last executing test programs: 15m26.396023018s ago: executing program 4 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x8922, &(0x7f0000000000)="ddef29539679c13a") sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) socket$kcm(0x29, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) 15m20.112072675s ago: executing program 4 (id=932): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r1 = request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='^)^&@+-}/\x00', 0xfffffffffffffffa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@deltclass={0x948, 0x29, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0xa, 0x7a359c1f0726b71f}, {0x3, 0x9}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x800, 0x800, 0x51}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7fffffff, 0x81, 0x6b2}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x2, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x713, 0x4, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x6, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1000, 0x80000000}}, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0x6, 0x6f}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1e, 0x3ef, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x6}}, @tclass_kind_options=@c_htb={{0x8}, {0x854, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x10001, 0x40, 0x1, 0x5, 0x6, 0x2, 0xfffffffb, 0x1, 0x1, 0x3, 0x0, 0xab32, 0x5, 0x0, 0x255, 0x63, 0x28, 0x4, 0x3, 0x7, 0xd01d, 0x3, 0x5, 0x3, 0xa17, 0x7, 0xe167, 0x8, 0x5, 0xff, 0x6, 0x0, 0x7, 0xeb, 0x45, 0x7, 0x80000001, 0xc2, 0x7, 0x10001, 0xfff, 0x101, 0x7, 0x86, 0xf590, 0x1, 0x8, 0x4, 0x40, 0xc, 0x7fff, 0x3, 0x6, 0xd4, 0x4, 0xa05, 0x2, 0x7f89, 0x915, 0x5, 0x4, 0xf, 0x3, 0x1, 0x8, 0x42a3, 0xf022, 0x8, 0xfffffff7, 0x10, 0x7, 0xff, 0x6, 0x800, 0xfff, 0x86, 0x2, 0x9fdb, 0x8, 0x7, 0x1000, 0x76, 0x4, 0x6, 0x0, 0x0, 0xe9, 0xfff, 0xfffffff0, 0x2, 0x9, 0x4, 0x8, 0xeca, 0x4, 0x3dd5, 0x0, 0x8, 0x9, 0x3, 0x400d, 0x9, 0x101, 0x2, 0x926, 0x2, 0xfffffffb, 0x6, 0x4, 0x9, 0x6, 0x0, 0x4, 0x7, 0x9, 0x40, 0x0, 0x8, 0xb, 0x2, 0x1, 0x9f33, 0x4, 0x0, 0x7, 0x200, 0x3, 0x0, 0xe7a, 0x6, 0xdcdb, 0x9381, 0x8001, 0x4, 0x1fc000, 0x8, 0xffe, 0x6, 0x10, 0x2, 0x5, 0x11, 0x800, 0x2, 0x4, 0x6, 0x15a8, 0x3, 0x1000, 0x0, 0xffff7fff, 0x5, 0x7, 0x1, 0x4, 0x1, 0x6, 0x4, 0x3, 0xa, 0xe5c, 0x7fffffff, 0x2, 0xe, 0x4, 0xa, 0xa28, 0x4, 0x6, 0x2ee, 0xfffffffb, 0x1, 0x10001, 0x800, 0x7, 0x3, 0x6, 0x1, 0x3, 0x5, 0x2, 0x100, 0x1, 0x2, 0x5, 0x1, 0xffff8000, 0xd, 0x8001, 0xa95a, 0x5, 0x7fff, 0xfffffff2, 0x0, 0x2, 0x6, 0x3, 0x7, 0x2, 0x400, 0x6, 0x0, 0x0, 0x3b711917, 0x4, 0x6000, 0x6, 0x5, 0x3, 0x101, 0xc, 0xffffffff, 0x7, 0x3ee8, 0x1, 0x7ff, 0x3, 0x5, 0x3, 0x101, 0x5, 0x7, 0x10, 0x8, 0x0, 0x452a, 0xa1, 0x0, 0x8001, 0xffffbf16, 0x881, 0x81, 0x3, 0x2, 0x5, 0x8, 0x2a8a, 0x2, 0xf, 0x10, 0x9e7, 0x7fff, 0x0, 0xd36, 0x4, 0xe, 0xdeca, 0x81, 0x1ff, 0x7ff, 0x6, 0x4, 0xfffffbf2, 0x3, 0xfff, 0x3]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x7, 0x6, 0x4, 0x3, 0x1, 0x40, 0x8000, 0x7, 0x8, 0x80000000, 0x265, 0x2, 0x6, 0x2, 0xed, 0x680, 0x6, 0x6d55, 0x3, 0x1, 0x81, 0x80, 0x3, 0x16000, 0xe, 0xb, 0x4, 0x6, 0x9, 0x9, 0x6, 0x0, 0x1, 0xfffff8e0, 0x2, 0x7, 0x0, 0x7, 0x4, 0x81, 0x0, 0xf9, 0x9, 0x7, 0x6ae7, 0xfffffffc, 0x80000001, 0x0, 0xfffffff7, 0x7, 0x662e2edb, 0x2, 0x83, 0xa, 0xfffffffa, 0x4, 0x8, 0x7ff, 0x3, 0x2, 0x5, 0xa77, 0xf, 0x3, 0x0, 0x72, 0x8, 0x4, 0x9, 0x0, 0x6, 0x0, 0x8, 0x2, 0x10001, 0xfffff125, 0x2, 0x9, 0x7ff, 0x7fffffff, 0x30f6, 0x10000, 0x3c7, 0x8, 0x81, 0x1ff, 0x167, 0x5, 0x7, 0xc78, 0x1, 0x8, 0x6, 0x6d0e, 0x7fffffff, 0x2, 0x1e, 0x6, 0xfd, 0xfffff822, 0xfffffff7, 0x7fffffff, 0x10000, 0xe, 0x8569f3f, 0x6, 0x1000, 0x4, 0x8, 0x8, 0x9, 0x7f, 0x7, 0x0, 0x1, 0xee, 0x2, 0x8, 0xd, 0x9, 0x4, 0x6, 0x0, 0x39e, 0x3ee2, 0x7, 0x5, 0x1, 0x8, 0x53d0, 0x4, 0x1c, 0x8a24, 0x80000001, 0xb, 0x10, 0x5, 0x9, 0x6, 0x3d, 0x8, 0x3, 0x7fffffff, 0x1, 0x1ff, 0x2, 0x72a9d77b, 0x5, 0xc, 0x0, 0xab78, 0x52be, 0x0, 0x1, 0x4, 0x1, 0x8, 0x7f, 0x8, 0x3, 0x6, 0x4, 0xd66, 0x7, 0xf, 0x9, 0x3, 0x2, 0x1, 0x3ff, 0x7ff65cd5, 0x6913cba, 0x40, 0x7fffffff, 0xff, 0xd9, 0x631d, 0x8, 0x5, 0x200, 0x0, 0x401, 0x2, 0x0, 0x0, 0x2, 0x20, 0x3, 0x9, 0x64d03958, 0x3, 0x0, 0x6, 0x24a7, 0x9, 0xe00, 0x6, 0x7af, 0x10, 0x9, 0x2da, 0x6, 0x2, 0x3f6bad27, 0x6, 0x80000000, 0x1d5, 0xf8, 0x8, 0x6, 0x2, 0x3, 0x2, 0x8, 0x2651, 0x6, 0x9, 0x4f4, 0xfffffffb, 0x5, 0x6e4, 0xc, 0x9, 0x19ec, 0x7, 0x3, 0x2, 0x8, 0x4, 0x80000000, 0x87f, 0x6, 0x5f, 0x2, 0x9, 0x7, 0x8, 0x2, 0x0, 0x4, 0x2, 0x6, 0x1c98852d, 0x3, 0x0, 0x1, 0xfffffff8, 0xf75, 0xf65c, 0xf, 0x2, 0x1, 0x75d4f834, 0xf462, 0xfff, 0xfffffffb]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x5, 0x1, 0x2, 0x4}, {0x3, 0x2, 0x1477, 0x10, 0x9, 0x100}, 0x7, 0x80000001, 0x6, 0x0, 0xa670}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}]}}]}, 0x948}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r5, 0x0, 0x100000000000000}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000940)=0x707987cd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000340)='!\x00', &(0x7f0000000380)) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000002c40)={0xd, @sliced={0x10, [0xffff, 0x2, 0x3, 0x2, 0x401, 0x7, 0x3ff, 0x8000, 0xadbf, 0x5, 0x9, 0x61a, 0x2, 0x2, 0x1, 0x91c, 0xfbff, 0x1, 0x8000, 0xffff, 0xfffe, 0x4, 0xff, 0x4, 0x10, 0x9, 0x33d, 0x9, 0x4, 0x1, 0x101, 0x81, 0xf, 0xdb, 0x7, 0x9, 0x6, 0xffff, 0x7f, 0x4, 0x5, 0x20, 0x9, 0xa, 0x38, 0x2, 0x8, 0x40b], 0xfffffffd}}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 15m18.754024911s ago: executing program 4 (id=938): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100), 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002540)=""/1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind(0xffffffffffffffff, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x0, @private1, @remote, [@dstopts]}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 15m17.161661675s ago: executing program 4 (id=940): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000140)="b71f", 0x2}], 0x1) close(0x3) r4 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r5, 0x80089000) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {0x0, 0x3, 0x1, 0xc9f1}, 0x31, [0xbe76, 0x0, 0x0, 0x4, 0x4e6, 0x3800, 0x0, 0xa0, 0xfffffffd, 0x2, 0x0, 0x3ff, 0x0, 0x8, 0x1, 0x7, 0x5, 0x469d, 0x1, 0x400, 0x2, 0xa, 0x9, 0x1ff, 0x3, 0x7fff, 0x6, 0x57, 0x181, 0x5ed, 0x6, 0x5, 0x3, 0xffffff01, 0x401, 0x92, 0x21ce, 0x400, 0x0, 0x10000, 0xf, 0x7, 0xc96, 0x58d0, 0x5, 0x3f4, 0x1f50, 0x6, 0x7ff, 0x0, 0x7, 0x2e, 0xb3, 0x0, 0x4, 0x4, 0x200, 0xad7d, 0x1000, 0x3, 0x9, 0x6, 0x10001, 0x6], [0x0, 0x8, 0x8, 0x5, 0x0, 0x100, 0x0, 0x8000, 0x8001, 0x9, 0x200, 0x2, 0x7, 0x80000001, 0x0, 0xc, 0x8, 0x7fff, 0x80, 0x7, 0x1, 0x3ff, 0x8, 0x9, 0x4, 0x7, 0x6, 0xa7e, 0x3, 0x696, 0xde, 0x6, 0x0, 0x101, 0x5, 0xc, 0x400, 0xc9c, 0x3, 0x3, 0x4, 0x0, 0xd9, 0x9d9a, 0xffffff65, 0x3, 0x7, 0x4, 0x53, 0x2, 0x8, 0x0, 0x100, 0x2, 0x3, 0x2, 0xd53d, 0x10, 0x800, 0x4, 0x80, 0xfffffffb, 0x2], [0x2, 0x7fffffff, 0x1000, 0x1, 0x5, 0x2, 0x6e, 0xa, 0xb8a, 0xffffffff, 0x80000000, 0xed, 0x100, 0x8001, 0x100, 0x1, 0xad4d, 0x4, 0x3, 0x9, 0x3, 0x2, 0x2, 0x2, 0x1, 0x5, 0x3, 0x88, 0x0, 0x639, 0x6, 0x8, 0x2, 0x9, 0xed90, 0x8000, 0xffffffff, 0x3, 0x0, 0xffffffff, 0x5, 0x2a1, 0x56, 0x7cc8, 0xc08, 0x5, 0xb, 0x3, 0x7, 0x8, 0x8, 0x800, 0x4, 0x1, 0x4, 0x0, 0x1, 0x22, 0x5, 0x9, 0x2, 0x0, 0x3, 0x7], [0x8, 0x7, 0x5, 0x8, 0x5, 0x1000, 0x5, 0x3, 0x5, 0x800, 0x2, 0x0, 0x101, 0x1, 0x80000001, 0x507, 0xf, 0x6, 0x8000, 0x8b97, 0x7, 0x4, 0x8001, 0x4, 0x40000, 0x10000, 0xfffffff3, 0x1, 0x91, 0x0, 0xf, 0x5, 0x8, 0x3, 0x10001, 0xb, 0x7, 0x536, 0xe7, 0xc, 0x101, 0x7fffffff, 0x3, 0x6, 0x4, 0x0, 0x51e19e15, 0x3, 0x64ba, 0x6, 0xd0, 0x6, 0x5, 0x8, 0x3, 0x1, 0x10, 0xd25, 0x7, 0x1, 0x73, 0x248, 0x7, 0x7]}, 0x45c) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000000)) socket$tipc(0x1e, 0x5, 0x0) 15m16.596030875s ago: executing program 4 (id=945): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100), 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002540)=""/1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind(0xffffffffffffffff, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a980d39d7a1efef815b", 0x81}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae3", 0x71}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000000000000000000001000000ff000056df27bb76a0c4c02a354f90106d3a00000000001400000000000000000000000200000057020000000000001400000000000000000000000200000009000000000000001100000000000000000000000100000001", @ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200000005e0000002000000f77f000001000002"], 0x1a0}, 0x41) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x0, @private1, @remote, [@dstopts]}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 15m14.658123403s ago: executing program 4 (id=948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r1 = request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='^)^&@+-}/\x00', 0xfffffffffffffffa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@deltclass={0x948, 0x29, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0xa, 0x7a359c1f0726b71f}, {0x3, 0x9}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x800, 0x800, 0x51}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7fffffff, 0x81, 0x6b2}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x2, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x713, 0x4, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x6, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1000, 0x80000000}}, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0x6, 0x6f}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1e, 0x3ef, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x6}}, @tclass_kind_options=@c_htb={{0x8}, {0x854, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x10001, 0x40, 0x1, 0x5, 0x6, 0x2, 0xfffffffb, 0x1, 0x1, 0x3, 0x0, 0xab32, 0x5, 0x0, 0x255, 0x63, 0x28, 0x4, 0x3, 0x7, 0xd01d, 0x3, 0x5, 0x3, 0xa17, 0x7, 0xe167, 0x8, 0x5, 0xff, 0x6, 0x0, 0x7, 0xeb, 0x45, 0x7, 0x80000001, 0xc2, 0x7, 0x10001, 0xfff, 0x101, 0x7, 0x86, 0xf590, 0x1, 0x8, 0x4, 0x40, 0xc, 0x7fff, 0x3, 0x6, 0xd4, 0x4, 0xa05, 0x2, 0x7f89, 0x915, 0x5, 0x4, 0xf, 0x3, 0x1, 0x8, 0x42a3, 0xf022, 0x8, 0xfffffff7, 0x10, 0x7, 0xff, 0x6, 0x800, 0xfff, 0x86, 0x2, 0x9fdb, 0x8, 0x7, 0x1000, 0x76, 0x4, 0x6, 0x0, 0x0, 0xe9, 0xfff, 0xfffffff0, 0x2, 0x9, 0x4, 0x8, 0xeca, 0x4, 0x3dd5, 0x0, 0x8, 0x9, 0x3, 0x400d, 0x9, 0x101, 0x2, 0x926, 0x2, 0xfffffffb, 0x6, 0x4, 0x9, 0x6, 0x0, 0x4, 0x7, 0x9, 0x40, 0x0, 0x8, 0xb, 0x2, 0x1, 0x9f33, 0x4, 0x0, 0x7, 0x200, 0x3, 0x0, 0xe7a, 0x6, 0xdcdb, 0x9381, 0x8001, 0x4, 0x1fc000, 0x8, 0xffe, 0x6, 0x10, 0x2, 0x5, 0x11, 0x800, 0x2, 0x4, 0x6, 0x15a8, 0x3, 0x1000, 0x0, 0xffff7fff, 0x5, 0x7, 0x1, 0x4, 0x1, 0x6, 0x4, 0x3, 0xa, 0xe5c, 0x7fffffff, 0x2, 0xe, 0x4, 0xa, 0xa28, 0x4, 0x6, 0x2ee, 0xfffffffb, 0x1, 0x10001, 0x800, 0x7, 0x3, 0x6, 0x1, 0x3, 0x5, 0x2, 0x100, 0x1, 0x2, 0x5, 0x1, 0xffff8000, 0xd, 0x8001, 0xa95a, 0x5, 0x7fff, 0xfffffff2, 0x0, 0x2, 0x6, 0x3, 0x7, 0x2, 0x400, 0x6, 0x0, 0x0, 0x3b711917, 0x4, 0x6000, 0x6, 0x5, 0x3, 0x101, 0xc, 0xffffffff, 0x7, 0x3ee8, 0x1, 0x7ff, 0x3, 0x5, 0x3, 0x101, 0x5, 0x7, 0x10, 0x8, 0x0, 0x452a, 0xa1, 0x0, 0x8001, 0xffffbf16, 0x881, 0x81, 0x3, 0x2, 0x5, 0x8, 0x2a8a, 0x2, 0xf, 0x10, 0x9e7, 0x7fff, 0x0, 0xd36, 0x4, 0xe, 0xdeca, 0x81, 0x1ff, 0x7ff, 0x6, 0x4, 0xfffffbf2, 0x3, 0xfff, 0x3]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x7, 0x6, 0x4, 0x3, 0x1, 0x40, 0x8000, 0x7, 0x8, 0x80000000, 0x265, 0x2, 0x6, 0x2, 0xed, 0x680, 0x6, 0x6d55, 0x3, 0x1, 0x81, 0x80, 0x3, 0x16000, 0xe, 0xb, 0x4, 0x6, 0x9, 0x9, 0x6, 0x0, 0x1, 0xfffff8e0, 0x2, 0x7, 0x0, 0x7, 0x4, 0x81, 0x0, 0xf9, 0x9, 0x7, 0x6ae7, 0xfffffffc, 0x80000001, 0x0, 0xfffffff7, 0x7, 0x662e2edb, 0x2, 0x83, 0xa, 0xfffffffa, 0x4, 0x8, 0x7ff, 0x3, 0x2, 0x5, 0xa77, 0xf, 0x3, 0x0, 0x72, 0x8, 0x4, 0x9, 0x0, 0x6, 0x0, 0x8, 0x2, 0x10001, 0xfffff125, 0x2, 0x9, 0x7ff, 0x7fffffff, 0x30f6, 0x10000, 0x3c7, 0x8, 0x81, 0x1ff, 0x167, 0x5, 0x7, 0xc78, 0x1, 0x8, 0x6, 0x6d0e, 0x7fffffff, 0x2, 0x1e, 0x6, 0xfd, 0xfffff822, 0xfffffff7, 0x7fffffff, 0x10000, 0xe, 0x8569f3f, 0x6, 0x1000, 0x4, 0x8, 0x8, 0x9, 0x7f, 0x7, 0x0, 0x1, 0xee, 0x2, 0x8, 0xd, 0x9, 0x4, 0x6, 0x0, 0x39e, 0x3ee2, 0x7, 0x5, 0x1, 0x8, 0x53d0, 0x4, 0x1c, 0x8a24, 0x80000001, 0xb, 0x10, 0x5, 0x9, 0x6, 0x3d, 0x8, 0x3, 0x7fffffff, 0x1, 0x1ff, 0x2, 0x72a9d77b, 0x5, 0xc, 0x0, 0xab78, 0x52be, 0x0, 0x1, 0x4, 0x1, 0x8, 0x7f, 0x8, 0x3, 0x6, 0x4, 0xd66, 0x7, 0xf, 0x9, 0x3, 0x2, 0x1, 0x3ff, 0x7ff65cd5, 0x6913cba, 0x40, 0x7fffffff, 0xff, 0xd9, 0x631d, 0x8, 0x5, 0x200, 0x0, 0x401, 0x2, 0x0, 0x0, 0x2, 0x20, 0x3, 0x9, 0x64d03958, 0x3, 0x0, 0x6, 0x24a7, 0x9, 0xe00, 0x6, 0x7af, 0x10, 0x9, 0x2da, 0x6, 0x2, 0x3f6bad27, 0x6, 0x80000000, 0x1d5, 0xf8, 0x8, 0x6, 0x2, 0x3, 0x2, 0x8, 0x2651, 0x6, 0x9, 0x4f4, 0xfffffffb, 0x5, 0x6e4, 0xc, 0x9, 0x19ec, 0x7, 0x3, 0x2, 0x8, 0x4, 0x80000000, 0x87f, 0x6, 0x5f, 0x2, 0x9, 0x7, 0x8, 0x2, 0x0, 0x4, 0x2, 0x6, 0x1c98852d, 0x3, 0x0, 0x1, 0xfffffff8, 0xf75, 0xf65c, 0xf, 0x2, 0x1, 0x75d4f834, 0xf462, 0xfff, 0xfffffffb]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x5, 0x1, 0x2, 0x4}, {0x3, 0x2, 0x1477, 0x10, 0x9, 0x100}, 0x7, 0x80000001, 0x6, 0x0, 0xa670}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}]}}]}, 0x948}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r5, 0x0, 0x100000000000000}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000940)=0x707987cd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000340)='!\x00', &(0x7f0000000380)) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000002c40)={0xd, @sliced={0x10, [0xffff, 0x2, 0x3, 0x2, 0x401, 0x7, 0x3ff, 0x8000, 0xadbf, 0x5, 0x9, 0x61a, 0x2, 0x2, 0x1, 0x91c, 0xfbff, 0x1, 0x8000, 0xffff, 0xfffe, 0x4, 0xff, 0x4, 0x10, 0x9, 0x33d, 0x9, 0x4, 0x1, 0x101, 0x81, 0xf, 0xdb, 0x7, 0x9, 0x6, 0xffff, 0x7f, 0x4, 0x5, 0x20, 0x9, 0xa, 0x38, 0x2, 0x8, 0x40b], 0xfffffffd}}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00042dbd7000fcaf80ce160b063bce250100000008470ab64f30a9a00099f1f021c46e4af1738a7a4ba5198d79faab4cc8405dbdff5933a46b183e20c079c7a337c243c5996eed39c1ac048948c5912c27eebe0124cecfd25e469ef0075a12a6e73fdf01854b7e8134fe29a18c1f5cdd11cb9aac59ef2c425d5949fe879d41f1f87c3296c0274e845c229c1333f20b7d2b3e572141eb6ad8d471eb8032e1bde9ce5da15f2c294c52261d7d614d86402290a62641702aa6f63e6e023413ea6a3b92d16c658c3d76db88f646c0b767864c7afb2f154db9f7670c8b940363efb900e55cd80d8ea9a03551f051e47e66cdd942b846fa5982b8b55211fb841ad33f2db8b9b3a9e4e356833d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 14m57.512543725s ago: executing program 32 (id=948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r1 = request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='^)^&@+-}/\x00', 0xfffffffffffffffa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@deltclass={0x948, 0x29, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0xa, 0x7a359c1f0726b71f}, {0x3, 0x9}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0x800, 0x800, 0x51}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7fffffff, 0x81, 0x6b2}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x2, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x713, 0x4, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x6, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x1000, 0x80000000}}, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0x6, 0x6f}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1e, 0x3ef, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x6}}, @tclass_kind_options=@c_htb={{0x8}, {0x854, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x10001, 0x40, 0x1, 0x5, 0x6, 0x2, 0xfffffffb, 0x1, 0x1, 0x3, 0x0, 0xab32, 0x5, 0x0, 0x255, 0x63, 0x28, 0x4, 0x3, 0x7, 0xd01d, 0x3, 0x5, 0x3, 0xa17, 0x7, 0xe167, 0x8, 0x5, 0xff, 0x6, 0x0, 0x7, 0xeb, 0x45, 0x7, 0x80000001, 0xc2, 0x7, 0x10001, 0xfff, 0x101, 0x7, 0x86, 0xf590, 0x1, 0x8, 0x4, 0x40, 0xc, 0x7fff, 0x3, 0x6, 0xd4, 0x4, 0xa05, 0x2, 0x7f89, 0x915, 0x5, 0x4, 0xf, 0x3, 0x1, 0x8, 0x42a3, 0xf022, 0x8, 0xfffffff7, 0x10, 0x7, 0xff, 0x6, 0x800, 0xfff, 0x86, 0x2, 0x9fdb, 0x8, 0x7, 0x1000, 0x76, 0x4, 0x6, 0x0, 0x0, 0xe9, 0xfff, 0xfffffff0, 0x2, 0x9, 0x4, 0x8, 0xeca, 0x4, 0x3dd5, 0x0, 0x8, 0x9, 0x3, 0x400d, 0x9, 0x101, 0x2, 0x926, 0x2, 0xfffffffb, 0x6, 0x4, 0x9, 0x6, 0x0, 0x4, 0x7, 0x9, 0x40, 0x0, 0x8, 0xb, 0x2, 0x1, 0x9f33, 0x4, 0x0, 0x7, 0x200, 0x3, 0x0, 0xe7a, 0x6, 0xdcdb, 0x9381, 0x8001, 0x4, 0x1fc000, 0x8, 0xffe, 0x6, 0x10, 0x2, 0x5, 0x11, 0x800, 0x2, 0x4, 0x6, 0x15a8, 0x3, 0x1000, 0x0, 0xffff7fff, 0x5, 0x7, 0x1, 0x4, 0x1, 0x6, 0x4, 0x3, 0xa, 0xe5c, 0x7fffffff, 0x2, 0xe, 0x4, 0xa, 0xa28, 0x4, 0x6, 0x2ee, 0xfffffffb, 0x1, 0x10001, 0x800, 0x7, 0x3, 0x6, 0x1, 0x3, 0x5, 0x2, 0x100, 0x1, 0x2, 0x5, 0x1, 0xffff8000, 0xd, 0x8001, 0xa95a, 0x5, 0x7fff, 0xfffffff2, 0x0, 0x2, 0x6, 0x3, 0x7, 0x2, 0x400, 0x6, 0x0, 0x0, 0x3b711917, 0x4, 0x6000, 0x6, 0x5, 0x3, 0x101, 0xc, 0xffffffff, 0x7, 0x3ee8, 0x1, 0x7ff, 0x3, 0x5, 0x3, 0x101, 0x5, 0x7, 0x10, 0x8, 0x0, 0x452a, 0xa1, 0x0, 0x8001, 0xffffbf16, 0x881, 0x81, 0x3, 0x2, 0x5, 0x8, 0x2a8a, 0x2, 0xf, 0x10, 0x9e7, 0x7fff, 0x0, 0xd36, 0x4, 0xe, 0xdeca, 0x81, 0x1ff, 0x7ff, 0x6, 0x4, 0xfffffbf2, 0x3, 0xfff, 0x3]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x7, 0x6, 0x4, 0x3, 0x1, 0x40, 0x8000, 0x7, 0x8, 0x80000000, 0x265, 0x2, 0x6, 0x2, 0xed, 0x680, 0x6, 0x6d55, 0x3, 0x1, 0x81, 0x80, 0x3, 0x16000, 0xe, 0xb, 0x4, 0x6, 0x9, 0x9, 0x6, 0x0, 0x1, 0xfffff8e0, 0x2, 0x7, 0x0, 0x7, 0x4, 0x81, 0x0, 0xf9, 0x9, 0x7, 0x6ae7, 0xfffffffc, 0x80000001, 0x0, 0xfffffff7, 0x7, 0x662e2edb, 0x2, 0x83, 0xa, 0xfffffffa, 0x4, 0x8, 0x7ff, 0x3, 0x2, 0x5, 0xa77, 0xf, 0x3, 0x0, 0x72, 0x8, 0x4, 0x9, 0x0, 0x6, 0x0, 0x8, 0x2, 0x10001, 0xfffff125, 0x2, 0x9, 0x7ff, 0x7fffffff, 0x30f6, 0x10000, 0x3c7, 0x8, 0x81, 0x1ff, 0x167, 0x5, 0x7, 0xc78, 0x1, 0x8, 0x6, 0x6d0e, 0x7fffffff, 0x2, 0x1e, 0x6, 0xfd, 0xfffff822, 0xfffffff7, 0x7fffffff, 0x10000, 0xe, 0x8569f3f, 0x6, 0x1000, 0x4, 0x8, 0x8, 0x9, 0x7f, 0x7, 0x0, 0x1, 0xee, 0x2, 0x8, 0xd, 0x9, 0x4, 0x6, 0x0, 0x39e, 0x3ee2, 0x7, 0x5, 0x1, 0x8, 0x53d0, 0x4, 0x1c, 0x8a24, 0x80000001, 0xb, 0x10, 0x5, 0x9, 0x6, 0x3d, 0x8, 0x3, 0x7fffffff, 0x1, 0x1ff, 0x2, 0x72a9d77b, 0x5, 0xc, 0x0, 0xab78, 0x52be, 0x0, 0x1, 0x4, 0x1, 0x8, 0x7f, 0x8, 0x3, 0x6, 0x4, 0xd66, 0x7, 0xf, 0x9, 0x3, 0x2, 0x1, 0x3ff, 0x7ff65cd5, 0x6913cba, 0x40, 0x7fffffff, 0xff, 0xd9, 0x631d, 0x8, 0x5, 0x200, 0x0, 0x401, 0x2, 0x0, 0x0, 0x2, 0x20, 0x3, 0x9, 0x64d03958, 0x3, 0x0, 0x6, 0x24a7, 0x9, 0xe00, 0x6, 0x7af, 0x10, 0x9, 0x2da, 0x6, 0x2, 0x3f6bad27, 0x6, 0x80000000, 0x1d5, 0xf8, 0x8, 0x6, 0x2, 0x3, 0x2, 0x8, 0x2651, 0x6, 0x9, 0x4f4, 0xfffffffb, 0x5, 0x6e4, 0xc, 0x9, 0x19ec, 0x7, 0x3, 0x2, 0x8, 0x4, 0x80000000, 0x87f, 0x6, 0x5f, 0x2, 0x9, 0x7, 0x8, 0x2, 0x0, 0x4, 0x2, 0x6, 0x1c98852d, 0x3, 0x0, 0x1, 0xfffffff8, 0xf75, 0xf65c, 0xf, 0x2, 0x1, 0x75d4f834, 0xf462, 0xfff, 0xfffffffb]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x5, 0x1, 0x2, 0x4}, {0x3, 0x2, 0x1477, 0x10, 0x9, 0x100}, 0x7, 0x80000001, 0x6, 0x0, 0xa670}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}]}}]}, 0x948}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r5, 0x0, 0x100000000000000}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000940)=0x707987cd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000340)='!