/0x320 [ 953.078648][T12566] ? __pfx___se_sys_pselect6+0x10/0x10 [ 953.078677][T12566] ? __x64_sys_pselect6+0x21/0xf0 [ 953.078700][T12566] do_syscall_64+0x166/0x520 [ 953.078722][T12566] ? trace_irq_disable+0x3b/0x140 [ 953.078750][T12566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.078772][T12566] ? clear_bhb_loop+0x70/0xc0 [ 953.078799][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.078832][T12566] RIP: 0033:0x7f1d3bb4e159 [ 953.078853][T12566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.078873][T12566] RSP: 002b:00007f1d39da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 953.078895][T12566] RAX: ffffffffffffffda RBX: 00007f1d3bdd5fa0 RCX: 00007f1d3bb4e159 [ 953.078909][T12566] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 953.078921][T12566] RBP: 00007f1d3bbe506b R08: 0000200000000280 R09: 0000200000000300 [ 953.078936][T12566] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 953.078949][T12566] R13: 00007f1d3bdd6038 R14: 00007f1d3bdd5fa0 R15: 00007fff99bc5af8 [ 953.078982][T12566] [ 953.120481][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 953.161035][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 953.162436][ T5592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 953.352121][ T5592] Bluetooth: hci1: command tx timeout [ 953.956807][ T9484] DVB: Unable to find symbol mt352_attach() [ 953.956820][ T9484] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 953.958084][ T9484] dvb-usb: bulk message failed: -22 (3/0) [ 953.988425][ T9484] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 954.631935][T12587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1436'. [ 955.256342][T11954] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 955.439386][ T5595] Bluetooth: hci1: command tx timeout [ 955.482146][ T5591] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 955.636541][ T5591] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 955.639134][ T5591] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.648190][ T5591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.648227][ T5591] usb 4-1: Product: syz [ 955.648242][ T5591] usb 4-1: Manufacturer: syz [ 955.648258][ T5591] usb 4-1: SerialNumber: syz [ 955.912413][ T5595] Bluetooth: hci4: command tx timeout [ 957.513706][ T5595] Bluetooth: hci1: command tx timeout [ 957.873865][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.877369][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.001842][ T5595] Bluetooth: hci4: command tx timeout [ 958.114054][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.116965][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.353946][ T5591] cdc_ncm 4-1:1.0: bind() failure [ 958.394761][ T5591] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 958.398772][ T5591] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 958.420764][ T5591] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 958.471001][ T5591] usb 4-1: USB disconnect, device number 72 [ 958.765078][T12505] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.765215][T12505] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.765397][T12505] bridge_slave_0: entered allmulticast mode [ 958.769515][T12505] bridge_slave_0: entered promiscuous mode [ 958.902895][ T5850] bridge_slave_1: left allmulticast mode [ 958.902922][ T5850] bridge_slave_1: left promiscuous mode [ 958.903108][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.088874][ T5850] bridge_slave_0: left allmulticast mode [ 959.088911][ T5850] bridge_slave_0: left promiscuous mode [ 959.089154][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.182248][ T5595] Bluetooth: hci4: command tx timeout [ 960.610175][T12638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.616996][T12638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.044402][ T3379] rpcbind: server 127.0.0.1 not responding, timed out [ 962.232250][ T5595] Bluetooth: hci4: command tx timeout [ 962.315102][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.432842][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.475281][ T5850] bond0 (unregistering): Released all slaves [ 962.581530][T12505] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.581719][T12505] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.581921][T12505] bridge_slave_1: entered allmulticast mode [ 962.612885][T12505] bridge_slave_1: entered promiscuous mode [ 962.704425][T12505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.708156][T12505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.962561][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 963.203118][T12505] team0: Port device team_slave_0 added [ 963.242920][T12505] team0: Port device team_slave_1 added [ 963.272318][ T5591] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 963.323392][T12658] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 963.434288][ T5591] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 963.436865][ T5591] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 963.441500][ T5591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.441518][ T5591] usb 4-1: Product: syz [ 963.441526][ T5591] usb 4-1: Manufacturer: syz [ 963.441534][ T5591] usb 4-1: SerialNumber: syz [ 963.515855][ T5591] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 963.515903][ T5591] dvb-usb: bulk message failed: -22 (3/0) [ 963.556740][ T5591] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 963.557904][ T5591] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 963.557961][ T5591] usb 4-1: media controller created [ 963.564691][ T1001] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 963.647327][ T5591] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 964.072100][ T1001] usb 1-1: Using ep0 maxpacket: 16 [ 964.072752][ T1001] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.951920][ T1001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.951951][ T1001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.977544][ T1001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.977565][ T1001] usb 1-1: Product: syz [ 964.977575][ T1001] usb 1-1: Manufacturer: syz [ 964.977582][ T1001] usb 1-1: SerialNumber: syz [ 965.004798][ T5850] hsr_slave_0: left promiscuous mode [ 965.043747][ T1001] usb 1-1: 0:2 : does not exist [ 965.050363][ T5591] DVB: Unable to find symbol mt352_attach() [ 965.050380][ T5591] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 965.051416][ T5591] dvb-usb: bulk message failed: -22 (3/0) [ 965.077035][ T5591] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 965.080362][ T5591] usb 4-1: USB disconnect, device number 73 [ 965.098787][ T5850] hsr_slave_1: left promiscuous mode [ 965.100415][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.157289][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.222483][ T1001] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 965.263923][ T5591] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 965.656222][ T1001] usb 1-1: USB disconnect, device number 66 [ 965.831058][T12438] udevd[12438]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.523261][ T5850] team0 (unregistering): Port device team_slave_1 removed [ 966.595323][ T5850] team0 (unregistering): Port device team_slave_0 removed [ 966.632134][ T1001] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 966.785574][ T1001] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 966.788698][ T1001] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 966.788726][ T1001] usb 1-1: config 0 has no interface number 0 [ 966.788756][ T1001] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 966.788770][ T1001] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 966.842556][ T1001] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 966.842584][ T1001] usb 1-1: Product: syz [ 966.842664][ T1001] usb 1-1: SerialNumber: syz [ 966.900558][ T1001] usb 1-1: config 0 descriptor?? [ 966.979118][ T1001] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 967.032191][T12671] syz.3.1449 (12671): /proc/12670/oom_adj is deprecated, please use /proc/12670/oom_score_adj instead. [ 967.180238][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.206781][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.276950][T12505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.276969][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.277045][T12505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.399745][ T1001] usb 1-1: USB disconnect, device number 67 [ 967.443908][ T1110] rpcbind: server 127.0.0.1 not responding, timed out [ 967.466712][T12505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.466727][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.466743][T12505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.743520][T12505] hsr_slave_0: entered promiscuous mode [ 967.745831][T12505] hsr_slave_1: entered promiscuous mode [ 967.747685][T12505] debugfs: 'hsr0' already exists in 'hsr' [ 967.747711][T12505] Cannot create hsr debugfs directory [ 969.582782][ T1001] usb 3-1: USB disconnect, device number 53 [ 969.771935][ T1001] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 969.990781][T12696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1455'. [ 970.393291][ T5850] bridge_slave_1: left allmulticast mode [ 970.393327][ T5850] bridge_slave_1: left promiscuous mode [ 970.393680][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.971789][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1075.441974][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1075.455915][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29 [ 1075.463056][ C1] rcu: (detected by 1, t=10504 jiffies, g=59937, q=841 ncpus=2) [ 1075.470789][ C1] task:ktimers/1 state:R running task stack:22536 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 1075.484408][ C1] Call Trace: [ 1075.487704][ C1] [ 1075.490554][ C1] sched_show_task+0x4aa/0x5f0 [ 1075.495401][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1075.500705][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1075.505929][ C1] ? wq_watchdog_touch+0xf9/0x160 [ 1075.510979][ C1] print_other_cpu_stall+0xfbf/0x1350 [ 1075.516382][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1075.522215][ C1] ? __lock_acquire+0x747/0x2de0 [ 1075.527178][ C1] rcu_sched_clock_irq+0x9fe/0x10e0 [ 1075.532394][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1075.538038][ C1] ? rcu_is_watching+0x16/0xb0 [ 1075.542822][ C1] ? trace_softirq_raise+0x3b/0x130 [ 1075.548067][ C1] update_process_times+0x234/0x2d0 [ 1075.553324][ C1] tick_nohz_handler+0x38f/0x6b0 [ 1075.558305][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1075.563793][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1075.568916][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1075.574399][ C1] __hrtimer_run_queues+0x3a0/0xaf0 [ 1075.579630][ C1] hrtimer_interrupt+0x4c2/0xa80 [ 1075.584610][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1075.590641][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1075.596355][ C1] [ 1075.599292][ C1] [ 1075.602224][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1075.608212][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1075.613511][ C1] Code: ff ff ff e8 50 79 b6 09 f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c2 c3 03 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 47 37 13 [ 1075.633123][ C1] RSP: 0018:ffffc90000a3fab0 EFLAGS: 00000292 [ 1075.639199][ C1] RAX: 18ed1c7ca2d4ef00 RBX: 0000000000000000 RCX: 0000000000000046 [ 1075.647173][ C1] RDX: 00000000d8b0714a RSI: ffffffff8dae07db RDI: ffffffff8bcc4b80 [ 1075.655170][ C1] RBP: ffff88801d2c3e80 R08: ffffffff89638a81 R09: 0000000000000000 [ 1075.663144][ C1] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: ffffffff8e1c3cc0 [ 1075.671117][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1075.679098][ C1] ? advance_sched+0x9f1/0xc90 [ 1075.684014][ C1] ? advance_sched+0x9f1/0xc90 [ 1075.688800][ C1] advance_sched+0xa0d/0xc90 [ 1075.693426][ C1] ? advance_sched+0x9f1/0xc90 [ 1075.698222][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1075.705007][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 1075.710276][ C1] hrtimer_run_softirq+0x1e1/0x2e0 [ 1075.715418][ C1] handle_softirqs+0x1da/0x6d0 [ 1075.720211][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1075.725263][ C1] run_ktimerd+0x6a/0x100 [ 1075.729610][ C1] smpboot_thread_fn+0x565/0xa70 [ 1075.734567][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1075.739624][ C1] kthread+0x38b/0x470 [ 1075.743705][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1075.749180][ C1] ? __pfx_kthread+0x10/0x10 [ 1075.753805][ C1] ret_from_fork+0x514/0xb70 [ 1075.758522][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1075.763642][ C1] ? __switch_to+0xc89/0x1420 [ 1075.768359][ C1] ? __pfx_kthread+0x10/0x10 [ 1075.772957][ C1] ret_from_fork_asm+0x1a/0x30 [ 1075.777747][ C1] [ 1075.780770][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10298 jiffies! g59937 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 1075.792743][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=50190 [ 1075.800631][ C1] rcu: rcu_preempt kthread starved for 10301 jiffies! g59937 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 1075.812278][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1075.822440][ C1] rcu: RCU grace-period kthread stack dump: [ 1075.828505][ C1] task:rcu_preempt state:I stack:27784 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1075.840468][ C1] Call Trace: [ 1075.843767][ C1] [ 1075.846705][ C1] __schedule+0x16d9/0x5700 [ 1075.851290][ C1] ? __pfx___schedule+0x10/0x10 [ 1075.856156][ C1] ? lock_acquire+0x115/0x350 [ 1075.860858][ C1] ? schedule+0x90/0x2b0 [ 1075.865122][ C1] schedule+0x164/0x2b0 [ 1075.869304][ C1] schedule_timeout+0x152/0x2c0 [ 1075.874184][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1075.879590][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1075.884954][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1075.890795][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1075.896365][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1075.901247][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1075.907157][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1075.912462][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1075.917677][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1075.923495][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1075.928107][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1075.933321][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1075.938278][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1075.943336][ C1] kthread+0x38b/0x470 [ 1075.947412][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1075.952635][ C1] ? __pfx_kthread+0x10/0x10 [ 1075.957253][ C1] ret_from_fork+0x514/0xb70 [ 1075.961869][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1075.966988][ C1] ? __switch_to+0xc89/0x1420 [ 1075.971682][ C1] ? __pfx_kthread+0x10/0x10 [ 1075.976284][ C1] ret_from_fork_asm+0x1a/0x30 [ 1075.981042][ C1] [ 1075.984042][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1075.990341][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1075.995555][ C0] NMI backtrace for cpu 0 [ 1075.995580][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1075.995612][ C0] Tainted: [L]=SOFTLOCKUP [ 1075.995620][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.995631][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1075.995654][ C0] Code: 1b 5a 02 e9 93 d8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 1c 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1075.995671][ C0] RSP: 0018:ffffffff8de07ca0 EFLAGS: 00000246 [ 1075.995687][ C0] RAX: 0000000000ea6c47 RBX: ffffffff819aac5c RCX: 8000000000000001 [ 1075.995702][ C0] RDX: 0000000000000001 RSI: ffffffff8d86cd89 RDI: ffffffff8bcc4b80 [ 1075.995715][ C0] RBP: ffffffff8de07d78 R08: ffff8880b8633e9b R09: 1ffff110170c67d3 [ 1075.995729][ C0] R10: dffffc0000000000 R11: ffffed10170c67d4 R12: 0000000000000000 [ 1075.995742][ C0] R13: 1ffffffff1bdee00 R14: 1ffffffff1bc0f9c R15: dffffc0000000000 [ 1075.995757][ C0] FS: 0000000000000000(0000) GS:ffff888125bc4000(0000) knlGS:0000000000000000 [ 1075.995778][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1075.995791][ C0] CR2: 00007fe763c62030 CR3: 000000002bef4000 CR4: 00000000003526f0 [ 1075.995808][ C0] Call Trace: [ 1075.995817][ C0] [ 1075.995825][ C0] default_idle+0x9/0x20 [ 1075.995845][ C0] default_idle_call+0x72/0xb0 [ 1075.995867][ C0] do_idle+0x1cc/0x540 [ 1075.995893][ C0] ? __pfx_do_idle+0x10/0x10 [ 1075.995918][ C0] ? do_idle+0xe/0x540 [ 1075.995943][ C0] cpu_startup_entry+0x43/0x60 [ 1075.995967][ C0] rest_init+0x378/0x3a0 [ 1075.995989][ C0] ? __pfx_rest_init+0x10/0x10 [ 1075.996015][ C0] ? __pfx_kernel_init+0x10/0x10 [ 1075.996038][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 1075.996158][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1075.996251][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1075.996277][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 1075.996400][ C0] start_kernel+0x392/0x3e0 [ 1075.996469][ C0] x86_64_start_reservations+0x24/0x30 [ 1075.996516][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1075.996537][ C0] common_startup_64+0x13e/0x157 [ 1075.996570][ C0]