last executing test programs: 28m10.334411311s ago: executing program 4 (id=120): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000200), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x80080a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = socket(0x1, 0x3, 0x4) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0x736) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x4c}, 0x2, 0x34005, 0x0, 0x48810}, 0x40084) 28m6.94922543s ago: executing program 4 (id=124): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 28m6.550739046s ago: executing program 4 (id=130): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5,nr_blhcks=']) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0) 28m1.685533896s ago: executing program 4 (id=147): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={0x0, 0x2, 0x7, 0x1, &(0x7f00000002c0)=[{0x9, 0xff30, 0x3, 0x7}]}) 28m0.833305202s ago: executing program 4 (id=152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074"], 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 27m57.536213319s ago: executing program 4 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x282182, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e701007cdaddb4b47380c98847", 0xe}], 0x1) 27m42.428604646s ago: executing program 32 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x282182, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e701007cdaddb4b47380c98847", 0xe}], 0x1) 27m39.237838158s ago: executing program 33 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res(0x0, 0x1d2a09bf, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 27m38.696629098s ago: executing program 34 (id=183): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x2000004) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="002147657517a7071100000a630000", 0xf}], 0x1, 0x9, 0x1) 17m24.61628147s ago: executing program 3 (id=5035): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000fe00020007"], 0x2241c2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="760033008000e100ffffffffffff0802110000005050505050500000000000000000000064"], 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0xfffffffa) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x200c}) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r7 = syz_open_pts(r5, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x2) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x84448c08}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x28, r2, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8000) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write(r8, &(0x7f00000003c0)='1', 0x1) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='debugfs\x00', 0x200408, 0x0) 17m24.331796134s ago: executing program 3 (id=5036): socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @mcast1, 0x7}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101c42, 0x0) socket(0x840000000002, 0x3, 0x100) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) accept4(r3, 0x0, 0x0, 0x800) 17m24.230965216s ago: executing program 3 (id=5038): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="06e5c456", 0x4}, {&(0x7f0000000000)="1a53b960f237163b83f521b433ee2c217e644d8a45df0f7a295943137f14f641d312e2ccf95abee62bc1e3a7a97ffacc60f6fd0bcb8b0a8b68803f8f510bf298bd85da633285f24f9287c3263e2c9719a59d8d317295b62b598ea80cbacd487eecda82cacf87b769db366d244abe1f2754e1adc161971cc11f228e86815b1bd49ef11be007edb462c5fe5900700000", 0x8f}, {&(0x7f0000002000)="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", 0xdad}], 0x3, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) recvmmsg(r1, 0x0, 0x0, 0x400101c3, 0x0) 16m43.5475253s ago: executing program 35 (id=5037): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078640101000000000000004e20009c907801000000001000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad50ae79eabc5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67dd5a361e0dba1541ed6326ad15f5566d72b18f7113c1a15eb72affecba0f5cf1f0c66d3f67f69f9976dddbcdfd02acaccd493caa74486bfce75377cd729bd15a2f22af7106329884cfd34be8482102d3d90f06e998585e02040b42fa8b42c13ec64d875817c08d5e4af66241429f39bd0971caba96224888ee821de0c88001a17e72e65838f7aa419a2531c71b8b943549cc25e665228f2990d203aa8683f3f96fe41ec4c12e96880b3bf8da71f24032441a12b5d8da7404e65c37b95f3057c9bdd183714465b9287969306af314663ad5eba"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r2}, 0x50) sendfile(r5, r5, 0x0, 0x1002000ff) 16m43.289022581s ago: executing program 36 (id=5038): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="06e5c456", 0x4}, {&(0x7f0000000000)="1a53b960f237163b83f521b433ee2c217e644d8a45df0f7a295943137f14f641d312e2ccf95abee62bc1e3a7a97ffacc60f6fd0bcb8b0a8b68803f8f510bf298bd85da633285f24f9287c3263e2c9719a59d8d317295b62b598ea80cbacd487eecda82cacf87b769db366d244abe1f2754e1adc161971cc11f228e86815b1bd49ef11be007edb462c5fe5900700000", 0x8f}, {&(0x7f0000002000)="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", 