\x00', &(0x7f0000000380)) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000002c40)={0xd, @sliced={0x10, [0xffff, 0x2, 0x3, 0x2, 0x401, 0x7, 0x3ff, 0x8000, 0xadbf, 0x5, 0x9, 0x61a, 0x2, 0x2, 0x1, 0x91c, 0xfbff, 0x1, 0x8000, 0xffff, 0xfffe, 0x4, 0xff, 0x4, 0x10, 0x9, 0x33d, 0x9, 0x4, 0x1, 0x101, 0x81, 0xf, 0xdb, 0x7, 0x9, 0x6, 0xffff, 0x7f, 0x4, 0x5, 0x20, 0x9, 0xa, 0x38, 0x2, 0x8, 0x40b], 0xfffffffd}}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 11m27.872125342s ago: executing program 2 (id=1537): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x84, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) 11m22.764151012s ago: executing program 2 (id=1546): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mknodat$null(r0, 0x0, 0x1000, 0x103) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file1\x00', 0x60000b24) 11m22.453110628s ago: executing program 2 (id=1548): socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x1256, &(0x7f0000000400)={@broadcast, @local, @void, {@mpls_mc={0x8848, {[{0xffff0}, {0x3, 0x0, 0x1}, {0x9ff3}, {0xffffd}, {0x4}, {0x9}, {0x4}, {0xffff8, 0x0, 0x1}], @ipv6=@icmpv6={0xf, 0x6, "b40c04", 0x1200, 0x3a, 0x0, @private1, @empty, {[@fragment={0xc, 0x0, 0x3, 0x1, 0x0, 0x0, 0x66}, @dstopts={0x67, 0x2b, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x7, 0x8f, "bbc9393a40a864bd3c715a5b6b98a7fa88cee703fea368e95d8d5802d322165ebb433771196791762d5a81618372b70707e6f3c2463864556750e13cc86fbf8c5928ca2b83c4742260da2b0d88fac17e6224945e1b2e55ff9c0089da3b5204fe3a5bab19dbebc38d147a3259ab989bb8e79e092b1b7634ccb1b6903b5d90ec9b12598a4d5728ecb216973791d4a9c8"}, @pad1, @generic={0x30, 0x9f, "a7eab43a5aa08dcea15b3f0226f41584ee316b2970cd368f20500656e5a65c2c7f5910d6e0820338aad962edb78ad2c10a6b33aa1ef21e242609227c78c5b373a6bbde038e597a067749d30aff4f8a919624d661d9214fc671ef81614f050accf011b064eec6235463418ef4faac61486182bba6aef7a02272e9258df48682adf5ffc899f850bdb63070dd890d25ae0f7bb29e8b2125dba79c77bc772deea0"}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @mcast2}]}, @srh={0xe7, 0x2, 0x4, 0x1, 0x81, 0x40, 0x4, [@empty]}, @fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x67}, @srh={0x3b, 0xc, 0x4, 0x6, 0xf, 0x78, 0x4, [@mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], @echo_request={0x80, 0x0, 0x0, 0xd75d, 0x8001, "19450c3059c912c4179d9f752a524c888c384ec3dc8c249a66df3285b59760a34b66c2c02df0668c60bcbb6203a4f4bdf9d1ec57053aa6929cc4660d69fe38ea16374474dcc01807f8592174df743137ccfeea983a3942ccf1c34b6ad7a8c869b5c10c4ee4d33d514d50602ece39e326ddef4c23d01da33660a4302c7f4d88fba46f361cb732f337e2d011ad510f2e450b88440295960eeb10c9a2b7be53510d39ccfeaffe8ac65b19c432e3582e6c4e6a1e346265e1c19e261f64d88e53afaa6f52b190500cf8bffdb6ddf865506f5697fa2bae2024f53836b0d2c7d97d2e375310090cba01ef01621c756d65bdd5ac470a428c74e4bc1891ac08472e42c2ecc4c99dcf90e268e1e0b31105993cede4443f3a22b548fa7ded886ad6044ba353df72dfaaef5ce63471466136bd5f70c39102f09482375c99377eaeda8629ae17397297a0cbabf685962a1de114e0470cf41586cf0673e4ef69d27a713a5164b2981b03f4652a4bf230df896fbe3bea575db06d6d964556f9f8fc470151412208b3d176cfd1c61c6bd058f5ede2b0bd6685b194e52c32e591c303f5ed54ee86eabd3877e4ebba3304e4f3eef63262e6995f84ce49a1fc1fa753b9d7a28d44cbb236d0b2e0ab41d6ce275917e37986f87b79a2ac562b851ba6bb4c4ba9ef384290092362673cabb14d23e6673f262471c2d1aea743f1d8534473b91b7c0e89a42f6b870f49220482e0bbecd737637b96e648557da93d76a5ccbad9de06c9d6f8fc4d664ce4e594d313b4fd7a49fb10823d281f7b2b0ab66171bd4399c6811c5053196c603d1908f55fd9dd54a01ca3894968ec63d21ef8514ff60ef5b872b92260510046e0981837fc8c0847a5c487daf1ebe6dfe08189c4b1d263653f061fdf35bd1f709b5efcd2b6b5b45f4ba646fe1cdaa0297b097758b92f36665feb1b9ad39eca2571a5443addebe477d562852553e8a7d0b11e2e8724c82f5dc69efacb9b5b6cd3b21ddf4e6df8b4e7a5db706ba8a282f482fe4f7836725785973002819deaafbe63881fbdfd77cdfa9cb81d7e4d194d26f8fd4b96c216c69d26927732ab8ecf5da5ceb7336d09a69c74aa7bd70f4d9fea752be3a3a9ff20c4658b13250639f9e6ceb53536a38298d24456382d90f678146c08dacc09c386c553c72a47d64e322c352df9b8c38e33b0fe8356c8985e5cf8d422d521860be22483e3de8f4d1205bbf4b587da310308138ff55f9d679f8b22fb2993962584f6de4cf068dab963ca91ce3d67bd35f8349a229f77e27038aeb4f3d3ba960935648ee575545d388e7140f42700fdeee34d177a3f33278ee925992ce48933a3b06556b227c638bd6eec9b35db6921b804529e1c028851294cc9d969f874d8466a3fb539e7fe791f791851c6481bba488f68456847ee68074e7e95ea966db181016dba4f8a3e073b85903211b2304f7bb505bcd088781191305c19ffa2ee5f8726e0482ab9752d0de0ff8096b601b1cb0217043deb848e9ea9e54f1154d1dbf1f0ce41c17c99c936b458e05018ba27eff02bc5eb7838ec1984f5761e0e813e2c7daaafbf87288534206da61bd9a4b6dd72e31988fe7ac5d7a28faef96b5a54950ae20edd66ee5beacdeb6f0790fca64b22fe40da5c73a603d9dff69b859ed97b7891fa1b3ff0cafcdc98eccdfbc81a70e68905ab88fe9dc625f2445fed784ff3fcd9058a336293788f2f0532451b86bfacf80b1a3a01b824a34dcc1dbfa01bf31b6991a53be1be0f48bd643766ca2a8efbc98a5b7fe61b53bfa2935b3ea0d4ea7ef6c73183e1c207d274f03a2fd04b9c6579421cd5af91f0e2564151403a5517aa13cc5acb54146dfd030f37def05b573b0e86249a241ed090d4817ee52e38242288ae343f6d21794e6748d83111ce53beea6bf9defbe6e284db50dd9baf7d3eb58d515863aae37ae9e29b44d641ee47d2191f5a3a5f37d2d30ae3d1fe7d4eb5fd3749a59b2481ffd0895d642ea1fed72edc266516937f5263e25877e25c066ad1e7520704a449f435061423953d6267af29907d7207882859d56d0ea31d4f26520b0de98a184bb0cbe1e6fae6c7a953fb1069faead1ca3303b12b2ec5db410ab68b44fb8215ba1cee351c09847cd61327b68c311c1e52f6befdb037f2fdd35ff28aaeffafdd1ea9c50097ba5b3b8fb83796710764ab6fab2c6ba0d4c46374fc01bb2c69e30e6d00dc7e8c1dba61f259694930cee31d7d6036d76c07abb737c697f0486d23134498e8e19bca99a076c88d68f0f523a87570f8e352de46e292cfc0793af638e6366c73b7ed030eeb2a3244715edad0753c13d702e13d3236c915281a43d8d0686d17d253a19ad3b04851cd0275352a2ac32ae4209ab1350a93eea56f9ea2fedfca33aa433371320a4cf69697d3ca40f1bdceeaab2422a4d469df125fe817a6f83ba896fff046b259fac2096c930c6350efee407ada51543a5db43509edcfe846bb971f72b9bb2b6c266309f765a16f281894fbe5d0a2a85df84fa522d2cb21e71a2f8faacbacff0d6dbae9f83537fe4da3449b09608433ab2e8c913d21a56af723ffda319ee6f04a2320f40cd6666b9b32104ea99b4bbdd5550dc2fbef6bafa22cc61d9a0fd3d1d645328f224cc7533e67043b7b3cd96b6d8af5be549974d6e5af47e5e81e82af927ef84903960fa6cad618c3b4082d3d6303d54610cc292ee5e23a16e73abf2d8e8e0423ae3edefdee38fdec54d286c80bd46bd97b36b5a34ba311922df8ccc3045d52d911697c9de5c24e0efb21cf20af490284e7ef3674236ba6b085f0fb64931b3cf932b92377ddcb0fb379d0efc4010ff8f953112f30e54fc0779dde09f353128b915b6f036367981e7a78ea9c1831d7f84b5bff6a45b91d4d9a100865e00ac5a878359f44d3a90f7304fdb86ec94e33bfc5f6e1c05049fe6f258203474cdcfe2a9dfb380b76342a27b1066064c13155d9ac3908587b25b821456bb31fc893e97dc34f2c0c8a0198eac3ced101d0a53538bc3e22fca572e72c04d2369814fb25c28c2f5cfd1f4690dcb386bce2e5238e80b4756d791d13cbb3974fd1c38f2fbd6d1f76dfb046ac45181183eee676655425f56b1b62f2418721df871e6b273fd461d3ca705a5d18bc9bf5e50c3fae56d41ecb1307a162d4513505fcfe30ba4ae28d73e3c2c0abb03643a991c323312da844563d0a8a8ce4f59d635413a49f0c52dcfa6e883c59f40f33e0124f14138641b7fb2ffe6de32d9b4262ade91da764286d901e263f5b038707f9be33ad3a4aead707614d463d0e51a673f5446bc7c3103d2c590344103f373ee9ffd35882aa9033348bca215132cb4a9a6ac18cd0e8955fd112da778093b9b306160e5c7cc1e38e9f961a4df3a43028948f7ad10f3d5f1f30f276204948b68336655769434387b7ffadd4c6f543456b0d516cad2d0844828d8adbd8154f241a5c329b8f98e43d80680ee28e52737263b22056c0bcbc98e44742336fa05945c29d1b6189d9b23592b66c3e473f0d60a1831467bbd12d4f1d216123ad6c39ed14ea0e293b94be1f299e400cf0a58eea4d2ae451f0b1bf32ccf2951b0879c4e2e1f135dbdcb073772b5731232c88fd05a261d9de131871d81bc864ac9c52a67baa3d837c09ccf066ad557f549b62c7a9378de9ba97405586e309c185c423081e041f44e4086cd6bb0a903d8833295f00afdcc708c7ac9436218ea38f2e88e95045c28407dabda8e0e0bbd07c20309de154c30f7cee6742695bc33fdaedf6031835264dfd432042fd241611b3c66948b7db053aaca446426d24b237b84bfa206af6726eb52dde83e2f0bc96e357fecd706a8610526323816101cf951a6c90eb5e363184222765f2f454226a3ed8e188854a94d3b47684ff74c1c212695e8ed0e9132740f74dde5fad04928edb40c037ec8464bcd1b86b512b3e9f7df0539deba6fcd019cac85606e528380ef70e4a00e5c16910a1021c84d54bf6c88b81444498fb876d188d6aec8fa42ed0060e70a4dc81a63cb43653af7dda901740004b990b53c9500cebc5e99add20144b11a918a6825933e88415beb2b579197ae2273993e1c12cdb1c4dee4c31518d11725b242cb3f3aba1ae3ee61570fee20fd823b8a5db12f6bcb638511970bd118517fc48a98c2a6ab8c406317f297d1956c306a186a0dbd9922e4ed775a1b07d580a7dc66a046134fa861673e3b302960d64eab8817780946ccf2406100097e9e20e11c114f3c5ac553164c4112447988a8821980bbcb0ec3df7b90cb6736f97d95fa2d43cf76493ee245623e23b8e6e66f190e55249b7004b6a9ca8d1944d820b43c70f4e591d27d98684eeeb2d6a6c7e98688fc382ddca9a7ab451178bb73510cb8fa5e61c0fef28e9baba09b106527d72485db9c68fd07848f473d81b1b9d08e58e36e735371b41beabf8b58c723c1cc5d68bfa97b7341098f78dea0ae69d4502df2ddbf4ba9f3ff48e26091596fd296419d7cf69376fb56e9ea5936af0537d729fcdf032c4cd8efd0cbe35233142d5a8201b4dc9d00f72249bc23b0f67064d802306506268e4a03fc284f904453fabe1f3ce0c2c89690eb82ef7549f847fb73e02cc0c4586fd83d3118d62d34072d7d9112af63a40c2ef767462e92735fb5ff3d0d87311f65c908339273169ab27e2d37f0ccaaf661ac1cca838139ed172c564be014fd85909636eebfeaaa02967ee9c2e254680dd404e3f7879430d97a9446020eeda585691401f792812da9e21939e9c79b80d5d063c074868be9b3fe1933eaa34e11e836188e39920b277980cf0a5d03532b74f01e397c59121ed9b6a4b67c5bc4d63a859362c1dcdd8e0d2711e8a4678296361d22caae01eca38e59c0c9908f55876a5eba6091d1c7f24823054c80cab20b983d1b854e6a69b56387d547fc1c69da6fdb99388e34e77b429e1e874b9b7e8118e4401ee2d0eb64a9256b206061f81ffd82b174d9e446752819457daf6a7a71f3c42b3bb242bfe1fe4c589d422bab621a4f887f6a7f38b67418cbf659556794feb898bdf5bafc8e1e60332609ae9112ce361a1d7408cec1635dfd6b01c4078d06cc5d88875fbff418a0c75ff5d42180b2c3372b3048a9d8aa6213166f82caa8a449489f92c309c817178803572d9701da14b2b932a2ba34d0aa6d32323fc7d981ecfcb258c6bb4fffaa44fb7b51f8e50df29886885b0bf8b5a1902b3f6883f2a2d42d3eb7d35598f15e23dae2f2c9539528abce764eacfd08a630f54f7c2bbe8461d339b7cf5379ac18b16e3fff3e158d5c490644c9b330e9355422a0bbb5e55db0d528b15ce595e526fe3c8a295aba2b1ce388f1436234c47bbbacbddd589b86e8e99b6f232af58a6fe07f7a8e6da6cecca3fbf7a5a4e2f62ba6eaaef70848730171d23b9e203f36e8e0ce26ce5b8e2338cc84d6354b40d2192e4252ea6169a95f219d0ce942b7096ec1ed87c2985ffcdf099ea16d7cf3fb361e6862a537c59ce1ca9e615eeb2d3850515013f6c3da0e7d518c3215d9947a9544b00423d88d6386218d4cb3ec975bfcf0a912573d5d7a2823db723360bde66e8407eddfb9f6c902d6800e2c8be56359e7923a1d1e096bb6e624d13900ff7b1a981d927e83af2408f92054f22860fb21da2ba89d8e03f49cf01cdbb2f6dd0a7b231e61832ab305ab95c55f66d89ce79debc08e7581e06ae113a6f58eeaf2cd070f92a40ccf80d75dd7819aede6e09e85355c3c0364b2fa41497b7d271563189fac613a2c9a05e3ea51f266516b087adb73a2f708c1781"}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)}], 0x1}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006a000105fefdffffffdbdb25000900000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmmsg$alg(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0xcd048dbe2b8c12c6, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_FPU(r7, 0x81a0ae8c, &(0x7f0000000240)) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000081, 0x0, 0x6}]}) 11m21.884621661s ago: executing program 2 (id=1550): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') read$dsp(r0, &(0x7f00000002c0)=""/140, 0x8c) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x74, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xa}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xe}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_RTT={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000884}, 0x400c804) 11m20.287991896s ago: executing program 2 (id=1554): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100), 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind(0xffffffffffffffff, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x0, @private1, @remote, [@dstopts]}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 11m16.951666695s ago: executing program 2 (id=1557): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x4a, &(0x7f0000001040)={@link_local, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffc, @dev, @empty}, "e65ce9f23cda77d3"}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x101001, 0x391) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 11m1.578891627s ago: executing program 33 (id=1557): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x4a, &(0x7f0000001040)={@link_local, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffc, @dev, @empty}, "e65ce9f23cda77d3"}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x101001, 0x391) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10m37.880536241s ago: executing program 3 (id=1631): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x0, 0x0) 10m37.185422623s ago: executing program 3 (id=1635): r0 = epoll_create(0xeb5) r1 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x261) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) readv(r2, &(0x7f0000001e00)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/105, 0x69}, {&(0x7f00000017c0)=""/173, 0xad}, {&(0x7f0000001880)=""/225, 0xe1}, {&(0x7f0000001980)=""/228, 0xe4}, {&(0x7f0000001a80)=""/107, 0x6b}, {&(0x7f0000001b00)=""/207, 0xcf}, {&(0x7f0000001c00)=""/242, 0xf2}, {&(0x7f0000001d00)=""/95, 0x5f}, {&(0x7f0000001d80)=""/110, 0x6e}], 0xa) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) clock_adjtime(0x17, &(0x7f0000000000)={0xb, 0x0, 0x200000, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000170b1b1ddc0b11966f4a00"/38], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x8}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000180)='./file0\x00', 0xa) 10m36.464462924s ago: executing program 3 (id=1639): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) 10m33.708257668s ago: executing program 3 (id=1645): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@empty}, 0x14) 10m33.437151538s ago: executing program 3 (id=1647): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r3, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e04083520b5"], 0x7) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x40, 0xd, 0xce, {0xce, 0xb, "d2b139cb55f8240631761ca7a056870d4d22d7b92ecbd2c02f5aaaee4e331ad18b9e1954e984b82f6764da62b3a056e7e878dd985ad25db61876b85cfc1e38fbbc234ed47cc6e2fb316206e53b80ccac93bcbf3e69eefa7a47f2ff3135d5ae8e8cf22adf2c0d712e8d533452b76a052b3ba12245e4d62b3064fe9b043cdcb74b5181942cc2b30d9862d9a2be5eee3c827b91360654d892d7a7db711af3815b31348aa76cfbdac93c84317c6b638b553259a603c8f8ecad7f94d9d93ff6a85b91a7683ad3438eda217376df73"}}, &(0x7f0000000100)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "d6fe679492c71993de0fa00930172c2a5ffc60268a1feb440b6343eeb782dcd5373f9a2f167bf05ba5e3e430ca1a64669df0c9679a19129e6c745c37920eaa50928968ec21000ea48d33024eceaad21cfccc8a3ad6c1aff57a19dde627ba7ba95ee28ae34af11f7b878d7edc27feed1403e7ac9082ff8aab037b1f5b71717ae675a3657043ef88f66b0fd86b0be3a56a183a6327dde0f70d86"}}, &(0x7f00000001c0)={0x0, 0x22, 0x4, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x2, 0x2, 0x1, "bc94"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x9ae}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0x1, 0xb6, "15b52a3f02ca628c83bfbff3c0e58c03298e784ed1dcc79ee87c917fa8a3bcb033158491ee4808e53a6eb59bdf3d58f882ec430e62f8d1a35c2cea82c6c680e7abfa363ac25391d50b2c2c38a94ae1a6836b610360a2403a94620db4ec7773b44e236b2035c3883081c35198c38938af23282835fb475748493aa141076bf3b3f75107934a93b3ae7e5b2f8f1230c9223742e0494e1ece703cb61e451ed13f32d30ce1f1a4061d0b22732288d2c356745975574016d9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xa6}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xa7, "5d954920ff1212af2ef21931c741d1692ff99d0f51b7754660a813413be39571bd161f5bb6ca16bc833b6ca50c13377d7a0b8b2836d2265187ce9ba16258986d07cdb27af320aa3db1ca7ca972ea7e6bb85c06cab1be25f5ba3b92b581a22efee938cd76cfc6d15f0ec2dc6fb7a6d6d31e33169f6c51a01c1a0f44d46ed83b25abdf3bbf058d4024b4bd69278b6c41162c24adb2079d539ccb3dd8b7f5096f5c7d0a7618938a1f"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xf}}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 10m32.464284665s ago: executing program 3 (id=1650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x3, 0x7fff, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='@\x00\x00\x00*\x00'/28], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x20000000000001fe, &(0x7f0000000280)=[{0x3, 0x43, 0xf0, 0x9}]}) timer_create(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}], 0x1, 0x0) syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000060900030073797a31000000000900020073797a32000000000900020073797a3100000000090001007300"/62], 0x44}, 0x1, 0x0, 0x0, 0x25001}, 0x800) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x181a40, 0x0) 10m17.226131249s ago: executing program 34 (id=1650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x3, 0x7fff, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='@\x00\x00\x00*\x00'/28], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x20000000000001fe, &(0x7f0000000280)=[{0x3, 0x43, 0xf0, 0x9}]}) timer_create(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}], 0x1, 0x0) syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000060900030073797a31000000000900020073797a32000000000900020073797a3100000000090001007300"/62], 0x44}, 0x1, 0x0, 0x0, 0x25001}, 0x800) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x181a40, 0x0) 14.167884021s ago: executing program 5 (id=2599): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x23a000, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000940)={{r1}, "02e4c32a03288af313c46a36d86b8c0ba2de93981a1071b44fbbc23ccc91de59e177893a7a6e395e930dc86472b4185077f42e6f19b24c7af6f3dcd94a13af6fcdaf8e693bbac5f64ceb1d5db4bf87666dbde119b5f9a51b79cda031e8af466d4f4f5f9d080d9352291a86fcfeff2108792389b7403c30b32c8a781517e9693bffc5e20fee1b6bbb85ecf88da49c47c121c3e45056e151d20317c2752dc2e3c7738ba8770ffe7cacdd95473a590f631744cd06fb0427d2861f50d40a883ee85fa1b9e7cb0a065418dfe02b099ac20e7cccdd49a3ab07f382d12a28252126ce668282f17b399f3889e6ada070ec75f830c692ceab3fd2557a1cdafe61d27c3f5b7f165d2b898e7a618e0abc4229a6fc2c835242f7f001176d51343c5057889f7757d9c2e372274ba7f5c7ea9827a2f242c0ffb2ad9cf4d5dc073e9d74917e24694c118a826686dcf8422af0a0cf8e5332395aa470837ee1f3d721620e50f92f0ea9d3db75f9ef5ff53d044ece2149b125265f01a6ff1daa33cdb0a04ae160214c8c01cecdeba8e3dbae6751449fb8579c67cd42ba7a6c0f4bad8155a939fb284042da72f8c3503e302f9acdca8da7c3316d24dd11ca8668ba77d981478d0be02b1b217f79b0c8ef73d04a2092b8a659050b1c19c45ba062cfcf47be95070e968ac64edebece341754f6cd236543394323627e0c47ffa7e4ff49024f3c71d01c2964fe565bc489cebe698ae5072ef794b2930938f1b71ad0ecb04bd1347f332bb9e8bf974e0d0886b89122c5a5dc32c170564542715f576eca004133061e184c9ed5733eb18c8192eaa78d36e99cf9a52984aaaf44f710c18a72d75af1e11cab5516fd85a7990e71f5b742573b79dd04d1ed3c6bf5856aa4afb0ff411b6000a3929daf997c15397c3e40961413fff9b09841ba70e77f3722dace8b419b584f27254bf6367d743f625b36cade0a69c06295fe23f328f1696cb8fed0ccb67ad3151381ccc1e61f5ed891d4fed67f47ae14594fa5d9c0b5e17b1bfd4860387b21e158cbed2c08e0c75ce8bcc7d563324fd0b84daa9f349f20071b6bb94251282600b7ae0bf61c467b54c295903ca94bd4e861f66af95a82960fed0e3d956d451757356b7bd542f80b33afccdc556bf68eb0f79632634255008b58e2ba47e7ccaa9944f247c17b1097e05577a0b2207c17481330a41e7d84e1fbafc4a6ee0965db55253fe2d539d2727250942e198498de492fa859f475a8b07bc229f393aec318555babaf1fde1dd01199779a9869be534263924f5d3671eb15837cde0aa6912363fcaacb3cd66d5b306405bf2c102aab81607fef67bafb56323a7c99d82f0398ce0b69d998ec18515ea9bc4d9fedff2bf93b728373c103ca91a6417548b7df68fba05b1d72c46899bc2a834e8d00f1d3be49250da8a674ef120a6a12710e5f5a901292c0a36385de5137b63984d0f8eb586edb8c1cc0a2ae35cc9c16d7cab52b00048376e4aa227209df382fcf4e139e1d6252853f30e35adb02f78b715d7a8c18764675f032776d55822506208b200fcdfbc2ff8fc023f5972957c7dc23f09940ad1187ffe206529f6439aaad1c01f98ee82f77d38c53a25e239c656399b8c39731ef3fa7027d2f680de4ef996fe18588aba1ed207f358b9b12daaaa1b6820bf217d6d101e9b703d5bd10b3c7a69f374de7a75a1034e72fe6a23b60b10d2dd601975e049700c96d4cea7cd4d4510d086abc48d4cf1d57bc010ea9fe69ffeea3be96ea0b0088fb7f08d13c568847b190003d5bcc04f2fc8b748bb6c4e9e54f18f80a3f5c8b1de6d74a48d4481cdacec2f08f3586e995ccf196500882f0fea40efed93b9d723c1e7b400acb72961f79c9854fa95d37998b9e8e062798684b70f5f7e8507e8d20f7404398caccefa3ac4a446621e6aa8f527f89c13b675848b221c77c06b81bd53c78b82cba947028f7d9fb37180be282781640aea2ce17f334582ffa6304bacb9887522bfff1d1592868bb2d635282fd0309874bc72cd765197ac97bf36369311616e112b28ccb1ecdca1e22bcf54e85cab3b29963ffbc2c81f55c8cc97d93e2a75a7f7ad155e549eb7606a9f1527940b1443076dd0f82986a6263166b68b3ecee695678a941672753300651e647427173100385af47fc1a6b158dab0997a3724e2def7a4be2d51490d07978faa61787741911c7e1ad781f739dce5969ce7301e72b9b539ea770f02a9d49705cae5e7606b0218180132a7687756ae06c1c22a03348c91154b598591f2e3e1cf6f925020f0a4aadaa3cda4ffe3d5dd627c4492f6ea4b63ffbbf3851330a8fa3082379be8471455443925f2554f8dd7eadfcb604f482f678dd711d2b9251bb817fa3359e2673894ab7714e4be540de01a25384fa6a588bad52e7b8f875e7768c7b82248d27ae3f39da8fb0bcb80e7830aabcd855d86a18ec43111cbe260fdd8b049d09e785067d1be034ef9d0c83a8f5e99855f7701a521566777e631ef30e05048ce7e878897b31234bf8e9324548dd22e831f97448ce143876ed9c51b8fc340519cc8aa134cf2bdafcf002ea9268d87d92a7e0f4c0038d9bb6ff8627de5a162e39ebcbbee839445207a65e93e834347c5c3659f50f825ed7085bdc0688b2c5ac710e1f2ba7d47fd63e9ae87218397d7981160cd95a521ff6c716a911eecd935d1059162104f4bfc2ebbedc5f32e4ca407b5f9839c47c10c6d9b1d8efd94786dce59641a382881e1146bd8d20893a0b000dc32cdf690b5416a715fb9629a700e74ce3d779f41ac714aa2f6a193c637c4596576005dfdaface4ab8a895b345903c8c3e516b1818babb5b05501655094190bf68a16ed8327c0db18e1706c7b00b476c955800f76519413ddc98dee76e01696dbefefe5a9c2ebeee6ac6b4516705d3706dfbad27e23113f5a36f91ae45c6b298fc74e421afa181bf45db78f03b592af6d258252536e19d1e4f69e98bf4c57fe126da341461e386b92ef98f9a391a7cbfceaa6af99531a5d423c7f19433bc5d4fe35c4c1b221f62ac522bb8ec90342490088a25eb2134cd6fe78a47df483661d0124041bc58926632dbe879a8a341799ff166485b45fc24f14f384e59bab4a2fe86c98a6d94ddd3aa9fdcbc5ea63004260fd2372917b690f1f61339f300cec4317c517b303315874cfc6375a9e06ba0be55dbd24a331d8c2d700ca07231f38df29033d36191f62cd88798a2d1d789e4c55d8f15f822e9ed5bfd7358e4c9535fcc6700b08ca4b801f935527f5473e9838dfbe5ac3e9376be6eaa22d42c8112c1abc54665c51426432fb3c97f6f394a63bb7f817a613d90d6705d525e21e525f27fee4272773a9c581c826d5df791f85266ca9f64b045842f7ea3603fd8775b02adb842f3380dcda89370747feec938d52ada85911c47fd1b52ae3dbd21c40dc6cb71fc4a2879bdebccf50f68a1f6766f4d9bd0297b00aa990d906ed0aedd209eb0f9e775caba1d057fcd56c1011e6726b11db1715fec6b1c6d9212f4f5dc1fb11b32e92d89490e7da79a080206865ddf1e479d566feff50145295b95597421e600568ea04e5bfaf73e065fe6e8f90dd9233434b65b7fa33ce965a721dcddd896a8f23df9214c39910257939dffe5b1a043a3e0f4cb53b96331644f8ee2d1b880dbed00c4873962c177163fd519bdbe9efffc315f7e80cf824980ca1f89b0ca09cc5ded5aacde4a416488631a0f2c2d9288d8ef3ad8917bda35b46054cbf9fb661065c9f901df0373994458b1a6dd4bcc70a9666ad56a21c34c020123c5b47bd1d19ebfa640bec8bd612e272df97bef0498249622810916db3a36df9b5d6775589528d0e58a5e8664c80720080ac859df6c5a64e00afc60f12947beeaf5bd7cb70a0e69cd937e4e176e994bfe852900b0b9a558d44ebe167d6531e2e74b3ce82ef15f8859ae025628dd2ea304399bedc0d8669feae64b7feb467754b8a09d9c0c5fedbfa14b39524ddbc62106c80ce2fea57b296610d7dd2a871690879dcda9e21c951e1128e0da065f94d9f96f4e7177d5b7bf4bf8a4c58f3183b7b2070d4ab02f33cf92f174aca809e1229cf712958f675b73e57c96cca63ed8e048e3638cf9f988887bdf9192750f8733b4c8b57d8861f511088d789d721dbb188533b99ef692b70e2b7ffcae51771681705d0f183751531821e3d094381ab38d48131f6d6ff3db970e5c1d62325ea793d62d56b9db23348c802b0f8e05082946f88066cb0698af4d9deed8a5f3619dc7adb32e93a6918fa08614919aa1c5ac576cc292efcc21b6f0804e0ca9e373749983ddc1ab35cac289035a599b63b94bff51e159399ebabfdc6aa40351ffb89d3855d707c34e29105e1e8eb655c0e0edba17e3e7bdfd318fa8b3b01e5584c48f18960dfbadc829baeb8e011ee2202fbb2a326d903571ce64570ea6f39c049691699fac15e66de563e92b1294b0960db102fe79cfa83e81a4549432b527cefdd275e02d9403cf9dd97d53cf98f4c4d95f1616868136587662ba9841ef3a14885d913242f2579ef3c3168dac4e7ef7d141350b212719e4943eadc5ff2d12f9c17ecd9c7541b1f547e2166f9fd8f797e7befc5fd028bcc940ec2e8e5f2e82274960dbedd5cc323caffe1923070f9cf2f663c08c612fff65445135e144dc4efbcfedda51e8b29788f0b7d8718a64e8e31a520ff6ea531a415d9aa81362e1bd636ad954091a3b38a5f81ea0e76705f57a4677882d1353bece5c93def29dddcdc45a2bec4040e49777a28963f771c79cbab5a77763d2f62a9e27b2149a905747bf4ed3c064cd5b500dd86e4f3d5a26dee37bea4a0a3d4921455aa405356465e28c5d2fb8ca0a5bcd4eb9aa0b656b0fdfafe58e5913add7772065bceba634aa9f5359b2588564f8f80c1036aeb33d077e6c98401099408da286d1c256080159f788d8f3dd2c1db7b6804007242a5ccbd451d2a1c6b1ff013baa7ed05ef500324e071f1b73c4154db01ebe52f4bb06fda19fe362e50ea673c2c4f3be2a9820b560130878d41e9c7a6650b95d7219b1d91568af5c36ee7055218a6387c5358fec97468bae283c4da42e3d76ea1bd323f1e6c58db1d1d56fe641d05446bb8ec00df857180d243c5ca7fa505dfc19f283377e9370b198aed330b0b82e930ab1031bab0f2f4f2a55257e2cf461b0b66ef32cbb000b4d24a2bd07fa0bcdb4d8f441ab259780b440211100974b56b9c293ebba25c27a18469bb2c858ffdd625ebb84c193a43ffd24670e5a9fa0da504bedc516cbcf0f84e5c6159a69c671674454a6d90b15fd02e0bcae26fb87e9bbee689cb2f00539dbf156fcc6f53824949c57e0839ad2234781f34603d1d884fc242e8ef5f627673531fa454ca5268179eb35aa41122afd75952801fd12b6880a4bd6e79fad31553e83f645b55efb8f66237247c4d3d6e67cf8ab2f214b686d79f7650d87847f05870df964096d6f2aa5787b02a5183026689ea6a2a222f1cf6e6ac39e5cffeebbd99a866b5b0c3fa193dd5dcfd2334d814a0280606ab8a07007049416ecffc5613e4615a840c0898f09c41850b19026d960573eddf6acf2296d9c40f937256c0e08e25475d0cef4df34ac5f70b97e7fee6758877f4a40fb88415acf83207b494cb661f75d38f9c752efebdb450cd61aa2cfe8b32266a84234c0a59f7b84bd8600470c1d05d06c562ceff053cd7f3f4d34f2a6fcb2ca15afe32ff90767bf337f607c5a2fcbbd2336946fa359d92d494fdabfba96f23d58b55d2f2c293d29ad"}) r2 = syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206010200000000000000000800000014000780080011400000000005001500cb7c000005000100060000000500050002000000050004000000000010000300686173683a69702c6d61630009000200"], 0x5c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r5, &(0x7f0000003680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/201, 0xc9}, 0x1}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x20, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x338, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x1040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410072786500140033006c6f0009b01a2c"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x850) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000007b280000000c000180080001", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bind$bt_hci(r5, &(0x7f0000002640)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x4, 0x8c01, 0x27, 0x0}], 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x61047}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e73657400002800028008000440000000160900000073797a3100000000080009400000000208000440000000000900010073797a090000000009ffffffffffffffff0000001400000011000100e9cbd7d5000000000000000a16a578ad2ef8ad6accca39cc6ff8975b8fa39a794b234615282cc21e607f79a345fc920c76441a656616b0f9078a79ff7008668ff73600d1acc59c14ad8f37e43be2a9b73873d682f51c28363c9481ae328a748a7b93bad77e37"], 0x90}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r12, @ANYRES16=r12, @ANYBLOB="5953fdfffffffddbdf256b0000000c0099000700000076000000"], 0x20}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) 10.403301293s ago: executing program 5 (id=2609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x34, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @pid}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000001c0)={0x2, 0x1}) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000540)={0xa, @output={0x1000, 0x0, {0x5, 0xfffffff3}, 0xfffffffe, 0x4}}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x46]}, 0x2e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a240, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80100) 7.845774119s ago: executing program 5 (id=2610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r4 = socket(0x2, 0x80805, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) 7.828707045s ago: executing program 1 (id=2612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x34, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @pid}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000001c0)={0x2, 0x1}) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000540)={0xa, @output={0x1000, 0x0, {0x5, 0xfffffff3}, 0xfffffffe, 0x4}}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x46]}, 0x2e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a240, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80100) 6.281574317s ago: executing program 5 (id=2613): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010300453b88400819151300000000000109022d0001000000000904ffff486bb22b000904fffffd0000000009048f"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x22, 0x2, 0x20, "a677c17a5a00000700000000000000ffff000000000000000000004000000259", 0x30314142}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r3, 0xd456, 0x5, 0x734a}, &(0x7f0000000080)=0x10) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write(0xffffffffffffffff, &(0x7f0000000180)=' \x00\x00', 0x3) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x3, 0x4, 0xc7, 0x20, 0x101ece, 0x9b}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x4080) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x68}}, './file0\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$alg(r5, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) 6.079799499s ago: executing program 1 (id=2614): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x404400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) shmget(0x0, 0x4000, 0x40, &(0x7f0000a61000/0x4000)=nil) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000500)) setresgid(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 4.778847151s ago: executing program 1 (id=2616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000100) 4.352471111s ago: executing program 1 (id=2618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x34, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @pid}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000001c0)={0x2, 0x1}) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000540)={0xa, @output={0x1000, 0x0, {0x5, 0xfffffff3}, 0xfffffffe, 0x4}}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x46]}, 0x2e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a240, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80100) 1.999975004s ago: executing program 1 (id=2619): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$cgroup_devices(r0, 0x0, 0x2e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x799f4f8729a3733e) fcntl$setlease(r4, 0x400, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000002c0)) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r6, &(0x7f0000001600)=[{&(0x7f0000000240)=""/41, 0x29}], 0x1, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="757365722eef"], 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116000000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r8, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 1.56089075s ago: executing program 0 (id=2620): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x20}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002dbd7000fedbdf2500000000080008000014000b00000000000000000000000000000000000800070000000000000000000000fb", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4804) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f0000000540)="00000000ffffffff1f01a0c9a1171aa56a8d710000c00700978f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b612c2b00e0100800366671f6b940bb5656235d60cb5af5c5a69e", 0x55}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket(0x18, 0x80000, 0x1) recvfrom$inet(r6, 0x0, 0x0, 0x20, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000018c0)={&(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340), 0x18, 0x1}, 0x4000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) 1.504556982s ago: executing program 5 (id=2621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r4 = socket(0x2, 0x80805, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) 1.217605952s ago: executing program 0 (id=2622): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000a80)=""/188, 0xba) syz_open_dev$hidraw(0x0, 0x0, 0x418000) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0xbd5, 0x558}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x8, 0x7ff}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x1, 0xfff}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0xb8}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000740)={[0x7, 0x280000, 0x1ff, 0x2, 0x1691, 0x7, 0x3, 0x2, 0x1, 0x5, 0x3, 0x1, 0x3, 0xe54, 0x2, 0x8], 0xeeef0000}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0xfffffd4a, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x4a}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)='x', 0x1}], 0x1}, 0x41) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000300)=[{0x400, 0x6, 0x6, 0x5}, {0xffa, 0x4, 0x3, 0x7}, {0x6, 0xf7, 0x9, 0x1}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) recvfrom$inet(r2, 0x0, 0x0, 0x10000, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) write$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 1.128120012s ago: executing program 0 (id=2623): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="16", 0x1}], 0x1}}], 0x2, 0x20000000) shutdown(r0, 0x1) 404.462895ms ago: executing program 0 (id=2624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0x20000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 121.47866ms ago: executing program 0 (id=2625): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x404400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) shmget(0x0, 0x4000, 0x40, &(0x7f0000a61000/0x4000)=nil) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000500)) setresgid(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 120.388317ms ago: executing program 5 (id=2626): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000100) 97.479536ms ago: executing program 1 (id=2627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x34, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @pid}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000001c0)={0x2, 0x1}) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000540)={0xa, @output={0x1000, 0x0, {0x5, 0xfffffff3}, 0xfffffffe, 0x4}}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x46]}, 0x2e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a240, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80100) 0s ago: executing program 0 (id=2628): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x582d82) (async) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async, rerun: 32) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x1, 0x0, 0xffffffffffffffff, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1027.200244][T13675] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.200429][T13675] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1027.200531][T13675] Node 0 DMA32 free:996628kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:820kB inactive_anon:230100kB active_file:123384kB inactive_file:140680kB unevictable:1536kB writepending:248kB zspages:0kB present:3129332kB managed:2566596kB mlocked:0kB bounce:0kB free_pcp:38332kB local_pcp:12084kB free_cma:0kB [ 1027.200713][T13675] lowmem_reserve[]: 0 0 0 0 0 [ 1027.200811][T13675] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:216kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.200981][T13675] lowmem_reserve[]: 0 0 0 0 0 [ 1027.201081][T13675] Node 1 Normal free:3944352kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.201215][T13675] lowmem_reserve[]: 0 0 0 0 0 [ 1027.201248][T13675] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1027.218832][T13675] Node 0 DMA32: 1554*4kB (UM) 2347*8kB (UME) 1748*16kB (UME) 528*32kB (UME) 492*64kB (UME) 371*128kB (UME) 336*256kB (UME) 188*512kB (UME) 114*1024kB (UME) 50*2048kB (UM) 109*4096kB (M) = 996704kB [ 1027.219299][T13675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1027.219563][T13675] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 12*16kB (UM) 11*32kB (UM) 11*64kB (UM) 7*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3944352kB [ 1027.220096][T13675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.220142][T13675] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1027.220159][T13675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.220204][T13675] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1027.238971][T13675] 118252 total pagecache pages [ 1027.239012][T13675] 0 pages in swap cache [ 1027.239035][T13675] Free swap = 124996kB [ 1027.239058][T13675] Total swap = 124996kB [ 1027.239090][T13675] 2097051 pages RAM [ 1027.239112][T13675] 0 pages HighMem/MovableOnly [ 1027.239134][T13675] 423733 pages reserved [ 1027.239160][T13675] 0 pages cma reserved [ 1028.050262][T12260] Bluetooth: hci0: command tx timeout [ 1028.330867][T13665] bridge11: entered promiscuous mode [ 1028.330966][T13665] bridge11: entered allmulticast mode [ 1028.750600][T13689] FAULT_INJECTION: forcing a failure. [ 1028.750600][T13689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.750642][T13689] CPU: 0 UID: 0 PID: 13689 Comm: syz.0.2171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1028.750674][T13689] Tainted: [L]=SOFTLOCKUP [ 1028.750682][T13689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1028.750696][T13689] Call Trace: [ 1028.750705][T13689] [ 1028.750716][T13689] dump_stack_lvl+0xe8/0x150 [ 1028.750775][T13689] should_fail_ex+0x46b/0x600 [ 1028.750819][T13689] _copy_from_iter+0x1d3/0x1670 [ 1028.750851][T13689] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1028.750878][T13689] ? __alloc_skb+0x27d/0x7d0 [ 1028.750904][T13689] ? __pfx__copy_from_iter+0x10/0x10 [ 1028.750925][T13689] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1028.750951][T13689] ? __alloc_skb+0x27d/0x7d0 [ 1028.750983][T13689] ? netlink_sendmsg+0x650/0xb40 [ 1028.751010][T13689] ? skb_put+0x11b/0x210 [ 1028.751041][T13689] netlink_sendmsg+0x6c0/0xb40 [ 1028.751086][T13689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1028.751117][T13689] ? unwind_get_return_address+0x4d/0x90 [ 1028.751152][T13689] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1028.751181][T13689] ____sys_sendmsg+0x94c/0x9c0 [ 1028.751217][T13689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1028.751258][T13689] ? import_iovec+0x73/0xa0 [ 1028.751310][T13689] ___sys_sendmsg+0x2a5/0x360 [ 1028.751339][T13689] ? __lock_acquire+0x6b5/0x2cf0 [ 1028.751375][T13689] ? __pfx____sys_sendmsg+0x10/0x10 [ 1028.751443][T13689] ? __fget_files+0x2a/0x420 [ 1028.751463][T13689] ? __fget_files+0x3a6/0x420 [ 1028.751497][T13689] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1028.751530][T13689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1028.751570][T13689] ? __pfx_ksys_write+0x10/0x10 [ 1028.751606][T13689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.751632][T13689] do_syscall_64+0x15f/0xf80 [ 1028.751658][T13689] ? trace_irq_disable+0x3b/0x140 [ 1028.751686][T13689] ? clear_bhb_loop+0x40/0x90 [ 1028.751715][T13689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.751739][T13689] RIP: 0033:0x7f0cd0accdd9 [ 1028.751761][T13689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.751781][T13689] RSP: 002b:00007f0cced05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1028.751805][T13689] RAX: ffffffffffffffda RBX: 00007f0cd0d46090 RCX: 00007f0cd0accdd9 [ 1028.751822][T13689] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 1028.751837][T13689] RBP: 00007f0cced05090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.751851][T13689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.751864][T13689] R13: 00007f0cd0d46128 R14: 00007f0cd0d46090 R15: 00007ffd4064ef68 [ 1028.751900][T13689] [ 1029.239069][T13693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1030.232828][T12260] Bluetooth: hci0: command tx timeout [ 1032.255415][T12260] Bluetooth: hci0: command tx timeout [ 1034.334497][ T5601] Bluetooth: hci0: command tx timeout [ 1035.297750][T13741] macvtap1: entered promiscuous mode [ 1035.297781][T13741] macvtap1: entered allmulticast mode [ 1035.299508][T13741] veth1_vlan: entered allmulticast mode [ 1035.327102][T13741] team0: Device macvtap1 failed to register rx_handler [ 1035.385192][T13741] veth1_vlan: left allmulticast mode [ 1035.784136][T13754] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 1044.300581][T12260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1044.386560][T12260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1044.388061][T12260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1044.391400][T12260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1044.396922][T12260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1046.654548][ T5601] Bluetooth: hci5: command tx timeout [ 1047.228228][T10312] bridge_slave_1: left allmulticast mode [ 1047.228266][T10312] bridge_slave_1: left promiscuous mode [ 1047.228546][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.686183][T10312] bridge_slave_0: left allmulticast mode [ 1048.686222][T10312] bridge_slave_0: left promiscuous mode [ 1048.734493][ T5601] Bluetooth: hci5: command tx timeout [ 1048.774848][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.622108][T10312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.715237][T10312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.799390][T10312] bond0 (unregistering): Released all slaves [ 1050.815252][ T5601] Bluetooth: hci5: command tx timeout [ 1050.823097][T13871] Bluetooth: MGMT ver 1.23 [ 1050.823132][T13871] Bluetooth: hci0: unsupported parameter 256 [ 1050.823148][T13871] Bluetooth: hci0: invalid len left 3, exp >= 6 [ 1050.965802][ T5256] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1051.413417][T13666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.413515][T13666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.413701][T13666] bridge_slave_0: entered allmulticast mode [ 1051.614047][T13666] bridge_slave_0: entered promiscuous mode [ 1053.295106][ T5601] Bluetooth: hci5: command tx timeout [ 1053.310590][T10312] hsr_slave_0: left promiscuous mode [ 1053.391230][T10312] hsr_slave_1: left promiscuous mode [ 1053.392258][T10312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.502178][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.424442][ T36] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1054.555902][ T36] usb 6-1: device descriptor read/64, error -71 [ 1054.577296][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.577355][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.719980][T10312] team0 (unregistering): Port device team_slave_1 removed [ 1054.864782][ T36] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1054.868575][T10312] team0 (unregistering): Port device team_slave_0 removed [ 1054.994464][ T36] usb 6-1: device descriptor read/64, error -71 [ 1055.105361][ T36] usb usb6-port1: attempt power cycle [ 1055.514469][ T36] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1055.557795][ T36] usb 6-1: device descriptor read/8, error -71 [ 1055.722565][T13666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.722715][T13666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.722955][T13666] bridge_slave_1: entered allmulticast mode [ 1055.745792][T13666] bridge_slave_1: entered promiscuous mode [ 1055.804424][ T36] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1055.840730][ T36] usb 6-1: device descriptor read/8, error -71 [ 1055.855403][T13891] macvtap1: entered promiscuous mode [ 1055.855434][T13891] macvtap1: entered allmulticast mode [ 1055.855969][T13891] veth1_vlan: entered allmulticast mode [ 1055.892512][T13891] team0: Device macvtap1 failed to register rx_handler [ 1055.927134][T13891] veth1_vlan: left allmulticast mode [ 1055.948849][ T36] usb usb6-port1: unable to enumerate USB device [ 1056.899551][T13666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.949117][T13666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.952134][T13911] FAULT_INJECTION: forcing a failure. [ 1056.952134][T13911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.952176][T13911] CPU: 1 UID: 0 PID: 13911 Comm: syz.1.2214 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1056.952205][T13911] Tainted: [L]=SOFTLOCKUP [ 1056.952214][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1056.952227][T13911] Call Trace: [ 1056.952236][T13911] [ 1056.952246][T13911] dump_stack_lvl+0xe8/0x150 [ 1056.952280][T13911] should_fail_ex+0x46b/0x600 [ 1056.952324][T13911] _copy_from_iter+0x1d3/0x1670 [ 1056.952356][T13911] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1056.952381][T13911] ? __alloc_skb+0x27d/0x7d0 [ 1056.952406][T13911] ? __pfx__copy_from_iter+0x10/0x10 [ 1056.952427][T13911] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1056.952453][T13911] ? __alloc_skb+0x27d/0x7d0 [ 1056.952484][T13911] ? netlink_sendmsg+0x650/0xb40 [ 1056.952511][T13911] ? skb_put+0x11b/0x210 [ 1056.952541][T13911] netlink_sendmsg+0x6c0/0xb40 [ 1056.952578][T13911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1056.952609][T13911] ? unwind_get_return_address+0x4d/0x90 [ 1056.952646][T13911] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1056.952673][T13911] ____sys_sendmsg+0x94c/0x9c0 [ 1056.952716][T13911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1056.952757][T13911] ? import_iovec+0x73/0xa0 [ 1056.952790][T13911] ___sys_sendmsg+0x2a5/0x360 [ 1056.952817][T13911] ? __lock_acquire+0x6b5/0x2cf0 [ 1056.952853][T13911] ? __pfx____sys_sendmsg+0x10/0x10 [ 1056.952920][T13911] ? __fget_files+0x2a/0x420 [ 1056.952941][T13911] ? __fget_files+0x3a6/0x420 [ 1056.952973][T13911] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1056.953007][T13911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1056.953047][T13911] ? __pfx_ksys_write+0x10/0x10 [ 1056.953083][T13911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.953109][T13911] do_syscall_64+0x15f/0xf80 [ 1056.953134][T13911] ? trace_irq_disable+0x3b/0x140 [ 1056.953161][T13911] ? clear_bhb_loop+0x40/0x90 [ 1056.953190][T13911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.953214][T13911] RIP: 0033:0x7fa5f49bcdd9 [ 1056.953236][T13911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.953256][T13911] RSP: 002b:00007fa5f2c16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1056.953282][T13911] RAX: ffffffffffffffda RBX: 00007fa5f4c35fa0 RCX: 00007fa5f49bcdd9 [ 1056.953299][T13911] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1056.953314][T13911] RBP: 00007fa5f2c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.953329][T13911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.953344][T13911] R13: 00007fa5f4c36038 R14: 00007fa5f4c35fa0 R15: 00007ffd302e7f08 [ 1056.953379][T13911] [ 1057.717162][T13666] team0: Port device team_slave_0 added [ 1057.862802][T13666] team0: Port device team_slave_1 added [ 1058.556384][T13666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.556404][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.556436][T13666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.757239][T13666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.757259][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.757291][T13666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.208015][T13666] hsr_slave_0: entered promiscuous mode [ 1061.238971][T13666] hsr_slave_1: entered promiscuous mode [ 1061.658095][T13949] netlink: 'syz.0.2223': attribute type 4 has an invalid length. [ 1061.742544][T13951] netlink: 'syz.0.2223': attribute type 4 has an invalid length. [ 1063.147960][ T5256] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1063.445438][T13964] veth0_vlan: mtu less than device minimum [ 1063.446987][T13968] FAULT_INJECTION: forcing a failure. [ 1063.446987][T13968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.447024][T13968] CPU: 1 UID: 0 PID: 13968 Comm: syz.1.2222 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1063.447056][T13968] Tainted: [L]=SOFTLOCKUP [ 1063.447064][T13968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1063.447078][T13968] Call Trace: [ 1063.447088][T13968] [ 1063.447097][T13968] dump_stack_lvl+0xe8/0x150 [ 1063.447130][T13968] should_fail_ex+0x46b/0x600 [ 1063.447171][T13968] _copy_to_user+0x31/0xb0 [ 1063.447200][T13968] simple_read_from_buffer+0xe1/0x170 [ 1063.447242][T13968] proc_fail_nth_read+0x1be/0x230 [ 1063.447283][T13968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1063.447323][T13968] ? rw_verify_area+0x2ac/0x4e0 [ 1063.447348][T13968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1063.447388][T13968] vfs_read+0x212/0xa80 [ 1063.447424][T13968] ? __pfx_vfs_read+0x10/0x10 [ 1063.447453][T13968] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1063.447480][T13968] ? lockdep_hardirqs_on+0x7a/0x110 [ 1063.447506][T13968] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1063.447533][T13968] ? mutex_lock_nested+0x152/0x1d0 [ 1063.447569][T13968] ? fdget_pos+0x252/0x320 [ 1063.447601][T13968] ksys_read+0x156/0x270 [ 1063.447630][T13968] ? __pfx_ksys_read+0x10/0x10 [ 1063.447665][T13968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.447692][T13968] do_syscall_64+0x15f/0xf80 [ 1063.447716][T13968] ? trace_irq_disable+0x3b/0x140 [ 1063.447743][T13968] ? clear_bhb_loop+0x40/0x90 [ 1063.447772][T13968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.447796][T13968] RIP: 0033:0x7fa5f497d60e [ 1063.447818][T13968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1063.447837][T13968] RSP: 002b:00007fa5f2c15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1063.447862][T13968] RAX: ffffffffffffffda RBX: 00007fa5f2c166c0 RCX: 00007fa5f497d60e [ 1063.447879][T13968] RDX: 000000000000000f RSI: 00007fa5f2c160a0 RDI: 0000000000000004 [ 1063.447918][T13968] RBP: 00007fa5f2c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.447943][T13968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.447957][T13968] R13: 00007fa5f4c36038 R14: 00007fa5f4c35fa0 R15: 00007ffd302e7f08 [ 1063.447994][T13968] [ 1064.238119][T13972] macvtap1: entered promiscuous mode [ 1064.238148][T13972] macvtap1: entered allmulticast mode [ 1064.238600][T13972] veth1_vlan: entered allmulticast mode [ 1064.267311][T13972] team0: Device macvtap1 failed to register rx_handler [ 1064.489394][T13972] veth1_vlan: left allmulticast mode [ 1064.761405][T12188] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1064.894381][T12188] usb 6-1: device descriptor read/64, error -71 [ 1065.795013][T12188] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1066.164827][T12188] usb 6-1: device descriptor read/64, error -71 [ 1067.615280][T12188] usb usb6-port1: attempt power cycle [ 1067.934880][ T5601] Bluetooth: hci5: command 0x0405 tx timeout [ 1067.962127][T12188] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1067.995066][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1067.995193][T12188] usb 6-1: device descriptor read/8, error -32 [ 1069.177482][T13807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.177634][T13807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.177847][T13807] bridge_slave_0: entered allmulticast mode [ 1069.210678][T13807] bridge_slave_0: entered promiscuous mode [ 1069.245707][T13807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.245855][T13807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.246095][T13807] bridge_slave_1: entered allmulticast mode [ 1069.303635][T13807] bridge_slave_1: entered promiscuous mode [ 1071.276655][T14023] FAULT_INJECTION: forcing a failure. [ 1071.276655][T14023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.276701][T14023] CPU: 1 UID: 0 PID: 14023 Comm: syz.0.2235 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1071.276732][T14023] Tainted: [L]=SOFTLOCKUP [ 1071.276741][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1071.276755][T14023] Call Trace: [ 1071.276765][T14023] [ 1071.276775][T14023] dump_stack_lvl+0xe8/0x150 [ 1071.276808][T14023] should_fail_ex+0x46b/0x600 [ 1071.276852][T14023] _copy_from_iter+0x1d3/0x1670 [ 1071.276886][T14023] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1071.276911][T14023] ? __alloc_skb+0x27d/0x7d0 [ 1071.276938][T14023] ? __pfx__copy_from_iter+0x10/0x10 [ 1071.276965][T14023] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1071.276992][T14023] ? __alloc_skb+0x27d/0x7d0 [ 1071.277024][T14023] ? netlink_sendmsg+0x650/0xb40 [ 1071.277052][T14023] ? skb_put+0x11b/0x210 [ 1071.277083][T14023] netlink_sendmsg+0x6c0/0xb40 [ 1071.277122][T14023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.277153][T14023] ? unwind_get_return_address+0x4d/0x90 [ 1071.277188][T14023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1071.277218][T14023] ____sys_sendmsg+0x94c/0x9c0 [ 1071.277254][T14023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1071.277303][T14023] ? import_iovec+0x73/0xa0 [ 1071.277333][T14023] ___sys_sendmsg+0x2a5/0x360 [ 1071.277362][T14023] ? __lock_acquire+0x6b5/0x2cf0 [ 1071.277397][T14023] ? __pfx____sys_sendmsg+0x10/0x10 [ 1071.277467][T14023] ? __fget_files+0x2a/0x420 [ 1071.277489][T14023] ? __fget_files+0x3a6/0x420 [ 1071.277522][T14023] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1071.277556][T14023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1071.277597][T14023] ? __pfx_ksys_write+0x10/0x10 [ 1071.277634][T14023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.277660][T14023] do_syscall_64+0x15f/0xf80 [ 1071.277686][T14023] ? trace_irq_disable+0x3b/0x140 [ 1071.277714][T14023] ? clear_bhb_loop+0x40/0x90 [ 1071.277742][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.277766][T14023] RIP: 0033:0x7f0cd0accdd9 [ 1071.277788][T14023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.277808][T14023] RSP: 002b:00007f0cced26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.277832][T14023] RAX: ffffffffffffffda RBX: 00007f0cd0d45fa0 RCX: 00007f0cd0accdd9 [ 1071.277850][T14023] RDX: 0000000004040080 RSI: 0000200000000500 RDI: 0000000000000003 [ 1071.277864][T14023] RBP: 00007f0cced26090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.277879][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.277893][T14023] R13: 00007f0cd0d46038 R14: 00007f0cd0d45fa0 R15: 00007ffd4064ef68 [ 1071.277930][T14023] [ 1071.796610][T13807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.873531][T13807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.980805][T13807] team0: Port device team_slave_0 added [ 1071.996533][T13807] team0: Port device team_slave_1 added [ 1072.044891][T13807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.044912][T13807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.044943][T13807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.048315][T13807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.048333][T13807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.048364][T13807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.216634][T13807] hsr_slave_0: entered promiscuous mode [ 1072.217973][T13807] hsr_slave_1: entered promiscuous mode [ 1072.218931][T13807] debugfs: 'hsr0' already exists in 'hsr' [ 1072.218958][T13807] Cannot create hsr debugfs directory [ 1075.741543][ T5256] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1077.041585][T14048] program syz.5.2242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.849363][T10312] bridge_slave_1: left allmulticast mode [ 1080.849406][T10312] bridge_slave_1: left promiscuous mode [ 1080.849707][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.924105][T10312] bridge_slave_0: left allmulticast mode [ 1080.924147][T10312] bridge_slave_0: left promiscuous mode [ 1080.924672][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.506695][T10312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.596603][T10312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.677505][T10312] bond0 (unregistering): Released all slaves [ 1081.750525][T14058] macvtap1: entered promiscuous mode [ 1081.750551][T14058] macvtap1: entered allmulticast mode [ 1081.750953][T14058] veth1_vlan: entered allmulticast mode [ 1081.798547][T14058] team0: Device macvtap1 failed to register rx_handler [ 1081.890515][T14058] veth1_vlan: left allmulticast mode [ 1084.080590][T14086] FAULT_INJECTION: forcing a failure. [ 1084.080590][T14086] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1084.080632][T14086] CPU: 1 UID: 0 PID: 14086 Comm: syz.1.2251 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1084.080663][T14086] Tainted: [L]=SOFTLOCKUP [ 1084.080671][T14086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1084.080686][T14086] Call Trace: [ 1084.080695][T14086] [ 1084.080704][T14086] dump_stack_lvl+0xe8/0x150 [ 1084.080737][T14086] should_fail_ex+0x46b/0x600 [ 1084.080780][T14086] prepare_alloc_pages+0x22a/0x6b0 [ 1084.080820][T14086] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1084.080857][T14086] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1084.080893][T14086] ? __pfx_policy_nodemask+0x10/0x10 [ 1084.080920][T14086] ? do_raw_spin_lock+0x12b/0x2f0 [ 1084.080960][T14086] alloc_pages_mpol+0xd1/0x380 [ 1084.080995][T14086] alloc_pages_noprof+0xd2/0x2f0 [ 1084.081028][T14086] pte_alloc_one+0x22/0x380 [ 1084.081063][T14086] __pte_alloc+0x25/0x1a0 [ 1084.081101][T14086] do_pte_missing+0x1c13/0x2950 [ 1084.081141][T14086] ? __pmd_alloc+0x41b/0x5e0 [ 1084.081184][T14086] handle_mm_fault+0xd0a/0x13c0 [ 1084.081217][T14086] ? handle_mm_fault+0xe7/0x13c0 [ 1084.081246][T14086] ? __pfx_handle_mm_fault+0x10/0x10 [ 1084.081285][T14086] ? __lock_acquire+0x6b5/0x2cf0 [ 1084.081319][T14086] ? lock_mm_and_find_vma+0xa7/0x340 [ 1084.081353][T14086] do_user_addr_fault+0x75b/0x1340 [ 1084.081395][T14086] exc_page_fault+0x6a/0xc0 [ 1084.081423][T14086] asm_exc_page_fault+0x26/0x30 [ 1084.081446][T14086] RIP: 0010:__put_user_4+0xd/0x20 [ 1084.081470][T14086] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1084.081490][T14086] RSP: 0018:ffffc90003a67e90 EFLAGS: 00050202 [ 1084.081510][T14086] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000040 [ 1084.081525][T14086] RDX: 0000000000000000 RSI: ffffffff8d86219f RDI: ffffffff8ba74d60 [ 1084.081541][T14086] RBP: 0000000000000000 R08: ffffffff82140eef R09: ffff8880337c9db0 [ 1084.081563][T14086] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: 0000000000000000 [ 1084.081578][T14086] R13: 1ffff11004a17b52 R14: 0000000000000000 R15: dffffc0000000000 [ 1084.081601][T14086] ? __might_fault+0xaf/0x130 [ 1084.081633][T14086] __se_sys_getresgid+0x138/0x250 [ 1084.081653][T14086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.081670][T14086] do_syscall_64+0x15f/0xf80 [ 1084.081686][T14086] ? trace_irq_disable+0x3b/0x140 [ 1084.081705][T14086] ? clear_bhb_loop+0x40/0x90 [ 1084.081724][T14086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.081739][T14086] RIP: 0033:0x7fa5f49bcdd9 [ 1084.081753][T14086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.081765][T14086] RSP: 002b:00007fa5f2c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 1084.081780][T14086] RAX: ffffffffffffffda RBX: 00007fa5f4c35fa0 RCX: 00007fa5f49bcdd9 [ 1084.081792][T14086] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 0000200000000040 [ 1084.081807][T14086] RBP: 00007fa5f2c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.081816][T14086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.081825][T14086] R13: 00007fa5f4c36038 R14: 00007fa5f4c35fa0 R15: 00007ffd302e7f08 [ 1084.081849][T14086] [ 1085.911112][T10312] hsr_slave_0: left promiscuous mode [ 1085.953614][T10312] hsr_slave_1: left promiscuous mode [ 1085.973527][T10312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.012472][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.849838][T12260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1087.919345][T12260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1087.922878][T12260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1087.943687][T12260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1087.956098][T12260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1088.745239][T10312] team0 (unregistering): Port device team_slave_1 removed [ 1088.825581][T10312] team0 (unregistering): Port device team_slave_0 removed [ 1090.095204][T12260] Bluetooth: hci1: command tx timeout [ 1091.374970][T14110] FAULT_INJECTION: forcing a failure. [ 1091.374970][T14110] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.375000][T14110] CPU: 1 UID: 0 PID: 14110 Comm: syz.0.2254 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1091.375023][T14110] Tainted: [L]=SOFTLOCKUP [ 1091.375029][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1091.375040][T14110] Call Trace: [ 1091.375047][T14110] [ 1091.375054][T14110] dump_stack_lvl+0xe8/0x150 [ 1091.375078][T14110] should_fail_ex+0x46b/0x600 [ 1091.375110][T14110] should_failslab+0xa8/0x100 [ 1091.375132][T14110] kmem_cache_alloc_noprof+0x87/0x680 [ 1091.375149][T14110] ? rcu_is_watching+0x15/0xb0 [ 1091.375173][T14110] ? security_file_alloc+0x34/0x310 [ 1091.375198][T14110] security_file_alloc+0x34/0x310 [ 1091.375221][T14110] init_file+0x96/0x2d0 [ 1091.375246][T14110] alloc_empty_file+0x74/0x1d0 [ 1091.375271][T14110] path_openat+0x11b/0x38a0 [ 1091.375296][T14110] ? try_to_take_rt_mutex+0x840/0xb00 [ 1091.375321][T14110] ? arch_stack_walk+0xfb/0x150 [ 1091.375351][T14110] ? __lock_acquire+0x6b5/0x2cf0 [ 1091.375378][T14110] ? __pfx_path_openat+0x10/0x10 [ 1091.375399][T14110] ? kasan_save_track+0x4f/0x80 [ 1091.375413][T14110] ? kasan_save_track+0x3e/0x80 [ 1091.375428][T14110] ? __kasan_slab_alloc+0x6c/0x80 [ 1091.375443][T14110] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1091.375466][T14110] ? do_raw_spin_lock+0x12b/0x2f0 [ 1091.375492][T14110] do_file_open+0x23e/0x4a0 [ 1091.375510][T14110] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1091.375531][T14110] ? __pfx_do_file_open+0x10/0x10 [ 1091.375547][T14110] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1091.375587][T14110] ? alloc_fd+0x64e/0x6c0 [ 1091.375619][T14110] do_sys_openat2+0x113/0x200 [ 1091.375684][T14110] ? __pfx_do_sys_openat2+0x10/0x10 [ 1091.375709][T14110] ? ksys_write+0x248/0x270 [ 1091.375726][T14110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.375744][T14110] ? native_tss_update_io_bitmap+0x353/0x540 [ 1091.375768][T14110] __x64_sys_openat+0x138/0x170 [ 1091.375795][T14110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.375811][T14110] do_syscall_64+0x15f/0xf80 [ 1091.375829][T14110] ? trace_irq_disable+0x3b/0x140 [ 1091.375848][T14110] ? clear_bhb_loop+0x40/0x90 [ 1091.375868][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.375884][T14110] RIP: 0033:0x7f0cd0accdd9 [ 1091.375899][T14110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.375913][T14110] RSP: 002b:00007f0cced26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1091.375929][T14110] RAX: ffffffffffffffda RBX: 00007f0cd0d45fa0 RCX: 00007f0cd0accdd9 [ 1091.375942][T14110] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000ffffff9c [ 1091.375953][T14110] RBP: 00007f0cced26090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.375963][T14110] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1091.375973][T14110] R13: 00007f0cd0d46038 R14: 00007f0cd0d45fa0 R15: 00007ffd4064ef68 [ 1091.375997][T14110] [ 1091.806772][ T36] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1092.181260][T12260] Bluetooth: hci1: command tx timeout [ 1092.309423][ T36] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1092.309459][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.309481][ T36] usb 6-1: Product: syz [ 1092.309497][ T36] usb 6-1: Manufacturer: syz [ 1092.309514][ T36] usb 6-1: SerialNumber: syz [ 1092.560997][ T36] usb 6-1: config 0 descriptor?? [ 1092.700068][ T36] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 039 [ 1092.872110][T14107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2255'. [ 1093.685866][ T36] i2c i2c-1: failure reading functionality [ 1093.712325][ T36] i2c i2c-1: connected i2c-tiny-usb device [ 1093.814453][ T36] usb 6-1: USB disconnect, device number 39 [ 1094.259892][T12260] Bluetooth: hci1: command tx timeout [ 1096.211360][T14128] macvtap1: entered promiscuous mode [ 1096.211408][T14128] macvtap1: entered allmulticast mode [ 1096.213057][T14128] veth1_vlan: entered allmulticast mode [ 1096.245611][T14128] team0: Device macvtap1 failed to register rx_handler [ 1096.282768][T14128] veth1_vlan: left allmulticast mode [ 1096.334491][T12260] Bluetooth: hci1: command tx timeout [ 1096.462609][T14141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1096.583651][ T5256] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1096.680560][T14144] FAULT_INJECTION: forcing a failure. [ 1096.680560][T14144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.680599][T14144] CPU: 1 UID: 0 PID: 14144 Comm: syz.0.2260 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1096.680630][T14144] Tainted: [L]=SOFTLOCKUP [ 1096.680639][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1096.680652][T14144] Call Trace: [ 1096.680661][T14144] [ 1096.680671][T14144] dump_stack_lvl+0xe8/0x150 [ 1096.680703][T14144] should_fail_ex+0x46b/0x600 [ 1096.680745][T14144] strncpy_from_user+0x36/0x2b0 [ 1096.680785][T14144] do_getname+0x77/0x250 [ 1096.680820][T14144] __se_sys_linkat+0x3a/0x2d0 [ 1096.680852][T14144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.680878][T14144] do_syscall_64+0x15f/0xf80 [ 