0xdad}], 0x3, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) recvmmsg(r1, 0x0, 0x0, 0x400101c3, 0x0) 14m5.421862209s ago: executing program 8 (id=5243): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x400001, 0x100) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) 14m5.231456451s ago: executing program 8 (id=5246): syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001ffffffe89a98332ef71a1d915819000000020000364c8b3ea3d1a3d448dd4f980efccc9fc7a7ff69b3a80ab995b17bd2f5f27c70c031f774facec609a5c8904bbb391faf19edb9c5f2b676bbf7473e2c65cb5335cc729eb93ade1a0aff38eadcb01d4c2d430575bdb6f76c7ac87eacd77946d50b727943664d3da80d7493b993691204c1b278550e094f7f1a4d8fdc93bc1c"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 13m58.386473133s ago: executing program 8 (id=5256): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)={[{@max={'max', 0x3d, 0x7}}]}) 13m57.760645127s ago: executing program 8 (id=5257): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:1d.0', 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, 0x8400) close(r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/uhci_hcd/bind\x00', 0x1, 0x0) getpid() write(r5, &(0x7f00000001c0)='0000:00:1d.0', 0xc) 13m56.865738909s ago: executing program 8 (id=5260): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000400)=[@cpuid={0x64, 0x18, {0x14599635, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x67, {"640f320f3026430f1864d7fb440f07440f20c03509000000440f22c0b805000000b9000000000f01c1f3400fc7b17f43c6536466430f5bb2a3ca46b4c7442400d2000000c744240200100000ff1c24b9580200000f32"}}, @out_dx={0x6a, 0x28, {0x55d7, 0x5, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @out_dx={0x6a, 0x28, {0xf8a8, 0x4, 0x8000000000000001}}, @in_dx={0x69, 0x20, {0x1063}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x51}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x98f03e6, 0x0, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x74, 0x6, 0x40, 0x2}}, @in_dx={0x69, 0x20, {0x1, 0x3}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @rdmsr={0x66, 0x18}, @uexit={0x0, 0x18, 0x6}, @nested_vmresume={0x130, 0x18, 0x2}, @uexit={0x0, 0x18, 0xd6}], 0x2df}) ioctl$KVM_SMI(r0, 0xaeb7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) read(r1, 0x0, 0x0) write(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x4ce6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x6, @local, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x68) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000980)={0x0, &(0x7f0000000740)=[@nested_load_syzos={0x136, 0x172, {0x2, 0x200, [@nested_create_vm={0x12d, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x23e}}, @nested_load_code={0x12e, 0x58, {0x3, "66b8b1008ee066baf80cb8043fc580ef66bafc0c66ed36d0fc66b838008ec80fb6df400f2189660f237466440f09f3436f66baf80cb8f094c88eef66bafc0ced"}}, @wrmsr={0x65, 0x20, {0xb13, 0x43}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x4, 0x6}}, @code={0xa, 0x7a, {"0f20e035200000000f22e0660f38829a8b14c4dac4417d5a7fa12e67409866baf80cb8112f0980ef66bafc0cec2e410f234448b841000000000000000f23d00f21f835200000080f23f8c44279590d000000003e430f01c3b970000040b800000000ba008000000f30"}}]}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x4959}}, @in_dx={0x69, 0x20, {0x2b6}}, @rdmsr={0x66, 0x18, {0x800}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x8040}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control64=0x2019, 0x400, 0x6, 0x3e}}, @nested_amd_stgi={0x17e, 0x10}], 0x232}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) open(0x0, 0x66842, 0xa0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 13m53.700221907s ago: executing program 8 (id=5262): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 13m36.886041088s ago: executing program 37 (id=5262): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 11m53.366585165s ago: executing program 9 (id=5444): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r0, &(0x7f0000000880)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x1, 0x7, 0x6, "abeb06406726"}, {0x6, 0x3, 0x3, 0x3, 0x8, 0x752a}}}, 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004) 11m48.346978137s ago: executing program 9 (id=5450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a3100000000060002408809000014000480060007400000000608000640000000090500030006"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@deltfilter={0x14e4, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x14a0, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x1494, 0x2, [@m_skbmod={0x12c, 0x3, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb1, 0xffffffff, 0x5, 0x9d3, 0x6}, 0x2}}]}, {0xd9, 0x6, "94b652040de4ded665a7bd9fec652bb49fe14de5481e8a897330a188122e98fdc986f8b58ef166bd6cc31ed2a9ddf79931cccc3718c7830d7b587499e9984653a38283eea89a7aeb296e6ddaf42c7548e9d517a24adde441ddb5e87f510588a0354547b99e66dec5ab6682b6bac4f038fb9e87186b6a93d2d742dca8a2711bd9f90f5564018ef3f3e630389dd8794daf1fcbeb8a77e5225eacbc94c2f451344034b1c68b131d1a9ef38098faa7d66aa18d01a5cdcda43f72d45fd2d901a8ff89430c5162778ce7deeb6c659546927b787f475803a3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x924, 