1096.680903][T14144] ? trace_irq_disable+0x3b/0x140 [ 1096.680930][T14144] ? clear_bhb_loop+0x40/0x90 [ 1096.680959][T14144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.680983][T14144] RIP: 0033:0x7f0cd0accdd9 [ 1096.681004][T14144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.681026][T14144] RSP: 002b:00007f0cced26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 1096.681050][T14144] RAX: ffffffffffffffda RBX: 00007f0cd0d45fa0 RCX: 00007f0cd0accdd9 [ 1096.681066][T14144] RDX: ffffffffffffffff RSI: 00002000000000c0 RDI: ffffffffffffffff [ 1096.681083][T14144] RBP: 00007f0cced26090 R08: 0000000000000600 R09: 0000000000000000 [ 1096.681098][T14144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.681111][T14144] R13: 00007f0cd0d46038 R14: 00007f0cd0d45fa0 R15: 00007ffd4064ef68 [ 1096.681147][T14144] [ 1097.555709][T14158] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2263'. [ 1097.555737][T14158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2263'. [ 1097.555759][T14158] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2263'. [ 1097.594630][T14158] 9p: Bad value for 'wfdno' [ 1098.353774][ T37] kauditd_printk_skb: 235 callbacks suppressed [ 1098.353804][ T37] audit: type=1800 audit(1777972221.153:2157): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2264" name="SYSV798dd828" dev="tmpfs" ino=0 res=0 errno=0 [ 1099.946277][T10312] bridge_slave_1: left allmulticast mode [ 1099.946319][T10312] bridge_slave_1: left promiscuous mode [ 1099.946615][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.218815][T10312] bridge_slave_0: left allmulticast mode [ 1101.218855][T10312] bridge_slave_0: left promiscuous mode [ 1101.219132][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.321319][T10312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.418298][T10312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.444378][ T5582] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1102.508143][T10312] bond0 (unregistering): Released all slaves [ 1102.584677][ T5582] usb 6-1: device descriptor read/64, error -71 [ 1102.875727][ T5582] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1103.055006][ T5582] usb 6-1: device descriptor read/64, error -71 [ 1103.199807][ T5582] usb usb6-port1: attempt power cycle [ 1103.604777][ T5582] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1103.626920][ T5582] usb 6-1: device descriptor read/8, error -71 [ 1103.874783][ T5582] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1103.897288][ T5582] usb 6-1: device descriptor read/8, error -71 [ 1103.967856][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1104.012374][ T5582] usb usb6-port1: unable to enumerate USB device [ 1104.030738][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1104.046938][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1104.051021][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1104.052981][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1104.296973][T10312] hsr_slave_0: left promiscuous mode [ 1105.508462][T10312] hsr_slave_1: left promiscuous mode [ 1105.509518][T10312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.595366][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.784548][ T5601] Bluetooth: hci0: command tx timeout [ 1107.401771][T14214] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2273'. [ 1107.401799][T14214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2273'. [ 1107.401822][T14214] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2273'. [ 1107.426501][T14214] 9p: Bad value for 'wfdno' [ 1107.645192][T10312] team0 (unregistering): Port device team_slave_1 removed [ 1107.706962][T10312] team0 (unregistering): Port device team_slave_0 removed [ 1108.515917][T14206] macvtap1: entered promiscuous mode [ 1108.515945][T14206] macvtap1: entered allmulticast mode [ 1108.516329][T14206] veth1_vlan: entered allmulticast mode [ 1108.517631][T14206] team0: Device macvtap1 failed to register rx_handler [ 1108.587636][T14206] veth1_vlan: left allmulticast mode [ 1110.146910][T12260] Bluetooth: hci0: command tx timeout [ 1112.183980][T12260] Bluetooth: hci0: command tx timeout [ 1114.285859][T12260] Bluetooth: hci0: command tx timeout [ 1115.164037][T14096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.164183][T14096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.180613][T14096] bridge_slave_0: entered allmulticast mode [ 1115.203512][T14096] bridge_slave_0: entered promiscuous mode [ 1115.285751][T14096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.285882][T14096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.288317][T14096] bridge_slave_1: entered allmulticast mode [ 1115.332057][T14096] bridge_slave_1: entered promiscuous mode [ 1115.560695][T14096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.678726][T14279] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2285'. [ 1115.678754][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2285'. [ 1115.678775][T14279] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2285'. [ 1115.726363][T10312] bridge_slave_1: left allmulticast mode [ 1115.726401][T10312] bridge_slave_1: left promiscuous mode [ 1115.726666][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.787836][T14279] 9p: Bad value for 'wfdno' [ 1115.858981][T10312] bridge_slave_0: left allmulticast mode [ 1115.859011][T10312] bridge_slave_0: left promiscuous mode [ 1115.859238][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.026434][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.026506][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.764347][ T5601] Bluetooth: hci0: command 0x0405 tx timeout [ 1117.972221][T10312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.094087][T10312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.173540][T10312] bond0 (unregistering): Released all slaves [ 1118.233753][T14096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.856597][T14096] team0: Port device team_slave_0 added [ 1118.973378][T14096] team0: Port device team_slave_1 added [ 1120.341059][T10312] hsr_slave_0: left promiscuous mode [ 1120.374452][T10312] hsr_slave_1: left promiscuous mode [ 1120.375557][T10312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.430697][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.915511][ T5582] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1123.239716][T10312] team0 (unregistering): Port device team_slave_1 removed [ 1123.284517][ T5582] usb 6-1: config 253 has an invalid interface number: 254 but max is 0 [ 1123.284561][ T5582] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.284583][ T5582] usb 6-1: config 253 has no interface number 0 [ 1123.284635][ T5582] usb 6-1: config 253 interface 254 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1123.400081][ T5582] usb 6-1: New USB device found, idVendor=abc1, idProduct=8371, bcdDevice=1d.1d [ 1123.400116][ T5582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.400139][ T5582] usb 6-1: Product: syz [ 1123.400155][ T5582] usb 6-1: Manufacturer: syz [ 1123.400172][ T5582] usb 6-1: SerialNumber: syz [ 1123.740571][T10312] team0 (unregistering): Port device team_slave_0 removed [ 1123.806745][T14302] syz.5.2287 (14302) used greatest stack depth: 16192 bytes left [ 1125.112988][T14096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.113008][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.113039][T14096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.383769][T14096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.383789][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.383820][T14096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.155952][ T5582] rndis_host 6-1:253.254: skipping garbage [ 1126.155979][ T5582] rndis_host 6-1:253.254: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1126.208904][ T5582] usb 6-1: USB disconnect, device number 44 [ 1127.011158][T14096] hsr_slave_0: entered promiscuous mode [ 1127.027026][T14096] hsr_slave_1: entered promiscuous mode [ 1130.004367][T12188] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1130.169522][T14186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.169761][T14186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.169940][T14186] bridge_slave_0: entered allmulticast mode [ 1130.172233][T12188] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1130.172265][T12188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.172287][T12188] usb 6-1: Product: syz [ 1130.172303][T12188] usb 6-1: Manufacturer: syz [ 1130.172319][T12188] usb 6-1: SerialNumber: syz [ 1130.173827][T14186] bridge_slave_0: entered promiscuous mode [ 1130.308368][T12188] usb 6-1: config 0 descriptor?? [ 1130.400086][T14186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.400262][T14186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.400449][T14186] bridge_slave_1: entered allmulticast mode [ 1130.430741][T12188] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 045 [ 1130.481134][T14186] bridge_slave_1: entered promiscuous mode [ 1130.920047][T14186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.990098][T14186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.203076][T12188] i2c i2c-1: failure reading functionality [ 1131.369176][T12188] i2c i2c-1: connected i2c-tiny-usb device [ 1131.491039][T12188] usb 6-1: USB disconnect, device number 45 [ 1131.540428][T14186] team0: Port device team_slave_0 added [ 1131.695443][T14345] /dev/loop0: Can't lookup blockdev [ 1131.706598][T14186] team0: Port device team_slave_1 added [ 1132.120956][T14186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.120975][T14186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.121008][T14186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.220560][T14186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.220576][T14186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.220598][T14186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.447984][T14186] hsr_slave_0: entered promiscuous mode [ 1138.463504][T14186] hsr_slave_1: entered promiscuous mode [ 1138.478977][T14186] debugfs: 'hsr0' already exists in 'hsr' [ 1138.479007][T14186] Cannot create hsr debugfs directory [ 1138.923775][ T37] audit: type=1326 audit(1777972261.753:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1138.923915][ T37] audit: type=1326 audit(1777972261.753:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1138.988931][ T37] audit: type=1326 audit(1777972261.803:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1138.988992][ T37] audit: type=1326 audit(1777972261.823:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1138.989043][ T37] audit: type=1326 audit(1777972261.823:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1138.989094][ T37] audit: type=1326 audit(1777972261.823:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1138.989280][ T37] audit: type=1326 audit(1777972261.823:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1139.003238][ T37] audit: type=1326 audit(1777972261.823:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1139.003393][ T37] audit: type=1326 audit(1777972261.833:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1139.016994][ T37] audit: type=1326 audit(1777972261.853:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14396 comm="syz.1.2308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1139.405873][T14096] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1139.495239][T14096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1139.524920][T14406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2310'. [ 1139.817925][T14096] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1140.283287][T14096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1140.474170][T14096] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1140.603793][T14096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1140.698233][T14096] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1140.787640][T14096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1141.775013][T14432] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2311'. [ 1141.775040][T14432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2311'. [ 1141.775062][T14432] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2311'. [ 1141.913418][T14432] 9p: Bad value for 'wfdno' [ 1142.025331][T14437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1144.341407][T14096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.203765][T12260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1149.274969][T12260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1149.305546][T12260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1149.312505][T12260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1149.317772][T12260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1150.075083][T14504] FAULT_INJECTION: forcing a failure. [ 1150.075083][T14504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1150.075126][T14504] CPU: 1 UID: 0 PID: 14504 Comm: syz.5.2325 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1150.075158][T14504] Tainted: [L]=SOFTLOCKUP [ 1150.075167][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1150.075181][T14504] Call Trace: [ 1150.075191][T14504] [ 1150.075201][T14504] dump_stack_lvl+0xe8/0x150 [ 1150.075235][T14504] should_fail_ex+0x46b/0x600 [ 1150.075279][T14504] prepare_alloc_pages+0x22a/0x6b0 [ 1150.075317][T14504] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1150.075353][T14504] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1150.075384][T14504] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 1150.075420][T14504] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1150.075456][T14504] ? __pfx_policy_nodemask+0x10/0x10 [ 1150.075490][T14504] __alloc_pages_noprof+0x10/0x100 [ 1150.075523][T14504] alloc_pages_bulk_noprof+0x6c0/0x8c0 [ 1150.075562][T14504] ? alloc_pages_noprof+0x161/0x2f0 [ 1150.075597][T14504] __kasan_populate_vmalloc+0xc1/0x1d0 [ 1150.075635][T14504] ? rt_spin_unlock+0x160/0x200 [ 1150.075673][T14504] alloc_vmap_area+0xd47/0x1480 [ 1150.075714][T14504] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1150.075741][T14504] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1150.075770][T14504] ? __get_vm_area_node+0x171/0x350 [ 1150.075794][T14504] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1150.075825][T14504] __get_vm_area_node+0x226/0x350 [ 1150.075857][T14504] __vmalloc_node_range_noprof+0x36a/0x1750 [ 1150.075886][T14504] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1150.075920][T14504] ? __lock_acquire+0x6b5/0x2cf0 [ 1150.075972][T14504] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1150.076007][T14504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1150.076034][T14504] ? __lock_acquire+0x6b5/0x2cf0 [ 1150.076077][T14504] ? _parse_integer_limit+0x1ae/0x1f0 [ 1150.076118][T14504] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1150.076146][T14504] __vmalloc_noprof+0xd2/0x120 [ 1150.076172][T14504] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1150.076205][T14504] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1150.076241][T14504] bpf_prog_alloc+0x3c/0x1a0 [ 1150.076273][T14504] bpf_prog_load+0x779/0x1a10 [ 1150.076316][T14504] ? __pfx_bpf_prog_load+0x10/0x10 [ 1150.076347][T14504] ? __might_fault+0xaf/0x130 [ 1150.076391][T14504] ? bpf_lsm_bpf+0x9/0x20 [ 1150.076418][T14504] ? security_bpf+0x7e/0x2d0 [ 1150.076455][T14504] __sys_bpf+0x618/0x950 [ 1150.076485][T14504] ? __pfx___sys_bpf+0x10/0x10 [ 1150.076511][T14504] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1150.076562][T14504] ? ksys_write+0x248/0x270 [ 1150.076592][T14504] ? __pfx_ksys_write+0x10/0x10 [ 1150.076625][T14504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.076652][T14504] __x64_sys_bpf+0x7c/0x90 [ 1150.076678][T14504] do_syscall_64+0x15f/0xf80 [ 1150.076706][T14504] ? clear_bhb_loop+0x40/0x90 [ 1150.076735][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.076760][T14504] RIP: 0033:0x7f3e1e13cdd9 [ 1150.076781][T14504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.076801][T14504] RSP: 002b:00007f3e1c354028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.076825][T14504] RAX: ffffffffffffffda RBX: 00007f3e1e3b6180 RCX: 00007f3e1e13cdd9 [ 1150.076842][T14504] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1150.076857][T14504] RBP: 00007f3e1c354090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.076872][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.076886][T14504] R13: 00007f3e1e3b6218 R14: 00007f3e1e3b6180 R15: 00007ffcd676c528 [ 1150.076921][T14504] [ 1150.076980][T14504] syz.5.2325: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1150.077053][T14504] CPU: 1 UID: 0 PID: 14504 Comm: syz.5.2325 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1150.077091][T14504] Tainted: [L]=SOFTLOCKUP [ 1150.077100][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1150.077112][T14504] Call Trace: [ 1150.077121][T14504] [ 1150.077130][T14504] dump_stack_lvl+0xe8/0x150 [ 1150.077158][T14504] warn_alloc+0x263/0x3e0 [ 1150.077189][T14504] ? kasan_quarantine_put+0xbb/0x1f0 [ 1150.077217][T14504] ? __pfx_warn_alloc+0x10/0x10 [ 1150.077247][T14504] ? __get_vm_area_node+0x23f/0x350 [ 1150.077269][T14504] ? __get_vm_area_node+0x171/0x350 [ 1150.077295][T14504] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1150.077326][T14504] ? __get_vm_area_node+0x23f/0x350 [ 1150.077358][T14504] __vmalloc_node_range_noprof+0x38f/0x1750 [ 1150.077389][T14504] ? __lock_acquire+0x6b5/0x2cf0 [ 1150.077440][T14504] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1150.077473][T14504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1150.077501][T14504] ? __lock_acquire+0x6b5/0x2cf0 [ 1150.077536][T14504] ? _parse_integer_limit+0x1ae/0x1f0 [ 1150.077575][T14504] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1150.077604][T14504] __vmalloc_noprof+0xd2/0x120 [ 1150.077629][T14504] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1150.077662][T14504] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1150.077698][T14504] bpf_prog_alloc+0x3c/0x1a0 [ 1150.077730][T14504] bpf_prog_load+0x779/0x1a10 [ 1150.077773][T14504] ? __pfx_bpf_prog_load+0x10/0x10 [ 1150.077803][T14504] ? __might_fault+0xaf/0x130 [ 1150.077848][T14504] ? bpf_lsm_bpf+0x9/0x20 [ 1150.077875][T14504] ? security_bpf+0x7e/0x2d0 [ 1150.077910][T14504] __sys_bpf+0x618/0x950 [ 1150.077941][T14504] ? __pfx___sys_bpf+0x10/0x10 [ 1150.077967][T14504] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1150.078018][T14504] ? ksys_write+0x248/0x270 [ 1150.078048][T14504] ? __pfx_ksys_write+0x10/0x10 [ 1150.078086][T14504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.078113][T14504] __x64_sys_bpf+0x7c/0x90 [ 1150.078140][T14504] do_syscall_64+0x15f/0xf80 [ 1150.078167][T14504] ? clear_bhb_loop+0x40/0x90 [ 1150.078197][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.078221][T14504] RIP: 0033:0x7f3e1e13cdd9 [ 1150.078241][T14504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.078261][T14504] RSP: 002b:00007f3e1c354028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.078282][T14504] RAX: ffffffffffffffda RBX: 00007f3e1e3b6180 RCX: 00007f3e1e13cdd9 [ 1150.078300][T14504] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1150.078315][T14504] RBP: 00007f3e1c354090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.078329][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.078343][T14504] R13: 00007f3e1e3b6218 R14: 00007f3e1e3b6180 R15: 00007ffcd676c528 [ 1150.078378][T14504] [ 1150.078388][T14504] Mem-Info: [ 1150.078398][T14504] active_anon:3080 inactive_anon:75542 isolated_anon:0 [ 1150.078398][T14504] active_file:30948 inactive_file:35170 isolated_file:0 [ 1150.078398][T14504] unevictable:768 dirty:98 writeback:17 [ 1150.078398][T14504] slab_reclaimable:12500 slab_unreclaimable:106911 [ 1150.078398][T14504] mapped:36148 shmem:73137 pagetables:1511 [ 1150.078398][T14504] sec_pagetables:0 bounce:0 [ 1150.078398][T14504] kernel_misc_reclaimable:0 [ 1150.078398][T14504] free:1212285 free_pcp:14218 free_cma:0 [ 1150.078462][T14504] Node 0 active_anon:12320kB inactive_anon:302168kB active_file:123588kB inactive_file:140680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144592kB dirty:392kB writeback:68kB shmem:291012kB kernel_stack:13616kB pagetables:5876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1150.078523][T14504] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1150.078579][T14504] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.078653][T14504] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1150.078692][T14504] Node 0 DMA32 free:889428kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12320kB inactive_anon:302168kB active_file:123588kB inactive_file:140680kB unevictable:1536kB writepending:460kB zspages:0kB present:3129332kB managed:2566596kB mlocked:0kB bounce:0kB free_pcp:56872kB local_pcp:13484kB free_cma:0kB [ 1150.078763][T14504] lowmem_reserve[]: 0 0 0 0 0 [ 1150.078798][T14504] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:216kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.078863][T14504] lowmem_reserve[]: 0 0 0 0 0 [ 1150.078899][T14504] Node 1 Normal free:3944352kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.078966][T14504] lowmem_reserve[]: 0 0 0 0 0 [ 1150.079002][T14504] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1150.079137][T14504] Node 0 DMA32: 1522*4kB (UME) 2321*8kB (UM) 1685*16kB (UME) 488*32kB (UME) 458*64kB (UME) 441*128kB (UME) 293*256kB (UME) 216*512kB (UE) 128*1024kB (UE) 65*2048kB (UM) 70*4096kB (M) = 889504kB [ 1150.079312][T14504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1150.079425][T14504] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 12*16kB (UM) 11*32kB (UM) 11*64kB (UM) 7*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3944352kB [ 1150.079603][T14504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.079623][T14504] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1150.079641][T14504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.079660][T14504] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1150.079678][T14504] 139251 total pagecache pages [ 1150.079688][T14504] 0 pages in swap cache [ 1150.079696][T14504] Free swap = 124996kB [ 1150.079706][T14504] Total swap = 124996kB [ 1150.079715][T14504] 2097051 pages RAM [ 1150.079723][T14504] 0 pages HighMem/MovableOnly [ 1150.079732][T14504] 423733 pages reserved [ 1150.079741][T14504] 0 pages cma reserved [ 1151.446950][ T5601] Bluetooth: hci5: command tx timeout [ 1153.454529][ T5601] Bluetooth: hci5: command tx timeout [ 1153.850262][T14519] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2323'. [ 1154.159685][ T5582] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1154.349292][ T5582] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1154.349324][ T5582] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1154.349347][ T5582] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 143 [ 1154.349370][ T5582] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.349391][ T5582] usb 6-1: config 0 has no interface number 0 [ 1154.349440][ T5582] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 1154.349482][ T5582] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 1154.349513][ T5582] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1154.349549][ T5582] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1154.349575][ T5582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.464550][ T5582] usb 6-1: config 0 descriptor?? [ 1154.510928][T14521] vlan3: entered allmulticast mode [ 1154.510952][T14521] bond0: entered allmulticast mode [ 1154.510975][T14521] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1154.539863][ T5582] usb-storage 6-1:0.255: USB Mass Storage device detected [ 1154.720615][ T5582] usb-storage 6-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 1154.967793][T14186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1155.076873][T14186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1155.139229][T14186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1155.340910][T14186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1155.538139][T12260] Bluetooth: hci5: command tx timeout [ 1155.786241][T14549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2334'. [ 1156.639255][ T36] usb 6-1: USB disconnect, device number 46 [ 1156.928993][T14186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1156.995544][T14186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1157.003709][T14186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1157.095161][T14186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.614903][T12260] Bluetooth: hci5: command tx timeout [ 1158.071445][T14576] fuse: Bad value for 'fd' [ 1160.960902][T14615] FAULT_INJECTION: forcing a failure. [ 1160.960902][T14615] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.960952][T14615] CPU: 0 UID: 0 PID: 14615 Comm: syz.5.2347 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1160.960983][T14615] Tainted: [L]=SOFTLOCKUP [ 1160.960992][T14615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1160.961005][T14615] Call Trace: [ 1160.961014][T14615] [ 1160.961024][T14615] dump_stack_lvl+0xe8/0x150 [ 1160.961057][T14615] should_fail_ex+0x46b/0x600 [ 1160.961100][T14615] should_failslab+0xa8/0x100 [ 1160.961131][T14615] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1160.961158][T14615] ? __alloc_skb+0x1d0/0x7d0 [ 1160.961182][T14615] ? lockdep_hardirqs_on+0x7a/0x110 [ 1160.961214][T14615] __alloc_skb+0x1d0/0x7d0 [ 1160.961245][T14615] netlink_sendmsg+0x5d4/0xb40 [ 1160.961284][T14615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.961314][T14615] ? unwind_get_return_address+0x4d/0x90 [ 1160.961350][T14615] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1160.961378][T14615] ____sys_sendmsg+0x94c/0x9c0 [ 1160.961416][T14615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1160.961455][T14615] ? import_iovec+0x73/0xa0 [ 1160.961485][T14615] ___sys_sendmsg+0x2a5/0x360 [ 1160.961513][T14615] ? __lock_acquire+0x6b5/0x2cf0 [ 1160.961550][T14615] ? __pfx____sys_sendmsg+0x10/0x10 [ 1160.961618][T14615] ? __fget_files+0x2a/0x420 [ 1160.961638][T14615] ? __fget_files+0x3a6/0x420 [ 1160.961671][T14615] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1160.961704][T14615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1160.961745][T14615] ? __pfx_ksys_write+0x10/0x10 [ 1160.961780][T14615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.961805][T14615] do_syscall_64+0x15f/0xf80 [ 1160.961828][T14615] ? trace_irq_disable+0x3b/0x140 [ 1160.961855][T14615] ? clear_bhb_loop+0x40/0x90 [ 1160.961887][T14615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.961911][T14615] RIP: 0033:0x7f3e1e13cdd9 [ 1160.961939][T14615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.961958][T14615] RSP: 002b:00007f3e1c396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.961981][T14615] RAX: ffffffffffffffda RBX: 00007f3e1e3b5fa0 RCX: 00007f3e1e13cdd9 [ 1160.961998][T14615] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000003 [ 1160.962013][T14615] RBP: 00007f3e1c396090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.962027][T14615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.962041][T14615] R13: 00007f3e1e3b6038 R14: 00007f3e1e3b5fa0 R15: 00007ffcd676c528 [ 1160.962076][T14615] [ 1162.200248][T14626] /dev/nullb0: Can't lookup blockdev [ 1164.174329][ T5601] Bluetooth: hci5: command 0x0405 tx timeout [ 1165.773110][T12260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1165.958229][T12260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1166.246864][T12260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1166.249486][T12260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1166.251936][T12260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1168.494362][ T5601] Bluetooth: hci1: command tx timeout [ 1170.036493][ T1561] bridge_slave_1: left allmulticast mode [ 1170.036533][ T1561] bridge_slave_1: left promiscuous mode [ 1170.036805][ T1561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.499396][T14709] /dev/nullb0: Can't lookup blockdev [ 1170.579952][ T5601] Bluetooth: hci1: command tx timeout [ 1170.869883][ T1561] bridge_slave_0: left allmulticast mode [ 1170.869921][ T1561] bridge_slave_0: left promiscuous mode [ 1170.870175][ T1561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.655271][ T5601] Bluetooth: hci1: command tx timeout [ 1172.871959][T14724] FAULT_INJECTION: forcing a failure. [ 1172.871959][T14724] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.872004][T14724] CPU: 1 UID: 0 PID: 14724 Comm: syz.1.2367 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1172.872035][T14724] Tainted: [L]=SOFTLOCKUP [ 1172.872043][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1172.872055][T14724] Call Trace: [ 1172.872064][T14724] [ 1172.872075][T14724] dump_stack_lvl+0xe8/0x150 [ 1172.872108][T14724] should_fail_ex+0x46b/0x600 [ 1172.872151][T14724] should_failslab+0xa8/0x100 [ 1172.872181][T14724] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1172.872216][T14724] ? __alloc_skb+0x1d0/0x7d0 [ 1172.872242][T14724] ? ipv4_default_advmss+0x20/0x340 [ 1172.872276][T14724] __alloc_skb+0x1d0/0x7d0 [ 1172.872308][T14724] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1172.872339][T14724] ? __asan_memset+0x22/0x50 [ 1172.872376][T14724] tcp_connect+0x15a9/0x53a0 [ 1172.872424][T14724] ? lockdep_hardirqs_on+0x7a/0x110 [ 1172.872452][T14724] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1172.872493][T14724] ? __pfx_tcp_connect+0x10/0x10 [ 1172.872521][T14724] ? rt_spin_unlock+0x14f/0x200 [ 1172.872572][T14724] ? __asan_memset+0x22/0x50 [ 1172.872613][T14724] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1172.872646][T14724] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 1172.872682][T14724] ? sk_setup_caps+0x9ef/0xc40 [ 1172.872714][T14724] ? sk_setup_caps+0x29/0xc40 [ 1172.872746][T14724] tcp_v4_connect+0x10f7/0x19b0 [ 1172.872803][T14724] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1172.872847][T14724] __inet_stream_connect+0x25a/0xdd0 [ 1172.872890][T14724] ? __pfx___inet_stream_connect+0x10/0x10 [ 1172.872917][T14724] ? __local_bh_enable+0x1e1/0x2f0 [ 1172.872948][T14724] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1172.872973][T14724] ? lockdep_hardirqs_on+0x7a/0x110 [ 1172.873005][T14724] inet_stream_connect+0x66/0xa0 [ 1172.873036][T14724] kernel_connect+0x141/0x1c0 [ 1172.873071][T14724] ? __pfx_kernel_connect+0x10/0x10 [ 1172.873120][T14724] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1172.873144][T14724] ? lockdep_hardirqs_on+0x7a/0x110 [ 1172.873175][T14724] smc_connect+0x7a5/0xd90 [ 1172.873216][T14724] __sys_connect+0x315/0x450 [ 1172.873245][T14724] ? __pfx___sys_connect+0x10/0x10 [ 1172.873286][T14724] ? __pfx_ksys_write+0x10/0x10 [ 1172.873318][T14724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.873345][T14724] __x64_sys_connect+0x7a/0x90 [ 1172.873372][T14724] do_syscall_64+0x15f/0xf80 [ 1172.873398][T14724] ? trace_irq_disable+0x3b/0x140 [ 1172.873426][T14724] ? clear_bhb_loop+0x40/0x90 [ 1172.873455][T14724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.873479][T14724] RIP: 0033:0x7fa5f49bcdd9 [ 1172.873501][T14724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.873520][T14724] RSP: 002b:00007fa5f2c16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1172.873543][T14724] RAX: ffffffffffffffda RBX: 00007fa5f4c35fa0 RCX: 00007fa5f49bcdd9 [ 1172.873561][T14724] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1172.873575][T14724] RBP: 00007fa5f2c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.873588][T14724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.873601][T14724] R13: 00007fa5f4c36038 R14: 00007fa5f4c35fa0 R15: 00007ffd302e7f08 [ 1172.873638][T14724] [ 1173.537995][T14732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.864272][ T5601] Bluetooth: hci1: command tx timeout [ 1175.484707][T14746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.403915][T14753] /dev/nullb0: Can't lookup blockdev [ 1178.895018][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.895096][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.021692][ T1561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.185923][ T1561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.276822][ T1561] bond0 (unregistering): Released all slaves [ 1181.267057][T14789] /dev/nullb0: Can't lookup blockdev [ 1181.977059][T14492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.977195][T14492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.977451][T14492] bridge_slave_0: entered allmulticast mode [ 1182.035364][T14492] bridge_slave_0: entered promiscuous mode [ 1183.755431][ T1561] hsr_slave_0: left promiscuous mode [ 1183.898281][ T1561] hsr_slave_1: left promiscuous mode [ 1183.899329][ T1561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.973073][ T1561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.126424][T14813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1186.830608][T14841] /dev/nullb0: Can't lookup blockdev [ 1186.830816][ T1561] team0 (unregistering): Port device team_slave_1 removed [ 1187.043591][ T1561] team0 (unregistering): Port device team_slave_0 removed [ 1187.769781][T14492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.769909][T14492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.770293][T14492] bridge_slave_1: entered allmulticast mode [ 1187.775012][T14492] bridge_slave_1: entered promiscuous mode [ 1187.983959][T14827] macvtap1: entered promiscuous mode [ 1187.992984][T14827] macvtap1: entered allmulticast mode [ 1188.270692][T14492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.349170][T14492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.653583][T14492] team0: Port device team_slave_0 added [ 1188.675543][T14492] team0: Port device team_slave_1 added [ 1192.259718][T14492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.259738][T14492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.259771][T14492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.439764][T14492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.439784][T14492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.439817][T14492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.809577][T14891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1194.717401][T14492] hsr_slave_0: entered promiscuous mode [ 1194.718883][T14492] hsr_slave_1: entered promiscuous mode [ 1194.928152][T14892] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2400'. [ 1194.928180][T14892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2400'. [ 1194.928203][T14892] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2400'. [ 1195.322624][T14900] /dev/nullb0: Can't lookup blockdev [ 1196.224796][T14892] 9p: Could not find request transport: fd0xffffffffffffffff [ 1196.554641][T14903] netlink: 'syz.5.2403': attribute type 8 has an invalid length. [ 1196.554665][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2403'. [ 1196.768834][T14906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2403'. [ 1196.976712][T14911] /dev/nullb0: Can't lookup blockdev [ 1197.083687][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.221911][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.793667][ T5256] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1200.220027][T14948] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1200.221148][T14948] /dev/loop1: Can't lookup blockdev [ 1200.750642][T14957] FAULT_INJECTION: forcing a failure. [ 1200.750642][T14957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.750680][T14957] CPU: 1 UID: 0 PID: 14957 Comm: syz.1.2412 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1200.750703][T14957] Tainted: [L]=SOFTLOCKUP [ 1200.750709][T14957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1200.750720][T14957] Call Trace: [ 1200.750727][T14957] [ 1200.750734][T14957] dump_stack_lvl+0xe8/0x150 [ 1200.750759][T14957] should_fail_ex+0x46b/0x600 [ 1200.750789][T14957] _copy_from_iter+0x1d3/0x1670 [ 1200.750811][T14957] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1200.750829][T14957] ? __alloc_skb+0x27d/0x7d0 [ 1200.750847][T14957] ? __pfx__copy_from_iter+0x10/0x10 [ 1200.750861][T14957] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1200.750878][T14957] ? __alloc_skb+0x27d/0x7d0 [ 1200.750899][T14957] ? netlink_sendmsg+0x650/0xb40 [ 1200.750918][T14957] ? skb_put+0x11b/0x210 [ 1200.750938][T14957] netlink_sendmsg+0x6c0/0xb40 [ 1200.750964][T14957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.750984][T14957] ? unwind_get_return_address+0x4d/0x90 [ 1200.751009][T14957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1200.751028][T14957] ____sys_sendmsg+0x94c/0x9c0 [ 1200.751053][T14957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1200.751079][T14957] ? import_iovec+0x73/0xa0 [ 1200.751099][T14957] ___sys_sendmsg+0x2a5/0x360 [ 1200.751118][T14957] ? __lock_acquire+0x6b5/0x2cf0 [ 1200.751143][T14957] ? __pfx____sys_sendmsg+0x10/0x10 [ 1200.751195][T14957] ? __fget_files+0x2a/0x420 [ 1200.751209][T14957] ? __fget_files+0x3a6/0x420 [ 1200.751231][T14957] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1200.751254][T14957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1200.751282][T14957] ? __pfx_ksys_write+0x10/0x10 [ 1200.751307][T14957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.751324][T14957] do_syscall_64+0x15f/0xf80 [ 1200.751345][T14957] ? trace_irq_disable+0x3b/0x140 [ 1200.751364][T14957] ? clear_bhb_loop+0x40/0x90 [ 1200.751384][T14957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.751401][T14957] RIP: 0033:0x7fa5f49bcdd9 [ 1200.751416][T14957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.751431][T14957] RSP: 002b:00007fa5f2c16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.751448][T14957] RAX: ffffffffffffffda RBX: 00007fa5f4c35fa0 RCX: 00007fa5f49bcdd9 [ 1200.751461][T14957] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1200.751472][T14957] RBP: 00007fa5f2c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.751482][T14957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.751492][T14957] R13: 00007fa5f4c36038 R14: 00007fa5f4c35fa0 R15: 00007ffd302e7f08 [ 1200.751517][T14957] [ 1201.543181][T14961] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2413'. [ 1201.543209][T14961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2413'. [ 1201.543231][T14961] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2413'. [ 1201.894843][T14961] 9p: Could not find request transport: fd0xffffffffffffffff [ 1204.216175][ T5256] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1207.415875][T14662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.416135][T14662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.416384][T14662] bridge_slave_0: entered allmulticast mode [ 1207.432959][T14662] bridge_slave_0: entered promiscuous mode [ 1207.838941][T14992] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2419'. [ 1207.838970][T14992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2419'. [ 1207.838992][T14992] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2419'. [ 1208.221559][T12260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1208.322325][T12260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1208.334075][T14992] 9p: Could not find request transport: fd0xffffffffffffffff [ 1208.334954][T12260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1208.357006][T12260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1208.360669][T12260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1208.473260][T15000] /dev/nullb0: Can't lookup blockdev [ 1209.005760][T14662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.005936][T14662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.006207][T14662] bridge_slave_1: entered allmulticast mode [ 1209.010921][T14662] bridge_slave_1: entered promiscuous mode [ 1209.383629][T15006] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1209.417979][T15006] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1209.418010][T15006] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1209.418360][T15006] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1209.418384][T15006] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1210.995858][T12260] Bluetooth: hci0: command tx timeout [ 1211.677398][T12260] Bluetooth: hci1: command 0x0405 tx timeout [ 1212.015043][T14662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.041412][T14662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.316425][T14662] team0: Port device team_slave_0 added [ 1212.347795][T14662] team0: Port device team_slave_1 added [ 1212.512207][T14662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.512228][T14662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.512259][T14662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.064595][T12260] Bluetooth: hci0: command tx timeout [ 1214.400100][T14662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.400119][T14662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.400152][T14662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.157824][T12260] Bluetooth: hci0: command tx timeout [ 1217.452503][T12260] Bluetooth: hci0: command tx timeout [ 1218.053682][T14662] hsr_slave_0: entered promiscuous mode [ 1218.062273][T14662] hsr_slave_1: entered promiscuous mode [ 1218.072304][T14662] debugfs: 'hsr0' already exists in 'hsr' [ 1218.072334][T14662] Cannot create hsr debugfs directory [ 1219.151000][T15056] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1219.153563][T15056] /dev/loop1: Can't lookup blockdev [ 1219.177038][ T1561] bridge_slave_1: left allmulticast mode [ 1219.177075][ T1561] bridge_slave_1: left promiscuous mode [ 1219.177361][ T1561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.284748][ T1561] bridge_slave_0: left allmulticast mode [ 1219.284777][ T1561] bridge_slave_0: left promiscuous mode [ 1219.284984][ T1561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.068146][ T1561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1222.218544][ T1561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.801304][ T1561] bond0 (unregistering): Released