0x7, 0x0, 0x0, {{0xb}, {0x8e4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xf}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0xab}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2, 0x0, 0x0, 0x10001, {0x7f, 0x0, 0x100, 0x4, 0x3, 0x5}, {0x3, 0x2, 0x1, 0x5e, 0x8001, 0x9}, 0xfffffffb, 0x9eb657e4, 0x3}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x218, 0x81, 0x0, 0x1, 0x6, 0x8, 0x1, 0x3, 0x1ff, 0xfffffffe, 0x0, 0x1, 0x8001, 0x6, 0x4, 0x9, 0x2, 0x3, 0x1, 0x144a, 0xfffffffe, 0x5, 0x7fffffff, 0xffff5540, 0x8, 0xffffffff, 0xffffffff, 0x5, 0xc, 0x6, 0x4, 0x2, 0x2, 0x7f, 0x1, 0x5, 0xe5f0, 0x60, 0x6, 0x4, 0x1, 0x80000000, 0x5, 0x3ee, 0x5, 0xdb, 0x401, 0x0, 0x8000, 0xfffffffa, 0x2, 0x3c1, 0x6, 0x6, 0x2, 0x8, 0x3752, 0x68a, 0x6, 0x55, 0x3, 0x8, 0x3, 0x6, 0xffffffc9, 0x400, 0x7, 0x73, 0x7, 0x0, 0x52a, 0x8, 0x5, 0x4, 0x9, 0x3, 0x2, 0x4e, 0x7, 0x5, 0x3, 0x9, 0xfffffbff, 0x100, 0x1, 0xffff, 0x7fffffff, 0x7, 0x1ff, 0x9, 0x3, 0x7, 0x10, 0x7, 0x2, 0x7fff, 0x8, 0x4, 0x101, 0x7fffffff, 0x1, 0x61a000, 0xa, 0x8a, 0x1, 0x400, 0x0, 0x2, 0x2, 0x7, 0xf8, 0xbb43, 0x2, 0x7, 0xfffffff8, 0x4, 0x7, 0x5, 0x3, 0x6, 0x40, 0x0, 0x800, 0x80000001, 0x8e8e, 0x3, 0x3, 0x44e, 0xffffff46, 0xfffffffa, 0x8, 0x1, 0xfffff2f3, 0x5, 0x8, 0x2, 0x6, 0xe, 0x7fffffff, 0x9, 0x80000000, 0x4, 0x10000, 0x7, 0x3, 0x5, 0x9, 0x3, 0x5, 0x9, 0x1ff, 0x0, 0x0, 0xfff, 0x8, 0x7ab2, 0x5, 0x8, 0x8, 0x0, 0x0, 0x8cf6, 0x7, 0xea9, 0x3ff, 0xfffff801, 0x4, 0x77b5, 0x80000000, 0x4d03, 0x8001, 0x4ad5, 0x0, 0x1, 0x5, 0x9, 0x9, 0x80, 0x6, 0x7fff, 0x72d0b0f2, 0x1, 0x810, 0x5, 0x0, 0x3, 0x2, 0x0, 0x3f6, 0xfffffff5, 0x6, 0x3, 0x3b7d, 0x3, 0x4, 0xc6, 0x1, 0x1, 0x10, 0x18, 0x8, 0x1, 0x1, 0xf6b3, 0x3, 0x3, 0x2, 0x9, 0x4, 0x1ff, 0x7, 0x9, 0x800, 0xc, 0x7, 0x5, 0xffff, 0x9, 0x1ff, 0x3, 0x40, 0x80000001, 0x9, 0x8, 0xffffff59, 0x101, 0xffff8000, 0x80, 0x1, 0x276, 0xa, 0x3, 0x800, 0x1000, 0xfffffffd, 0xfffffff8, 0x4, 0xff, 0xffffffa9, 0x5, 0x80000000, 0x82, 0x3, 0x4af6, 0x8000, 0x49ecd84c, 0x4, 0x8000, 0x3, 0x1, 0x5, 0x2, 0x7, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x1, 0x40, 0x1, {0x80, 0x0, 0x7, 0xa59c, 0x5, 0x6}, {0x4, 0x2, 0x7ff, 0x5, 0x4, 0x7}, 0xc53, 0x22b5f516}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x608}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x75491ec0, 0x47e, 0x6, 0x2, 0x7ff, 0x2, 0x7ff, 0xef53, 0x9, 0x0, 0x400, 0x945a, 0x4, 0x6, 0x2, 0x8, 0x5, 0x5, 0x10001, 0x2, 0x100, 0x18, 0x5, 0x8, 0xd4b609, 0x3, 0x0, 0x3, 0x8, 0xf, 0x5, 0x4, 0x1, 0x0, 0xffffffff, 0x4, 0xd26d, 0x8, 0x7, 0x1, 0x8, 0xd, 0x3, 0x7, 0x40, 0xffffffff, 0xff, 0x7fffffff, 0x1, 0xae, 0x5, 0x2, 0x80000000, 0xe26, 0x6, 0xffff5f1e, 0x3076, 0xb, 0x8, 0x0, 0x43, 0x401, 0x9, 0x4, 0x108140a9, 0x5, 0x7, 0x3, 0x6, 0x14a, 0x7, 0x6, 0xd55d, 0xffffffff, 0xffffffff, 0x5, 0x6, 0x6, 0x9, 0x2, 0x8, 0x0, 0x7, 0x5eb55956, 0x80000001, 0x5, 0x9, 0x3, 0x80000000, 0xc, 0x8, 0x2, 0x2, 0xed, 0x6, 0x1ff, 0x7, 0x2, 0x40000000, 0x4, 0x6, 0xf12d, 0x8, 0x8361, 0x0, 0x5, 0x3, 0x81, 0x1000, 0x5, 0x1, 0x9, 0x6, 0x4, 0x7, 0x8, 0x6, 0x5, 0x1, 0x2, 0x49, 0x1, 0x6, 0x8000, 0xfffffffd, 0x400, 0x7fff, 0x77, 0x6e9d, 0x10, 0x4, 0x1, 0x9, 0x7, 0x1, 0x8, 0x6, 0x1, 0xecf, 0x401, 0x10, 0x5, 0x4, 0x8, 0x4, 0x5, 0x8, 0x6, 0x10000000, 0x2, 0x1ce0, 0x8, 0x8000, 0xffffffff, 0x9, 0xff, 0x2, 0x7, 0x400, 0x6, 0x7fffffff, 0xfffffffe, 0x2, 0x6, 0x7f, 0x1, 0x5, 0x5, 0x80000000, 0x7f, 0x6f9, 0x21, 0x6, 0x9, 0x0, 0xba41, 0xfffffff7, 0x7a, 0x1, 0xf3, 0x6, 0x18, 0x4, 0x3, 0x5, 0x440, 0x2, 0x7, 0x9, 0x5, 0x9, 0x4, 0x6a, 0x1, 0x8, 0x0, 0x9, 0x4, 0xb, 0xfffffff9, 0x860, 0x8, 0xe, 0xfffffffc, 0x4, 0x10000, 0xc, 0x4, 0x4, 0x51c, 0x200, 0x20000, 0x40000, 0xffff, 0x3, 0x4, 0x0, 0xffffffff, 0x101, 0x2a82, 0x1, 0x2, 0x7, 0x6, 0x64, 0xfffffff9, 0x3, 0x3, 0xb, 0x8b7, 0x2, 0x7fffffff, 0x0, 0x8, 0x7, 0x1, 0x9f3, 0x8, 0x80000000, 0x5, 0x9, 0x10001, 0x7, 0x3, 0x9, 0x2, 0x10000, 0x3, 0x1, 0x78b, 0x35a, 0x2, 0x9, 0x10000, 0x9, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]]}, {0x17, 0x6, "d165dcd601a9217391524ea3201ca3c13ba37d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x178, 0x19, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x10000000, 0x1, 0x5}, @private=0xa010101, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf0e, 0x6, 0x7, 0x3, 0x9}, @empty, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xfffffffd, 0x3, 0xd, 0x2}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}]}, {0xd5, 0x6, "3668a0b9a346ec00e8994bbe56a565792f8772523d73a079eb06c042e4df875b45a5a1ac2cee697236e039c281e1b5d39e93f37ccbbe45186fb0d3faa15d36698be94aea3adc387dce0d7759c5aec6a69d776c03b2b7747e4f7cbe3cb207702a91a24c71ddbabee08ed9906ec76ead415702e7d201611af26df5d7800e70d5efc6c0c18b4242746cc8e5b0cf7a9cb3b81a54b13c1f6c4ab3dffbf70adc6908eeb3f61cea92d43b902749a1d2d3b02c756c1a47af4f0ecd613159b36fe0cbcf9fa66fdec993ddb62d2268a07bb63c64dc50"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x50, 