all slaves [ 1225.697269][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.709522][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.809937][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1225.817032][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1225.837042][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1225.899432][T12829] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1225.904753][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1225.923194][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1226.094390][T12829] usb 6-1: Using ep0 maxpacket: 16 [ 1226.162450][T12829] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.162486][T12829] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.162511][T12829] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1226.162548][T12829] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1226.162573][T12829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.377014][T12829] usb 6-1: config 0 descriptor?? [ 1227.086354][ T1561] hsr_slave_0: left promiscuous mode [ 1227.127052][ T1561] hsr_slave_1: left promiscuous mode [ 1227.128152][ T1561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.187339][ T1561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.414351][T12260] Bluetooth: hci5: command tx timeout [ 1228.456583][T15139] FAULT_INJECTION: forcing a failure. [ 1228.456583][T15139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.456623][T15139] CPU: 1 UID: 0 PID: 15139 Comm: syz.0.2446 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1228.456655][T15139] Tainted: [L]=SOFTLOCKUP [ 1228.456663][T15139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1228.456676][T15139] Call Trace: [ 1228.456686][T15139] [ 1228.456697][T15139] dump_stack_lvl+0xe8/0x150 [ 1228.456730][T15139] should_fail_ex+0x46b/0x600 [ 1228.456778][T15139] _copy_to_user+0x31/0xb0 [ 1228.456807][T15139] simple_read_from_buffer+0xe1/0x170 [ 1228.456849][T15139] proc_fail_nth_read+0x1be/0x230 [ 1228.456888][T15139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1228.456929][T15139] ? rw_verify_area+0x2ac/0x4e0 [ 1228.456955][T15139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1228.456994][T15139] vfs_read+0x212/0xa80 [ 1228.457030][T15139] ? __pfx_vfs_read+0x10/0x10 [ 1228.457059][T15139] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1228.457087][T15139] ? lockdep_hardirqs_on+0x7a/0x110 [ 1228.457113][T15139] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1228.457140][T15139] ? mutex_lock_nested+0x152/0x1d0 [ 1228.457173][T15139] ? fdget_pos+0x252/0x320 [ 1228.457204][T15139] ksys_read+0x156/0x270 [ 1228.457234][T15139] ? __pfx_ksys_read+0x10/0x10 [ 1228.457269][T15139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.457296][T15139] do_syscall_64+0x15f/0xf80 [ 1228.457321][T15139] ? trace_irq_disable+0x3b/0x140 [ 1228.457348][T15139] ? clear_bhb_loop+0x40/0x90 [ 1228.457378][T15139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.457410][T15139] RIP: 0033:0x7f0cd0a8d60e [ 1228.457431][T15139] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1228.457451][T15139] RSP: 002b:00007f0cced25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1228.457475][T15139] RAX: ffffffffffffffda RBX: 00007f0cced266c0 RCX: 00007f0cd0a8d60e [ 1228.457492][T15139] RDX: 000000000000000f RSI: 00007f0cced260a0 RDI: 0000000000000005 [ 1228.457506][T15139] RBP: 00007f0cced26090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.457521][T15139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.457535][T15139] R13: 00007f0cd0d46038 R14: 00007f0cd0d45fa0 R15: 00007ffd4064ef68 [ 1228.457572][T15139] [ 1228.968086][T15142] /dev/loop0: Can't lookup blockdev [ 1229.137845][ T1561] team0 (unregistering): Port device team_slave_1 removed [ 1229.236880][ T1561] team0 (unregistering): Port device team_slave_0 removed [ 1229.832165][T15148] Bluetooth: MGMT ver 1.23 [ 1229.832218][T15148] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 1230.037131][T15102] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 1230.184662][ T9] usb 6-1: USB disconnect, device number 47 [ 1230.494734][T12260] Bluetooth: hci5: command tx timeout [ 1230.774659][ T5256] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1230.907971][T15150] macvtap1: entered promiscuous mode [ 1230.908001][T15150] macvtap1: entered allmulticast mode [ 1230.908477][T15150] veth1_vlan: entered allmulticast mode [ 1230.933148][T15150] team0: Device macvtap1 failed to register rx_handler [ 1230.948055][T15150] veth1_vlan: left allmulticast mode [ 1232.541737][T15178] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1232.574282][T15178] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1232.574333][T12260] Bluetooth: hci5: command tx timeout [ 1232.574433][T15178] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1232.574550][T15178] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1232.574571][T15178] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1233.399855][T15196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1233.441625][T15196] binfmt_misc: register: failed to install interpreter file ./file0 [ 1234.654800][T12260] Bluetooth: hci5: command tx timeout [ 1236.230419][T14993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.230617][T14993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.230849][T14993] bridge_slave_0: entered allmulticast mode [ 1236.260680][T14993] bridge_slave_0: entered promiscuous mode [ 1236.329107][T14993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.329236][T14993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.329460][T14993] bridge_slave_1: entered allmulticast mode [ 1236.363689][T14993] bridge_slave_1: entered promiscuous mode [ 1237.344467][ T1561] bridge_slave_1: left allmulticast mode [ 1237.344507][ T1561] bridge_slave_1: left promiscuous mode [ 1237.344788][ T1561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.532174][ T1561] bridge_slave_0: left allmulticast mode [ 1237.532212][ T1561] bridge_slave_0: left promiscuous mode [ 1237.550170][ T1561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.828448][ T1561] bridge_slave_1: left allmulticast mode [ 1237.828486][ T1561] bridge_slave_1: left promiscuous mode [ 1237.867140][ T1561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.259684][ T1561] bridge_slave_0: left allmulticast mode [ 1238.259722][ T1561] bridge_slave_0: left promiscuous mode [ 1238.259969][ T1561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.353042][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.353121][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.781655][T15244] vivid-000: disconnect [ 1240.194610][ T1561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.438093][T15237] vivid-000: reconnect [ 1241.382445][ T1561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.501592][ T1561] bond0 (unregistering): Released all slaves [ 1241.977443][ T1561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.100753][ T1561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.179540][ T1561] bond0 (unregistering): Released all slaves [ 1242.387581][ T5256] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1242.478146][T14993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.564118][T14993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.013383][T14993] team0: Port device team_slave_0 added [ 1243.059762][T14993] team0: Port device team_slave_1 added [ 1244.464976][T14993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.464995][T14993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.465027][T14993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.659478][ T1561] hsr_slave_0: left promiscuous mode [ 1244.760271][ T1561] hsr_slave_1: left promiscuous mode [ 1244.761314][ T1561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.833983][ T1561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.164800][ T1561] hsr_slave_0: left promiscuous mode [ 1245.489365][ T1561] hsr_slave_1: left promiscuous mode [ 1245.490652][ T1561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.456947][ T1561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.499349][ T1561] team0 (unregistering): Port device team_slave_1 removed [ 1248.756069][ T1561] team0 (unregistering): Port device team_slave_0 removed [ 1249.949040][ T1561] team0 (unregistering): Port device team_slave_1 removed [ 1250.026779][ T1561] team0 (unregistering): Port device team_slave_0 removed [ 1250.437658][T15322] FAULT_INJECTION: forcing a failure. [ 1250.437658][T15322] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.437703][T15322] CPU: 1 UID: 0 PID: 15322 Comm: syz.1.2494 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1250.437736][T15322] Tainted: [L]=SOFTLOCKUP [ 1250.437745][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1250.437760][T15322] Call Trace: [ 1250.437770][T15322] [ 1250.437780][T15322] dump_stack_lvl+0xe8/0x150 [ 1250.437814][T15322] should_fail_ex+0x46b/0x600 [ 1250.437859][T15322] should_failslab+0xa8/0x100 [ 1250.437891][T15322] __kmalloc_noprof+0xdf/0x7b0 [ 1250.437918][T15322] ? __pfx_af_alg_wait_for_data+0x10/0x10 [ 1250.437945][T15322] ? sock_kmalloc+0xd6/0x160 [ 1250.437982][T15322] sock_kmalloc+0xd6/0x160 [ 1250.438016][T15322] af_alg_alloc_areq+0x99/0x200 [ 1250.438047][T15322] skcipher_recvmsg+0x321/0x1140 [ 1250.438104][T15322] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1250.438133][T15322] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.438168][T15322] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1250.438196][T15322] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1250.438220][T15322] ? security_socket_recvmsg+0x7e/0x2c0 [ 1250.438249][T15322] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1250.438281][T15322] sock_recvmsg+0x172/0x1b0 [ 1250.438321][T15322] ____sys_recvmsg+0x1f2/0x4b0 [ 1250.438363][T15322] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1250.438411][T15322] ? import_iovec+0x73/0xa0 [ 1250.438442][T15322] ___sys_recvmsg+0x215/0x590 [ 1250.438471][T15322] ? get_pid_task+0x20/0x1f0 [ 1250.438508][T15322] ? __pfx____sys_recvmsg+0x10/0x10 [ 1250.438545][T15322] ? __fget_files+0x2a/0x420 [ 1250.438587][T15322] ? __fget_files+0x3a6/0x420 [ 1250.438629][T15322] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1250.438664][T15322] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1250.438706][T15322] ? __pfx_ksys_write+0x10/0x10 [ 1250.438744][T15322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.438769][T15322] do_syscall_64+0x15f/0xf80 [ 1250.438794][T15322] ? trace_irq_disable+0x3b/0x140 [ 1250.438823][T15322] ? clear_bhb_loop+0x40/0x90 [ 1250.438852][T15322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.438876][T15322] RIP: 0033:0x7fa5f49bcdd9 [ 1250.438899][T15322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.438920][T15322] RSP: 002b:00007fa5f2c16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1250.438944][T15322] RAX: ffffffffffffffda RBX: 00007fa5f4c35fa0 RCX: 00007fa5f49bcdd9 [ 1250.438961][T15322] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1250.438976][T15322] RBP: 00007fa5f2c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.438990][T15322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.439004][T15322] R13: 00007fa5f4c36038 R14: 00007fa5f4c35fa0 R15: 00007ffd302e7f08 [ 1250.439041][T15322] [ 1250.483632][T14993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.483687][T14993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.483774][T14993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.283647][T15330] fuse: Bad value for 'fd' [ 1252.111131][T14993] hsr_slave_0: entered promiscuous mode [ 1252.116727][T14993] hsr_slave_1: entered promiscuous mode [ 1252.701858][T15351] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2499'. [ 1255.004524][ T5256] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1256.475055][T15376] FAULT_INJECTION: forcing a failure. [ 1256.475055][T15376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.475090][T15376] CPU: 0 UID: 0 PID: 15376 Comm: syz.0.2505 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1256.475114][T15376] Tainted: [L]=SOFTLOCKUP [ 1256.475121][T15376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1256.475134][T15376] Call Trace: [ 1256.475141][T15376] [ 1256.475149][T15376] dump_stack_lvl+0xe8/0x150 [ 1256.475189][T15376] should_fail_ex+0x46b/0x600 [ 1256.475224][T15376] _copy_from_user+0x2d/0xb0 [ 1256.475247][T15376] ___sys_sendmsg+0x1c6/0x360 [ 1256.475273][T15376] ? __lock_acquire+0x6b5/0x2cf0 [ 1256.475301][T15376] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.475330][T15376] ? kstrtouint+0x6e/0xe0 [ 1256.475379][T15376] ? __fget_files+0x2a/0x420 [ 1256.475397][T15376] ? __fget_files+0x3a6/0x420 [ 1256.475424][T15376] __sys_sendmmsg+0x282/0x4e0 [ 1256.475456][T15376] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1256.475487][T15376] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1256.475529][T15376] ? ksys_write+0x248/0x270 [ 1256.475554][T15376] ? __pfx_ksys_write+0x10/0x10 [ 1256.475582][T15376] __x64_sys_sendmmsg+0xa0/0xc0 [ 1256.475609][T15376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.475632][T15376] do_syscall_64+0x15f/0xf80 [ 1256.475652][T15376] ? trace_irq_disable+0x3b/0x140 [ 1256.475673][T15376] ? clear_bhb_loop+0x40/0x90 [ 1256.475693][T15376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.475711][T15376] RIP: 0033:0x7f0cd0accdd9 [ 1256.475729][T15376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.475744][T15376] RSP: 002b:00007f0cced26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1256.475768][T15376] RAX: ffffffffffffffda RBX: 00007f0cd0d45fa0 RCX: 00007f0cd0accdd9 [ 1256.475782][T15376] RDX: 0000000000000001 RSI: 0000200000004a40 RDI: 0000000000000003 [ 1256.475794][T15376] RBP: 00007f0cced26090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.475807][T15376] R10: 0000000024009800 R11: 0000000000000246 R12: 0000000000000001 [ 1256.475820][T15376] R13: 00007f0cd0d46038 R14: 00007f0cd0d45fa0 R15: 00007ffd4064ef68 [ 1256.475849][T15376] [ 1256.972945][T15103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.973043][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.973249][T15103] bridge_slave_0: entered allmulticast mode [ 1256.976751][T15103] bridge_slave_0: entered promiscuous mode [ 1257.008513][T15103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.008646][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.020202][T15103] bridge_slave_1: entered allmulticast mode [ 1257.039506][T15103] bridge_slave_1: entered promiscuous mode [ 1259.110213][T15103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.170072][T15103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.257867][T15103] team0: Port device team_slave_0 added [ 1261.302360][T15103] team0: Port device team_slave_1 added [ 1264.235187][T15103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.235208][T15103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.235242][T15103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.289446][T15103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.289466][T15103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.289498][T15103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.016166][T15103] hsr_slave_0: entered promiscuous mode [ 1267.049499][T15103] hsr_slave_1: entered promiscuous mode [ 1267.067333][T15103] debugfs: 'hsr0' already exists in 'hsr' [ 1267.067363][T15103] Cannot create hsr debugfs directory [ 1267.422141][T14993] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1267.504631][T14993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1267.591131][T14993] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1267.921471][T14993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1269.397087][ T5256] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1269.825589][T15460] FAULT_INJECTION: forcing a failure. [ 1269.825589][T15460] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.825655][T15460] CPU: 1 UID: 0 PID: 15460 Comm: syz.5.2522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1269.825688][T15460] Tainted: [L]=SOFTLOCKUP [ 1269.825696][T15460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1269.825710][T15460] Call Trace: [ 1269.825720][T15460] [ 1269.825730][T15460] dump_stack_lvl+0xe8/0x150 [ 1269.825762][T15460] should_fail_ex+0x46b/0x600 [ 1269.825805][T15460] should_failslab+0xa8/0x100 [ 1269.825837][T15460] kmem_cache_alloc_noprof+0x87/0x680 [ 1269.825863][T15460] ? do_getname+0x2e/0x250 [ 1269.825893][T15460] ? build_open_flags+0xcd/0x5b0 [ 1269.825931][T15460] do_getname+0x2e/0x250 [ 1269.825962][T15460] ? getname_flags+0x11/0x20 [ 1269.825996][T15460] do_sys_openat2+0xca/0x200 [ 1269.826035][T15460] ? __pfx_do_sys_openat2+0x10/0x10 [ 1269.826071][T15460] ? ksys_write+0x248/0x270 [ 1269.826100][T15460] ? __pfx_ksys_write+0x10/0x10 [ 1269.826131][T15460] __x64_sys_openat+0x138/0x170 [ 1269.826170][T15460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.826194][T15460] do_syscall_64+0x15f/0xf80 [ 1269.826223][T15460] ? clear_bhb_loop+0x40/0x90 [ 1269.826253][T15460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.826283][T15460] RIP: 0033:0x7f3e1e13cdd9 [ 1269.826306][T15460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.826325][T15460] RSP: 002b:00007f3e1c354028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1269.826350][T15460] RAX: ffffffffffffffda RBX: 00007f3e1e3b6180 RCX: 00007f3e1e13cdd9 [ 1269.826367][T15460] RDX: 0000000000000042 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1269.826383][T15460] RBP: 00007f3e1c354090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.826398][T15460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.826412][T15460] R13: 00007f3e1e3b6218 R14: 00007f3e1e3b6180 R15: 00007ffcd676c528 [ 1269.826447][T15460] [ 1271.189602][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1271.232323][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1271.234855][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1271.236182][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1271.237024][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1272.998853][T15478] /dev/nullb0: Can't lookup blockdev [ 1274.414925][T12260] Bluetooth: hci1: command tx timeout [ 1278.464467][T12260] Bluetooth: hci1: command tx timeout [ 1279.773615][T15498] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2532'. [ 1279.773683][T15498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2532'. [ 1279.773706][T15498] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2532'. [ 1279.930075][T15497] 9p: Bad value for 'wfdno' [ 1280.504625][T12260] Bluetooth: hci1: command tx timeout [ 1280.747271][T15510] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1280.747307][T15510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1281.030753][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1281.030774][ T37] audit: type=1326 audit(1777972403.863:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1281.032823][ T37] audit: type=1326 audit(1777972403.863:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1281.110010][ T37] audit: type=1326 audit(1777972403.943:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1281.110184][ T37] audit: type=1326 audit(1777972403.943:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1281.110567][ T37] audit: type=1326 audit(1777972403.943:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1281.113119][ T37] audit: type=1326 audit(1777972403.943:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1281.131872][ T37] audit: type=1326 audit(1777972403.953:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1281.133972][ T37] audit: type=1326 audit(1777972403.963:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1281.181310][ T37] audit: type=1326 audit(1777972403.983:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1281.181541][ T37] audit: type=1326 audit(1777972404.003:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15516 comm="syz.1.