0x13, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x8, 0x4, 0x9, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x878, 0x7, 0x0, 0x0, {{0xb}, {0x84c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x0, 0x4, 0x2, 0x4, 0x1, 0x0, 0x0, 0x6, 0x4, 0x2, 0xa, 0x8, 0x3, 0xbc0, 0xffff, 0x7fff, 0x6, 0x9, 0x0, 0x9, 0x100, 0x2, 0xb308, 0x0, 0x7ff, 0x4, 0x0, 0x80000001, 0x8, 0x0, 0x8, 0x4, 0x6, 0x5, 0x1, 0x4, 0x7, 0x9cdb, 0xd, 0xa72, 0xb, 0x401, 0x6, 0x9, 0x9, 0xf, 0x9, 0xe, 0x3, 0x9, 0xe00000, 0x9, 0x10000, 0x0, 0x7ff, 0x8, 0x8, 0x0, 0x60, 0x1000, 0xfffffff8, 0x8, 0xb, 0x401, 0x0, 0x6, 0x2, 0xf, 0x81, 0xe08, 0x7, 0x7, 0x5, 0x2, 0x8001, 0x6, 0xe, 0x6, 0x7, 0x8, 0x30000000, 0x0, 0x6, 0xffffffc0, 0x80000001, 0xfffffff0, 0x6, 0x9, 0x7fffffff, 0x1, 0x0, 0x1, 0x9, 0x3, 0x8, 0x7fffffff, 0x5764, 0x800, 0x1ff, 0x2, 0x6, 0x6, 0xf, 0x7822a0ca, 0x10cae802, 0xffff, 0x5, 0x101, 0x3, 0x7, 0x2, 0x925, 0xfffffff7, 0x401, 0x8, 0x101, 0x9, 0x0, 0x8, 0x0, 0x750, 0x9, 0x5, 0x5, 0xe, 0x8, 0x4, 0x2, 0x76b33677, 0x8, 0xa7, 0x8, 0x0, 0x10, 0x9, 0x5, 0x0, 0x1ff, 0x2c32, 0x7fffffff, 0xfffffff7, 0x3, 0x101, 0x4, 0x50000000, 0xc92, 0x0, 0x10001, 0x1d680850, 0x2, 0x101, 0x10000, 0x308, 0x3ff, 0xe3, 0x9, 0xa47, 0x9, 0x1000, 0x800, 0x9c, 0xe3, 0x7, 0x9, 0x0, 0x1, 0x0, 0x7fff, 0xfffffffe, 0x1ff, 0x4, 0x200, 0x1, 0xfff, 0x4, 0xa, 0xcda, 0x0, 0x4, 0x81, 0x6, 0x6, 0x5, 0x1, 0xa, 0x8, 0x5ed, 0x0, 0x7, 0x80000, 0x1, 0x0, 0x5, 0xffffffff, 0x18548153, 0x1, 0x5, 0x80000001, 0x64, 0x800, 0x1ff, 0x3, 0x9, 0x1, 0x8, 0x9, 0xd6b, 0xffffffa1, 0xbc85, 0x6, 0x3, 0x4, 0x4, 0x5, 0x4, 0xf7d, 0x2, 0xe666, 0x10000, 0x400, 0x7fffffff, 0xf, 0xffffffff, 0x600, 0x9, 0xa000000, 0x6, 0x1, 0xd, 0x6, 0x0, 0x23d8, 0x4, 0x3ff, 0x9, 0x8, 0xffffffff, 0x1, 0x8, 0x2, 0x3, 0xac6e, 0x1, 0x0, 0x3, 0x1aaf, 0x0, 0x6, 0x1, 0xff, 0x1, 0x5, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xfffffff8, 0x620, 0x7, 0x3, 0x8, 0xfffffff8, 0xffffffff, 0x0, 0x8, 0x8, 0x7, 0x5, 0x200, 0x5, 0x7, 0x7b8d, 0xc, 0x9b, 0x9, 0x1000, 0x40, 0x221, 0x10, 0x200, 0x7ff, 0x3, 0x1000, 0xffffffff, 0x8, 0xb4, 0x2, 0x1ff, 0x5, 0x6, 0x8, 0xffffffff, 0xc, 0x18, 0x1ff, 0x7, 0x9, 0x7fff, 0x7, 0x3, 0xe, 0x63536d7c, 0x0, 0x0, 0xb, 0x9, 0x200, 0x5, 0x6, 0x7, 0x7, 0x0, 0x9, 0xd, 0x80, 0x4, 0xe, 0x10001, 0x10, 0xc, 0xd1, 0x8, 0xd, 0x6, 0x3, 0x9, 0x3, 0x5, 0x4, 0x5, 0xffffffff, 0x4, 0x101, 0x8, 0x5, 0x4, 0x6, 0x0, 0x9, 0x8001, 0x1ff, 0xd, 0x3, 0x2, 0x4, 0x8001, 0x6, 0x3e53, 0x3, 0x62f, 0x7fff, 0x5, 0x9a5, 0x8000, 0x708, 0x0, 0x8, 0x2, 0x4b19, 0x5, 0x5, 0x7, 0xe, 0x5, 0x1ff, 0x6, 0xfffffff7, 0x8, 0x9, 0x2, 0x7d59, 0xe, 0x4, 0x3, 0xd, 0x0, 0x2, 0x8bb1, 0x9, 0x82, 0x5, 0x4, 0x4, 0x401, 0x6, 0x6, 0xffff, 0x4, 0x8, 0x1ff, 0x48a, 0x0, 0x4, 0x1, 0x4437cbba, 0x0, 0x7, 0x8, 0x80000001, 0x81, 0x6, 0xa, 0xa, 0xe, 0x80, 0x101, 0x7, 0xe1d1, 0x9, 0x5a3, 0x5, 0x8001, 0xffffffe7, 0x6, 0x6, 0x3abe, 0x387d0127, 0x13, 0x1, 0x84, 0x7, 0x61b9, 0xf574, 0x10, 0x7fffffff, 0xb9, 0xc0000000, 0x7, 0x8, 0x5, 0x5, 0xfffffffe, 0x1000, 0x9, 0x8, 0x3, 0x5, 0x5, 0xfff, 0x7000000, 0x8, 0xffff9fb9, 0xcd, 0x1, 0x12000000, 0x4, 0x3b75, 0x7, 0x0, 0x62d3, 0x8, 0x8, 0xffff, 0x5, 0x7ff, 0xb, 0x6, 0x7fffffff, 0x5, 0x7, 0x3, 0x0, 0x8000, 0x5, 0x8, 0x1, 0x1, 0x5, 0x7fffffff, 0xa, 0xffffffff, 0x905, 0xe, 0x200, 0x8, 0x2, 0xe190, 0x83, 0x8, 0x4, 0x0, 0x9, 0x4f, 0x8, 0x0, 0xffffffff, 0xfffffffe, 0xc, 0x5699, 0xfffffffd, 0x4, 0x0, 0xffffffff, 0x8000, 0xe, 0x1, 0x400, 0x2, 0x8, 0x3, 0x1c5a, 0x1, 0x7, 0xffffffb7, 0xa, 0xb89, 0x7, 0x1, 0x1d, 0x5b, 0x8]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x14e4}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r1, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) 11m47.865893205s ago: executing program 9 (id=5452): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000400)=[@cpuid={0x64, 0x18, {0x14599635, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x67, {"640f320f3026430f1864d7fb440f07440f20c03509000000440f22c0b805000000b9000000000f01c1f3400fc7b17f43c6536466430f5bb2a3ca46b4c7442400d2000000c744240200100000ff1c24b9580200000f32"}}, @out_dx={0x6a, 0x28, {0x55d7, 0x5, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @out_dx={0x6a, 0x28, {0xf8a8, 0x4, 0x8000000000000001}}, @in_dx={0x69, 0x20, {0x1063}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x51}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x98f03e6, 0x0, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x74, 0x6, 0x40, 0x2}}, @in_dx={0x69, 0x20, {0x1, 0x3}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @rdmsr={0x66, 0x18}, @uexit={0x0, 0x18, 0x6}, @nested_vmresume={0x130, 0x18, 0x2}, @uexit={0x0, 0x18, 0xd6}], 0x2df}) ioctl$KVM_SMI(r0, 0xaeb7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) read(r1, 0x0, 