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5f49bcdd9 code=0x7ffc0000 [ 1283.808431][T12260] Bluetooth: hci1: command tx timeout [ 1285.387469][T15538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1288.958419][T15562] FAULT_INJECTION: forcing a failure. [ 1288.958419][T15562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.958460][T15562] CPU: 1 UID: 0 PID: 15562 Comm: syz.0.2543 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1288.958493][T15562] Tainted: [L]=SOFTLOCKUP [ 1288.958503][T15562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1288.958517][T15562] Call Trace: [ 1288.958527][T15562] [ 1288.958537][T15562] dump_stack_lvl+0xe8/0x150 [ 1288.958570][T15562] should_fail_ex+0x46b/0x600 [ 1288.958614][T15562] _copy_to_user+0x31/0xb0 [ 1288.958644][T15562] simple_read_from_buffer+0xe1/0x170 [ 1288.958685][T15562] proc_fail_nth_read+0x1be/0x230 [ 1288.958726][T15562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1288.958773][T15562] ? rw_verify_area+0x2ac/0x4e0 [ 1288.958799][T15562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1288.958837][T15562] vfs_read+0x212/0xa80 [ 1288.958873][T15562] ? __pfx_vfs_read+0x10/0x10 [ 1288.958901][T15562] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1288.958928][T15562] ? lockdep_hardirqs_on+0x7a/0x110 [ 1288.958954][T15562] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1288.958981][T15562] ? mutex_lock_nested+0x152/0x1d0 [ 1288.959012][T15562] ? fdget_pos+0x252/0x320 [ 1288.959049][T15562] ksys_read+0x156/0x270 [ 1288.959078][T15562] ? __pfx_ksys_read+0x10/0x10 [ 1288.959114][T15562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.959140][T15562] do_syscall_64+0x15f/0xf80 [ 1288.959165][T15562] ? trace_irq_disable+0x3b/0x140 [ 1288.959192][T15562] ? clear_bhb_loop+0x40/0x90 [ 1288.959222][T15562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.959245][T15562] RIP: 0033:0x7f0cd0a8d60e [ 1288.959267][T15562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1288.959287][T15562] RSP: 002b:00007f0cced25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1288.959311][T15562] RAX: ffffffffffffffda RBX: 00007f0cced266c0 RCX: 00007f0cd0a8d60e [ 1288.959328][T15562] RDX: 000000000000000f RSI: 00007f0cced260a0 RDI: 0000000000000003 [ 1288.959342][T15562] RBP: 00007f0cced26090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.959356][T15562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.959369][T15562] R13: 00007f0cd0d46038 R14: 00007f0cd0d45fa0 R15: 00007ffd4064ef68 [ 1288.959404][T15562] [ 1289.606790][T15568] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2544'. [ 1290.263322][T12260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1290.337160][T12260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1290.339907][T12260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1291.351162][T12260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1291.360232][T12260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1295.504900][ T5601] Bluetooth: hci0: command tx timeout [ 1297.786858][ T5601] Bluetooth: hci0: command tx timeout [ 1300.669820][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.669898][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.671662][T12260] Bluetooth: hci0: command tx timeout [ 1301.304026][T15650] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2563'. [ 1301.304052][T15650] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2563'. [ 1301.304073][T15650] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2563'. [ 1301.451888][T15649] 9pnet_fd: Insufficient options for proto=fd [ 1302.734505][T12260] Bluetooth: hci0: command tx timeout [ 1304.250923][T15673] FAULT_INJECTION: forcing a failure. [ 1304.250923][T15673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.250965][T15673] CPU: 1 UID: 0 PID: 15673 Comm: syz.0.2568 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1304.250996][T15673] Tainted: [L]=SOFTLOCKUP [ 1304.251005][T15673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1304.251020][T15673] Call Trace: [ 1304.251029][T15673] [ 1304.251039][T15673] dump_stack_lvl+0xe8/0x150 [ 1304.251073][T15673] should_fail_ex+0x46b/0x600 [ 1304.251116][T15673] _copy_from_iter+0x1d3/0x1670 [ 1304.251148][T15673] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1304.251173][T15673] ? __alloc_skb+0x27d/0x7d0 [ 1304.251199][T15673] ? __pfx__copy_from_iter+0x10/0x10 [ 1304.251228][T15673] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1304.251254][T15673] ? __alloc_skb+0x27d/0x7d0 [ 1304.251287][T15673] ? netlink_sendmsg+0x650/0xb40 [ 1304.251314][T15673] ? skb_put+0x11b/0x210 [ 1304.251344][T15673] netlink_sendmsg+0x6c0/0xb40 [ 1304.251382][T15673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1304.251413][T15673] ? unwind_get_return_address+0x4d/0x90 [ 1304.251449][T15673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1304.251478][T15673] ____sys_sendmsg+0x94c/0x9c0 [ 1304.251514][T15673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1304.251554][T15673] ? import_iovec+0x73/0xa0 [ 1304.251584][T15673] ___sys_sendmsg+0x2a5/0x360 [ 1304.251614][T15673] ? __lock_acquire+0x6b5/0x2cf0 [ 1304.251649][T15673] ? __pfx____sys_sendmsg+0x10/0x10 [ 1304.251717][T15673] ? __fget_files+0x2a/0x420 [ 1304.251739][T15673] ? __fget_files+0x3a6/0x420 [ 1304.251771][T15673] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1304.251804][T15673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1304.251844][T15673] ? __pfx_ksys_write+0x10/0x10 [ 1304.251881][T15673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.251907][T15673] do_syscall_64+0x15f/0xf80 [ 1304.251932][T15673] ? trace_irq_disable+0x3b/0x140 [ 1304.251959][T15673] ? clear_bhb_loop+0x40/0x90 [ 1304.251988][T15673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.252011][T15673] RIP: 0033:0x7f0cd0accdd9 [ 1304.252033][T15673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.252053][T15673] RSP: 002b:00007f0cced26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.252077][T15673] RAX: ffffffffffffffda RBX: 00007f0cd0d45fa0 RCX: 00007f0cd0accdd9 [ 1304.252095][T15673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1304.252110][T15673] RBP: 00007f0cced26090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.252125][T15673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.252139][T15673] R13: 00007f0cd0d46038 R14: 00007f0cd0d45fa0 R15: 00007ffd4064ef68 [ 1304.252175][T15673] [ 1306.590650][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2571'. [ 1306.591103][T15689] netem: incorrect ge model size [ 1306.591136][T15689] netem: change failed [ 1311.667059][ T6678] bridge_slave_1: left allmulticast mode [ 1311.667099][ T6678] bridge_slave_1: left promiscuous mode [ 1311.667369][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.236156][T15748] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2580'. [ 1312.833188][T15754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1313.827740][ T6678] bridge_slave_0: left allmulticast mode [ 1313.827778][ T6678] bridge_slave_0: left promiscuous mode [ 1313.828043][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.638620][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.686969][T15779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.748083][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.829471][ T6678] bond0 (unregistering): Released all slaves [ 1319.227773][T15468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.227949][T15468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.228200][T15468] bridge_slave_0: entered allmulticast mode [ 1319.275400][T15468] bridge_slave_0: entered promiscuous mode [ 1319.301287][T15468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.301498][T15468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.314725][T15468] bridge_slave_1: entered allmulticast mode [ 1319.317186][T15468] bridge_slave_1: entered promiscuous mode [ 1319.644880][T15793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2595'. [ 1319.644919][T15793] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2595'. [ 1319.999764][T15468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.058549][T15807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1324.057525][ T6678] hsr_slave_0: left promiscuous mode [ 1324.149547][ T6678] hsr_slave_1: left promiscuous mode [ 1324.150640][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.201507][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.592932][T15821] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2599'. [ 1324.875128][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2599'. [ 1326.022852][ T6678] team0 (unregistering): Port device team_slave_1 removed [ 1326.196749][ T6678] team0 (unregistering): Port device team_slave_0 removed [ 1326.274178][T15851] FAULT_INJECTION: forcing a failure. [ 1326.274178][T15851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.274216][T15851] CPU: 0 UID: 0 PID: 15851 Comm: syz.0.2604 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1326.274241][T15851] Tainted: [L]=SOFTLOCKUP [ 1326.274248][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1326.274259][T15851] Call Trace: [ 1326.274265][T15851] [ 1326.274273][T15851] dump_stack_lvl+0xe8/0x150 [ 1326.274300][T15851] should_fail_ex+0x46b/0x600 [ 1326.274333][T15851] _copy_from_user+0x2d/0xb0 [ 1326.274355][T15851] memdup_user+0x5e/0xd0 [ 1326.274383][T15851] strndup_user+0x68/0xd0 [ 1326.274415][T15851] __se_sys_mount+0xdf/0x420 [ 1326.274445][T15851] ? ksys_write+0x248/0x270 [ 1326.274474][T15851] ? __pfx___se_sys_mount+0x10/0x10 [ 1326.274508][T15851] ? __x64_sys_mount+0x20/0xc0 [ 1326.274535][T15851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.274556][T15851] do_syscall_64+0x15f/0xf80 [ 1326.274577][T15851] ? trace_irq_disable+0x3b/0x140 [ 1326.274600][T15851] ? clear_bhb_loop+0x40/0x90 [ 1326.274625][T15851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.274645][T15851] RIP: 0033:0x7f0cd0accdd9 [ 1326.274679][T15851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.274694][T15851] RSP: 002b:00007f0cced26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1326.274716][T15851] RAX: ffffffffffffffda RBX: 00007f0cd0d45fa0 RCX: 00007f0cd0accdd9 [ 1326.274731][T15851] RDX: 00002000000003c0 RSI: 0000200000000040 RDI: 0000200000002440 [ 1326.274744][T15851] RBP: 00007f0cced26090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.274762][T15851] R10: 000000000200840d R11: 0000000000000246 R12: 0000000000000001 [ 1326.274774][T15851] R13: 00007f0cd0d46038 R14: 00007f0cd0d45fa0 R15: 00007ffd4064ef68 [ 1326.274808][T15851] [ 1326.992200][T15856] FAULT_INJECTION: forcing a failure. [ 1326.992200][T15856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.992266][T15856] CPU: 1 UID: 0 PID: 15856 Comm: syz.0.2605 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1326.992299][T15856] Tainted: [L]=SOFTLOCKUP [ 1326.992308][T15856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1326.992321][T15856] Call Trace: [ 1326.992331][T15856] [ 1326.992341][T15856] dump_stack_lvl+0xe8/0x150 [ 1326.992373][T15856] should_fail_ex+0x46b/0x600 [ 1326.992416][T15856] _copy_from_user+0x2d/0xb0 [ 1326.992445][T15856] ___sys_recvmsg+0x175/0x590 [ 1326.992482][T15856] ? __pfx____sys_recvmsg+0x10/0x10 [ 1326.992518][T15856] ? __fget_files+0x2a/0x420 [ 1326.992573][T15856] do_recvmmsg+0x33a/0x800 [ 1326.992619][T15856] ? __pfx_do_recvmmsg+0x10/0x10 [ 1326.992663][T15856] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1326.992716][T15856] __x64_sys_recvmmsg+0x198/0x250 [ 1326.992750][T15856] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1326.992787][T15856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.992807][T15856] do_syscall_64+0x15f/0xf80 [ 1326.992826][T15856] ? trace_irq_disable+0x3b/0x140 [ 1326.992848][T15856] ? clear_bhb_loop+0x40/0x90 [ 1326.992869][T15856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.992887][T15856] RIP: 0033:0x7f0cd0accdd9 [ 1326.992905][T15856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.992922][T15856] RSP: 002b:00007f0cced05028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1326.992941][T15856] RAX: ffffffffffffffda RBX: 00007f0cd0d46090 RCX: 00007f0cd0accdd9 [ 1326.992954][T15856] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 1326.992966][T15856] RBP: 00007f0cced05090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.992978][T15856] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1326.992989][T15856] R13: 00007f0cd0d46128 R14: 00007f0cd0d46090 R15: 00007ffd4064ef68 [ 1326.993022][T15856] [ 1327.238521][T15468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.298104][T15822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1327.657836][T15468] team0: Port device team_slave_0 added [ 1327.677487][T15468] team0: Port device team_slave_1 added [ 1328.089750][T15468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.089769][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.089800][T15468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.273993][T15468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.274010][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.274034][T15468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.362357][T15874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1328.389895][T15874] binfmt_misc: register: failed to install interpreter file ./file0 [ 1329.951451][T15573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.951579][T15573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.974385][T15573] bridge_slave_0: entered allmulticast mode [ 1329.985468][T15573] bridge_slave_0: entered promiscuous mode [ 1330.008677][T15573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.008809][T15573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.009013][T15573] bridge_slave_1: entered allmulticast mode [ 1330.041617][T15573] bridge_slave_1: entered promiscuous mode [ 1330.288859][T15573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.348615][T15573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.699180][ T6678] bridge_slave_1: left allmulticast mode [ 1330.699221][ T6678] bridge_slave_1: left promiscuous mode [ 1330.699490][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.090390][ T6678] bridge_slave_0: left allmulticast mode [ 1331.090428][ T6678] bridge_slave_0: left promiscuous mode [ 1331.090716][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.279637][T15900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1331.300499][T15900] binfmt_misc: register: failed to install interpreter file ./file0 [ 1334.094339][ T5728] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1334.198646][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1334.416771][T15923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.441261][T15924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2617'. [ 1334.466648][T15923] binfmt_misc: register: failed to install interpreter file ./file0 [ 1335.221808][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1335.223582][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1335.226095][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1335.226955][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1336.236797][ T5728] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1336.236827][ T5728] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1336.236851][ T5728] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 143 [ 1336.236874][ T5728] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.236895][ T5728] usb 6-1: config 0 has no interface number 0 [ 1336.236928][ T5728] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 1336.236986][ T5728] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 1336.237185][ T5728] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1336.237224][ T5728] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1336.237249][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.499489][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.536534][ T5728] usb 6-1: config 0 descriptor?? [ 1336.576945][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.635923][ T6678] bond0 (unregistering): Released all slaves [ 1336.688334][ T5728] usb 6-1: can't set config #0, error -71 [ 1336.764276][ T5728] usb 6-1: USB disconnect, device number 48 [ 1338.454446][ T5601] Bluetooth: hci1: command tx timeout [ 1338.703876][T10560] ------------[ cut here ]------------ [ 1338.703893][T10560] in_task() && kcov_mode_enabled(mode) [ 1338.703911][T10560] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/u8:19/10560 [ 1338.703961][T10560] Modules linked in: [ 1338.703984][T10560] CPU: 0 UID: 0 PID: 10560 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1338.704033][T10560] Tainted: [L]=SOFTLOCKUP [ 1338.704042][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1338.704058][T10560] Workqueue: events_unbound cfg80211_wiphy_work [ 1338.704086][T10560] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1338.704159][T10560] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 da dc 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 5a ef 57 09 89 c0 48 c7 c7 10 04 6b [ 1338.704181][T10560] RSP: 0000:ffffc90004e279d8 EFLAGS: 00010202 [ 1338.704201][T10560] RAX: 0000000000000002 RBX: ffff88806b7c8000 RCX: 0000000000000000 [ 1338.704218][T10560] RDX: 0000000000000000 RSI: ffffffff8ba74d40 RDI: ffffffff8ba74d00 [ 1338.704234][T10560] RBP: ffff88802b3a2280 R08: ffffffff8b1ea760 R09: ffffffff8dfc8140 [ 1338.704252][T10560] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: ffff88805dd09dc8 [ 1338.704270][T10560] R13: ffff888061ef07c0 R14: 0000000000000000 R15: ffff88805dd09de0 [ 1338.704287][T10560] FS: 0000000000000000(0000) GS:ffff888126179000(0000) knlGS:0000000000000000 [ 1338.704306][T10560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1338.704322][T10560] CR2: 000000110c38525c CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 1338.704342][T10560] Call Trace: [ 1338.704352][T10560] [ 1338.704367][T10560] ieee80211_iface_work+0x211/0x1390 [ 1338.704426][T10560] cfg80211_wiphy_work+0x2cf/0x460 [ 1338.704454][T10560] ? process_scheduled_works+0xa70/0x1860 [ 1338.704484][T10560] process_scheduled_works+0xb5d/0x1860 [ 1338.704547][T10560] ? __pfx_process_scheduled_works+0x10/0x10 [ 1338.704582][T10560] ? assign_work+0x3d5/0x5e0 [ 1338.704615][T10560] worker_thread+0xa53/0xfc0 [ 1338.704676][T10560] kthread+0x388/0x470 [ 1338.704709][T10560] ? __pfx_worker_thread+0x10/0x10 [ 1338.704733][T10560] ? __pfx_kthread+0x10/0x10 [ 1338.704766][T10560] ret_from_fork+0x514/0xb70 [ 1338.704799][T10560] ? __pfx_ret_from_fork+0x10/0x10 [ 1338.704849][T10560] ? __switch_to+0xc79/0x1410 [ 1338.704890][T10560] ? __pfx_kthread+0x10/0x10 [ 1338.704933][T10560] ret_from_fork_asm+0x1a/0x30 [ 1338.704986][T10560] [ 1338.704998][T10560] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1338.705018][T10560] CPU: 0 UID: 0 PID: 10560 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1338.705049][T10560] Tainted: [L]=SOFTLOCKUP [ 1338.705058][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1338.705073][T10560] Workqueue: events_unbound cfg80211_wiphy_work [ 1338.705098][T10560] Call Trace: [ 1338.705109][T10560] [ 1338.705118][T10560] vpanic+0x56c/0xa60 [ 1338.705148][T10560] ? __pfx__printk+0x10/0x10 [ 1338.705183][T10560] ? __pfx_vpanic+0x10/0x10 [ 1338.705210][T10560] ? is_bpf_text_address+0x292/0x2b0 [ 1338.705243][T10560] ? is_bpf_text_address+0x26/0x2b0 [ 1338.705286][T10560] panic+0xc5/0xd0 [ 1338.705316][T10560] ? __pfx_panic+0x10/0x10 [ 1338.705356][T10560] ? ret_from_fork_asm+0x1a/0x30 [ 1338.705419][T10560] __warn+0x315/0x4c0 [ 1338.705446][T10560] ? kcov_remote_start+0x5d8/0x710 [ 1338.705474][T10560] ? kcov_remote_start+0x5d8/0x710 [ 1338.705502][T10560] __report_bug+0x29a/0x540 [ 1338.705535][T10560] ? kcov_remote_start+0x5d8/0x710 [ 1338.705563][T10560] ? __pfx___report_bug+0x10/0x10 [ 1338.705590][T10560] ? do_raw_spin_lock+0x12b/0x2f0 [ 1338.705617][T10560] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1338.705660][T10560] ? rt_spin_lock+0x1e0/0x400 [ 1338.705696][T10560] ? rt_spin_lock+0x1e0/0x400 [ 1338.705730][T10560] ? kcov_remote_start+0x5d8/0x710 [ 1338.705756][T10560] report_bug+0x16a/0x220 [ 1338.705782][T10560] ? kcov_remote_start+0x5d8/0x710 [ 1338.705806][T10560] ? kcov_remote_start+0x5da/0x710 [ 1338.705831][T10560] handle_bug+0x9c/0x200 [ 1338.705862][T10560] exc_invalid_op+0x1a/0x50 [ 1338.705893][T10560] asm_exc_invalid_op+0x1a/0x20 [ 1338.705916][T10560] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1338.705942][T10560] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 da dc 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 5a ef 57 09 89 c0 48 c7 c7 10 04 6b [ 1338.705963][T10560] RSP: 0000:ffffc90004e279d8 EFLAGS: 00010202 [ 1338.705983][T10560] RAX: 0000000000000002 RBX: ffff88806b7c8000 RCX: 0000000000000000 [ 1338.705999][T10560] RDX: 0000000000000000 RSI: ffffffff8ba74d40 RDI: ffffffff8ba74d00 [ 1338.706016][T10560] RBP: ffff88802b3a2280 R08: ffffffff8b1ea760 R09: ffffffff8dfc8140 [ 1338.706034][T10560] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: ffff88805dd09dc8 [ 1338.706053][T10560] R13: ffff888061ef07c0 R14: 0000000000000000 R15: ffff88805dd09de0 [ 1338.706078][T10560] ? rt_spin_lock+0x1e0/0x400 [ 1338.706121][T10560] ? kcov_remote_start+0xe0/0x710 [ 1338.706151][T10560] ieee80211_iface_work+0x211/0x1390 [ 1338.706195][T10560] cfg80211_wiphy_work+0x2cf/0x460 [ 1338.706222][T10560] ? process_scheduled_works+0xa70/0x1860 [ 1338.706252][T10560] process_scheduled_works+0xb5d/0x1860 [ 1338.706317][T10560] ? __pfx_process_scheduled_works+0x10/0x10 [ 1338.706352][T10560] ? assign_work+0x3d5/0x5e0 [ 1338.706393][T10560] worker_thread+0xa53/0xfc0 [ 1338.706454][T10560] kthread+0x388/0x470 [ 1338.706487][T10560] ? __pfx_worker_thread+0x10/0x10 [ 1338.706512][T10560] ? __pfx_kthread+0x10/0x10 [ 1338.706547][T10560] ret_from_fork+0x514/0xb70 [ 1338.706579][T10560] ? __pfx_ret_from_fork+0x10/0x10 [ 1338.706607][T10560] ? __switch_to+0xc79/0x1410 [ 1338.706646][T10560] ? __pfx_kthread+0x10/0x10 [ 1338.706681][T10560] ret_from_fork_asm+0x1a/0x30 [ 1338.706732][T10560] [ 1338.707603][T10560] Kernel Offset: disabled