0x0) write(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x4ce6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x6, @local, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x68) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000980)={0x0, &(0x7f0000000740)=[@nested_load_syzos={0x136, 0x172, {0x2, 0x200, [@nested_create_vm={0x12d, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x23e}}, @nested_load_code={0x12e, 0x58, {0x3, "66b8b1008ee066baf80cb8043fc580ef66bafc0c66ed36d0fc66b838008ec80fb6df400f2189660f237466440f09f3436f66baf80cb8f094c88eef66bafc0ced"}}, @wrmsr={0x65, 0x20, {0xb13, 0x43}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x4, 0x6}}, @code={0xa, 0x7a, {"0f20e035200000000f22e0660f38829a8b14c4dac4417d5a7fa12e67409866baf80cb8112f0980ef66bafc0cec2e410f234448b841000000000000000f23d00f21f835200000080f23f8c44279590d000000003e430f01c3b970000040b800000000ba008000000f30"}}]}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x4959}}, @in_dx={0x69, 0x20, {0x2b6}}, @rdmsr={0x66, 0x18, {0x800}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x8040}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control64=0x2019, 0x400, 0x6, 0x3e}}, @nested_amd_stgi={0x17e, 0x10}], 0x232}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) open(0x0, 0x66842, 0xa0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 11m45.89895411s ago: executing program 9 (id=5455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074"], 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m32.294838308s ago: executing program 9 (id=5474): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000400)=[@cpuid={0x64, 0x18, {0x14599635, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x67, {"640f320f3026430f1864d7fb440f07440f20c03509000000440f22c0b805000000b9000000000f01c1f3400fc7b17f43c6536466430f5bb2a3ca46b4c7442400d2000000c744240200100000ff1c24b9580200000f32"}}, @out_dx={0x6a, 0x28, {0x55d7, 0x5, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @out_dx={0x6a, 0x28, {0xf8a8, 0x4, 0x8000000000000001}}, @in_dx={0x69, 0x20, {0x1063}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x51}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x98f03e6, 0x0, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x74, 0x6, 0x40, 0x2}}, @in_dx={0x69, 0x20, {0x1, 0x3}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @rdmsr={0x66, 0x18}, @uexit={0x0, 0x18, 0x6}, @nested_vmresume={0x130, 0x18, 0x2}, @uexit={0x0, 0x18, 0xd6}], 0x2df}) ioctl$KVM_SMI(r0, 0xaeb7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) read(r1, 0x0, 0x0) write(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x4ce6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x6, @local, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x68) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000980)={0x0, &(0x7f0000000740)=[@nested_load_syzos={0x136, 0x172, {0x2, 0x200, [@nested_create_vm={0x12d, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x23e}}, @nested_load_code={0x12e, 0x58, {0x3, "66b8b1008ee066baf80cb8043fc580ef66bafc0c66ed36d0fc66b838008ec80fb6df400f2189660f237466440f09f3436f66baf80cb8f094c88eef66bafc0ced"}}, @wrmsr={0x65, 0x20, {0xb13, 0x43}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x4, 0x6}}, @code={0xa, 0x7a, {"0f20e035200000000f22e0660f38829a8b14c4dac4417d5a7fa12e67409866baf80cb8112f0980ef66bafc0cec2e410f234448b841000000000000000f23d00f21f835200000080f23f8c44279590d000000003e430f01c3b970000040b800000000ba008000000f30"}}]}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x4959}}, @in_dx={0x69, 0x20, {0x2b6}}, @rdmsr={0x66, 0x18, {0x800}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x8040}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control64=0x2019, 0x400, 0x6, 0x3e}}, @nested_amd_stgi={0x17e, 0x10}], 0x232}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) open(0x0, 0x66842, 0xa0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 11m30.125044106s ago: executing program 9 (id=5476): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) timer_delete(r3) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="00174a"], 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) syz_emit_ethernet(0x8e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500580600fe800000000000000000000000000034fe8000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYBLOB="60c71f68b6"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0x3, "91abc12404cf378042f2"}]}], {0x14}}, 0x78}}, 0x0) write$snapshot(r0, 0x0, 0x0) 11m14.24944634s ago: executing program 38 (id=5476): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) timer_delete(r3) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="00174a"], 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) syz_emit_ethernet(0x8e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500580600fe800000000000000000000000000034fe8000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYBLOB="60c71f68b6"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0x3, "91abc12404cf378042f2"}]}], {0x14}}, 0x78}}, 0x0) write$snapshot(r0, 0x0, 0x0) 9m41.027159239s ago: executing program 39 (id=5592): openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r2}, 0x50) sendfile(r5, r5, 0x0, 0x1002000ff) 9m1.912060191s ago: executing program 5 (id=5644): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 8m55.044706098s ago: executing program 5 (id=5647): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x79}], 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) timer_delete(0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="00174a"], 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) syz_emit_ethernet(0x8e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500580600fe800000000000000000000000000034fe8000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYBLOB="60c71f68b6"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0x3, "91abc12404cf378042f2"}]}], {0x14}}, 0x78}}, 0x0) syz_usb_control_io$uac2(r1, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x40, 0x1, 0x38, {0x38, 0x1, "bd42af71b16e5d17e3c45a1c7ea711f3389af2637c8a78c7bc1cc2c18abf13282e6303d0b636e76cb57f38f8cb5670ce415eda011987"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x0, 0x12, 0x7d, "91c3ef79d854db9e8bcf214cebcaee23c628f5d91cd84fed33136d34fa663a7efffd27372d28d6b2b2c70769b67918f2e583885117cd00e45b360e8f046a1c0ba7f333003d1531fc172367c7acec555fb89299f1054d7f51363d9c4f93d5978e433fdb7b530d13cc63d8946b78c53a6b23cf9c9be49bbb5aa147c44157"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x81, 0x1, "f7"}, &(0x7f0000000580)={0x20, 0x82, 0x1, "e2"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "a6d356"}, &(0x7f0000000600)={0x20, 0x84, 0x3, "9a426f"}, &(0x7f0000000640)={0x20, 0x85, 0x3, 'wQC'}}) write$snapshot(r0, 0x0, 0x0) 8m54.806718285s ago: executing program 7 (id=5648): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0xa, 0x2400000001, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) getrlimit(0xc, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000400)={0x0, 0xffff, 0x40, &(0x7f0000000080)=@ublk_ctrl_dev_info_existing}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3}) 8m53.152734762s ago: executing program 7 (id=5649): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8m51.98716448s ago: executing program 7 (id=5650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019340)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r4 = dup2(r3, r3) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000019300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) unshare(0xc040480) 8m50.284999327s ago: executing program 5 (id=5651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a3100000000060002408809000014000480060007400000000608000640000000090500030006"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@deltfilter={0x1410, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x13cc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x13c0, 0x2, [@m_skbmod={0x54, 0x3, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb1, 0xffffffff, 0x5, 0x9d3, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x928, 0x7, 0x0, 0x0, {{0xb}, {0x8e4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xf}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0xab}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2, 0x0, 0x0, 0x10001, {0x7f, 0x0, 0x100, 0x4, 0x3, 0x5}, {0x3, 0x2, 0x1, 0x5e, 0x8001, 0x9}, 0xfffffffb, 0x9eb657e4, 0x3}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x218, 0x81, 0x0, 0x1, 0x6, 0x8, 0x1, 0x3, 0x1ff, 0xfffffffe, 0x0, 0x1, 0x8001, 0x6, 0x4, 0x9, 0x2, 0x3, 0x1, 0x144a, 0xfffffffe, 0x5, 0x7fffffff, 0xffff5540, 0x8, 0xffffffff, 0xffffffff, 0x5, 0xc, 0x6, 0x4, 0x2, 0x2, 0x7f, 0x1, 0x5, 0xe5f0, 0x60, 0x6, 0x4, 0x1, 0x80000000, 0x5, 0x3ee, 0x5, 0xdb, 0x401, 0x0, 0x8000, 0xfffffffa, 0x2, 0x3c1, 0x6, 0x6, 0x2, 0x8, 0x3752, 0x68a, 0x6, 0x55, 0x3, 0x8, 0x3, 0x6, 0xffffffc9, 0x400, 0x7, 0x73, 0x7, 0x0, 0x52a, 0x8, 0x5, 0x4, 0x9, 0x3, 0x2, 0x4e, 0x7, 0x5, 0x3, 0x9, 0xfffffbff, 0x100, 0x1, 0xffff, 0x7fffffff, 0x7, 0x1ff, 0x9, 0x3, 0x7, 0x10, 0x7, 0x2, 0x7fff, 0x8, 0x4, 0x101, 0x7fffffff, 0x1, 0x61a000, 0xa, 0x8a, 0x1, 0x400, 0x0, 0x2, 0x2, 0x7, 0xf8, 0xbb43, 0x2, 0x7, 0xfffffff8, 0x4, 0x7, 0x5, 0x3, 0x6, 0x40, 0x0, 0x800, 0x80000001, 0x8e8e, 0x3, 0x3, 0x44e, 0xffffff46, 0xfffffffa, 0x8, 0x1, 0xfffff2f3, 0x5, 0x8, 0x2, 0x6, 0xe, 0x7fffffff, 0x9, 0x80000000, 0x4, 0x10000, 0x7, 0x3, 0x5, 0x9, 0x3, 0x5, 0x9, 0x1ff, 0x0, 0x0, 0xfff, 0x8, 0x7ab2, 0x5, 0x8, 0x8, 0x0, 0x0, 0x8cf6, 0x7, 0xea9, 0x3ff, 0xfffff801, 0x4, 0x77b5, 0x80000000, 0x4d03, 0x8001, 0x4ad5, 0x0, 0x1, 0x5, 0x9, 0x9, 0x80, 0x6, 0x7fff, 0x72d0b0f2, 0x1, 0x810, 0x5, 0x0, 0x3, 0x2, 0x0, 0x3f6, 0xfffffff5, 0x6, 0x3, 0x3b7d, 0x3, 0x4, 0xc6, 0x1, 0x1, 0x10, 0x18, 0x8, 0x1, 0x1, 0xf6b3, 0x3, 0x3, 0x2, 0x9, 0x4, 0x1ff, 0x7, 0x9, 0x800, 0xc, 0x7, 0x5, 0xffff, 0x9, 0x1ff, 0x3, 0x40, 0x80000001, 0x9, 0x8, 0xffffff59, 0x101, 0xffff8000, 0x80, 0x1, 0x276, 0xa, 0x3, 0x800, 0x1000, 0xfffffffd, 0xfffffff8, 0x4, 0xff, 0xffffffa9, 0x5, 0x80000000, 0x82, 0x3, 0x4af6, 0x8000, 0x49ecd84c, 0x4, 0x8000, 0x3, 0x1, 0x5, 0x2, 0x7, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x1, 0x40, 0x1, {0x80, 0x0, 0x7, 0xa59c, 0x5, 0x6}, {0x4, 0x2, 0x7ff, 0x5, 0x4, 0x7}, 0xc53, 0x22b5f516}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x608}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x75491ec0, 0x47e, 0x6, 0x2, 0x7ff, 0x2, 0x7ff, 0xef53, 0x9, 0x0, 0x400, 0x945a, 0x4, 0x6, 0x2, 0x8, 0x5, 0x5, 0x10001, 0x2, 0x100, 0x18, 0x5, 0x8, 0xd4b609, 0x3, 0x0, 0x3, 0x8, 0xf, 0x5, 0x4, 0x1, 0x0, 0xffffffff, 0x4, 0xd26d, 0x8, 0x7, 0x1, 0x8, 0xd, 0x3, 0x7, 0x40, 0xffffffff, 0xff, 0x7fffffff, 0x1, 0xae, 0x5, 0x2, 0x80000000, 0xe26, 0x6, 0xffff5f1e, 0x3076, 0xb, 0x8, 0x0, 0x43, 0x401, 0x9, 0x4, 0x108140a9, 0x5, 0x7, 0x3, 0x6, 0x14a, 0x7, 0x6, 0xd55d, 0xffffffff, 0xffffffff, 0x5, 0x6, 0x6, 0x9, 0x2, 0x8, 0x0, 0x7, 0x5eb55956, 0x80000001, 0x5, 0x9, 0x3, 0x80000000, 0xc, 0x8, 0x2, 0x2, 0xed, 0x6, 0x1ff, 0x7, 0x2, 0x40000000, 0x4, 0x6, 0xf12d, 0x8, 0x8361, 0x0, 0x5, 0x3, 0x81, 0x1000, 0x5, 0x1, 0x9, 0x6, 0x4, 0x7, 0x8, 0x6, 0x5, 0x1, 0x2, 0x49, 0x1, 0x6, 0x8000, 0xfffffffd, 0x400, 0x7fff, 0x77, 0x6e9d, 0x10, 0x4, 0x1, 0x9, 0x7, 0x1, 0x8, 0x6, 0x1, 0xecf, 0x401, 0x10, 0x5, 0x4, 0x8, 0x4, 0x5, 0x8, 0x6, 0x10000000, 0x2, 0x1ce0, 0x8, 0x8000, 0xffffffff, 0x9, 0xff, 0x2, 0x7, 0x400, 0x6, 0x7fffffff, 0xfffffffe, 0x2, 0x6, 0x7f, 0x1, 0x5, 0x5, 0x80000000, 0x7f, 0x6f9, 0x21, 0x6, 0x9, 0x0, 0xba41, 0xfffffff7, 0x7a, 0x1, 0xf3, 0x6, 0x18, 0x4, 0x3, 0x5, 0x440, 0x2, 0x7, 0x9, 0x5, 0x9, 0x4, 0x6a, 0x1, 0x8, 0x0, 0x9, 0x4, 0xb, 0xfffffff9, 0x860, 0x8, 0xe, 0xfffffffc, 0x4, 0x10000, 0xc, 0x4, 0x4, 0x51c, 0x200, 0x20000, 0x40000, 0xffff, 0x3, 0x4, 0x0, 0xffffffff, 0x101, 0x2a82, 0x1, 0x2, 0x7, 0x6, 0x64, 0xfffffff9, 0x3, 0x3, 0xb, 0x8b7, 0x2, 0x7fffffff, 0x0, 0x8, 0x7, 0x1, 0x9f3, 0x8, 0x80000000, 0x5, 0x9, 0x10001, 0x7, 0x3, 0x9, 0x2, 0x10000, 0x3, 0x1, 0x78b, 0x35a, 0x2, 0x9, 0x10000, 0x9, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]]}, {0x19, 0x6, "d165dcd601a9217391524ea3201ca3c13ba37de173"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x178, 0x19, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x10000000, 0x1, 0x5}, @private=0xa010101, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf0e, 0x6, 0x7, 0x3, 0x9}, @empty, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xfffffffd, 0x3, 0xd, 0x2}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}]}, {0xd5, 0x6, "3668a0b9a346ec00e8994bbe56a565792f8772523d73a079eb06c042e4df875b45a5a1ac2cee697236e039c281e1b5d39e93f37ccbbe45186fb0d3faa15d36698be94aea3adc387dce0d7759c5aec6a69d776c03b2b7747e4f7cbe3cb207702a91a24c71ddbabee08ed9906ec76ead415702e7d201611af26df5d7800e70d5efc6c0c18b4242746cc8e5b0cf7a9cb3b81a54b13c1f6c4ab3dffbf70adc6908eeb3f61cea92d43b902749a1d2d3b02c756c1a47af4f0ecd613159b36fe0cbcf9fa66fdec993ddb62d2268a07bb63c64dc50"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x50, 0x13, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x8, 0x4, 0x9, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x878, 0x7, 0x0, 0x0, {{0xb}, {0x84c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x0, 0x4, 0x2, 0x4, 0x1, 0x0, 0x0, 0x6, 0x4, 0x2, 0xa, 0x8, 0x3, 0xbc0, 0xffff, 0x7fff, 0x6, 0x9, 0x0, 0x9, 0x100, 0x2, 0xb308, 0x0, 0x7ff, 0x4, 0x0, 0x80000001, 0x8, 0x0, 0x8, 0x4, 0x6, 0x5, 0x1, 0x4, 0x7, 0x9cdb, 0xd, 0xa72, 0xb, 0x401, 0x6, 0x9, 0x9, 0xf, 0x9, 0xe, 0x3, 0x9, 0xe00000, 0x9, 0x10000, 0x0, 0x7ff, 0x8, 0x8, 0x0, 0x60, 0x1000, 0xfffffff8, 0x8, 0xb, 0x401, 0x0, 0x6, 0x2, 0xf, 0x81, 0xe08, 0x7, 0x7, 0x5, 0x2, 0x8001, 0x6, 0xe, 0x6, 0x7, 0x8, 0x30000000, 0x0, 0x6, 0xffffffc0, 0x80000001, 0xfffffff0, 0x6, 0x9, 0x7fffffff, 0x1, 0x0, 0x1, 0x9, 0x3, 0x8, 0x7fffffff, 0x5764, 0x800, 0x1ff, 0x2, 0x6, 0x6, 0xf, 0x7822a0ca, 0x10cae802, 0xffff, 0x5, 0x101, 0x3, 0x7, 0x2, 0x925, 0xfffffff7, 0x401, 0x8, 0x101, 0x9, 0x0, 0x8, 0x0, 0x750, 0x9, 0x5, 0x5, 0xe, 0x8, 0x4, 0x2, 0x76b33677, 0x8, 0xa7, 0x8, 0x0, 0x10, 0x9, 0x5, 0x0, 0x1ff, 0x2c32, 0x7fffffff, 0xfffffff7, 0x3, 0x101, 0x4, 0x50000000, 0xc92, 0x0, 0x10001, 0x1d680850, 0x2, 0x101, 0x10000, 0x308, 0x3ff, 0xe3, 0x9, 0xa47, 0x9, 0x1000, 0x800, 0x9c, 0xe3, 0x7, 0x9, 0x0, 0x1, 0x0, 0x7fff, 0xfffffffe, 0x1ff, 0x4, 0x200, 0x1, 0xfff, 0x4, 0xa, 0xcda, 0x0, 0x4, 0x81, 0x6, 0x6, 0x5, 0x1, 0xa, 0x8, 0x5ed, 0x0, 0x7, 0x80000, 0x1, 0x0, 0x5, 0xffffffff, 0x18548153, 0x1, 0x5, 0x80000001, 0x64, 0x800, 0x1ff, 0x3, 0x9, 0x1, 0x8, 0x9, 0xd6b, 0xffffffa1, 0xbc85, 0x6, 0x3, 0x4, 0x4, 0x5, 0x4, 0xf7d, 0x2, 0xe666, 0x10000, 0x400, 0x7fffffff, 0xf, 0xffffffff, 0x600, 0x9, 0xa000000, 0x6, 0x1, 0xd, 0x6, 0x0, 0x23d8, 0x4, 0x3ff, 0x9, 0x8, 0xffffffff, 0x1, 0x8, 0x2, 0x3, 0xac6e, 0x1, 0x0, 0x3, 0x1aaf, 0x0, 0x6, 0x1, 0xff, 0x1, 0x5, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xfffffff8, 0x620, 0x7, 0x3, 0x8, 0xfffffff8, 0xffffffff, 0x0, 0x8, 0x8, 0x7, 0x5, 0x200, 0x5, 0x7, 0x7b8d, 0xc, 0x9b, 0x9, 0x1000, 0x40, 0x221, 0x10, 0x200, 0x7ff, 0x3, 0x1000, 0xffffffff, 0x8, 0xb4, 0x2, 0x1ff, 0x5, 0x6, 0x8, 0xffffffff, 0xc, 0x18, 0x1ff, 0x7, 0x9, 0x7fff, 0x7, 0x3, 0xe, 0x63536d7c, 0x0, 0x0, 0xb, 0x9, 0x200, 0x5, 0x6, 0x7, 0x7, 0x0, 0x9, 0xd, 0x80, 0x4, 0xe, 0x10001, 0x10, 0xc, 0xd1, 0x8, 0xd, 0x6, 0x3, 0x9, 0x3, 0x5, 0x4, 0x5, 0xffffffff, 0x4, 0x101, 0x8, 0x5, 0x4, 0x6, 0x0, 0x9, 0x8001, 0x1ff, 0xd, 0x3, 0x2, 0x4, 0x8001, 0x6, 0x3e53, 0x3, 0x62f, 0x7fff, 0x5, 0x9a5, 0x8000, 0x708, 0x0, 0x8, 0x2, 0x4b19, 0x5, 0x5, 0x7, 0xe, 0x5, 0x1ff, 0x6, 0xfffffff7, 0x8, 0x9, 0x2, 0x7d59, 0xe, 0x4, 0x3, 0xd, 0x0, 0x2, 0x8bb1, 0x9, 0x82, 0x5, 0x4, 0x4, 0x401, 0x6, 0x6, 0xffff, 0x4, 0x8, 0x1ff, 0x48a, 0x0, 0x4, 0x1, 0x4437cbba, 0x0, 0x7, 0x8, 0x80000001, 0x81, 0x6, 0xa, 0xa, 0xe, 0x80, 0x101, 0x7, 0xe1d1, 0x9, 0x5a3, 0x5, 0x8001, 0xffffffe7, 0x6, 0x6, 0x3abe, 0x387d0127, 0x13, 0x1, 0x84, 0x7, 0x61b9, 0xf574, 0x10, 0x7fffffff, 0xb9, 0xc0000000, 0x7, 0x8, 0x5, 0x5, 0xfffffffe, 0x1000, 0x9, 0x8, 0x3, 0x5, 0x5, 0xfff, 0x7000000, 0x8, 0xffff9fb9, 0xcd, 0x1, 0x12000000, 0x4, 0x3b75, 0x7, 0x0, 0x62d3, 0x8, 0x8, 0xffff, 0x5, 0x7ff, 0xb, 0x6, 0x7fffffff, 0x5, 0x7, 0x3, 0x0, 0x8000, 0x5, 0x8, 0x1, 0x1, 0x5, 0x7fffffff, 0xa, 0xffffffff, 0x905, 0xe, 0x200, 0x8, 0x2, 0xe190, 0x83, 0x8, 0x4, 0x0, 0x9, 0x4f, 0x8, 0x0, 0xffffffff, 0xfffffffe, 0xc, 0x5699, 0xfffffffd, 0x4, 0x0, 0xffffffff, 0x8000, 0xe, 0x1, 0x400, 0x2, 0x8, 0x3, 0x1c5a, 0x1, 0x7, 0xffffffb7, 0xa, 0xb89, 0x7, 0x1, 0x1d, 0x5b, 0x8]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1410}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r1, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) 8m49.326323685s ago: executing program 5 (id=5652): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) gettid() 8m49.027026065s ago: executing program 7 (id=5653): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) symlinkat(&(0x7f00000000c0)='./file2\x00', r1, &(0x7f0000000100)='./file2\x00') socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000080)) 8m47.905946095s ago: executing program 7 (id=5654): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 8m47.73383524s ago: executing program 5 (id=5655): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000400)=[@cpuid={0x64, 0x18, {0x14599635, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x67, {"640f320f3026430f1864d7fb440f07440f20c03509000000440f22c0b805000000b9000000000f01c1f3400fc7b17f43c6536466430f5bb2a3ca46b4c7442400d2000000c744240200100000ff1c24b9580200000f32"}}, @out_dx={0x6a, 0x28, {0x55d7, 0x5, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @out_dx={0x6a, 0x28, {0xf8a8, 0x4, 0x8000000000000001}}, @in_dx={0x69, 0x20, {0x1063}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x51}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x98f03e6, 0x0, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x74, 0x6, 0x40, 0x2}}, @in_dx={0x69, 0x20, {0x1, 0x3}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @rdmsr={0x66, 0x18}, @uexit={0x0, 0x18, 0x6}, @nested_vmresume={0x130, 0x18, 0x2}, @uexit={0x0, 0x18, 0xd6}], 0x2df}) ioctl$KVM_SMI(r0, 0xaeb7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) read(r1, 0x0, 0x0) write(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x4ce6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x6, @local, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) open(0x0, 0x66842, 0xa0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 8m45.022132874s ago: executing program 5 (id=5656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="06e5c456", 0x4}, {&(0x7f0000000000)="1a53b960f237163b83f521b433ee2c217e644d8a45df0f7a295943137f14f641d312e2ccf95abee62bc1e3a7a97ffacc60f6fd0bcb8b0a8b68803f8f510bf298bd85da633285f24f9287c3263e2c9719a59d8d317295b62b598ea80cbacd487eecda82cacf87b769db366d244abe1f2754e1adc161971cc11f228e86815b1bd49ef11be007edb462c5fe5900700000", 0x8f}, {&(0x7f0000002000)="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", 0xd51}], 0x3, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000062c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400101c3, 0x0) 8m45.019858882s ago: executing program 7 (id=5657): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8m29.434843302s ago: executing program 40 (id=5657): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8m29.088322006s ago: executing program 41 (id=5656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="06e5c456", 0x4}, {&(0x7f0000000000)="1a53b960f237163b83f521b433ee2c217e644d8a45df0f7a295943137f14f641d312e2ccf95abee62bc1e3a7a97ffacc60f6fd0bcb8b0a8b68803f8f510bf298bd85da633285f24f9287c3263e2c9719a59d8d317295b62b598ea80cbacd487eecda82cacf87b769db366d244abe1f2754e1adc161971cc11f228e86815b1bd49ef11be007edb462c5fe5900700000", 0x8f}, {&(0x7f0000002000)="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", 0xd51}], 0x3, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000062c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400101c3, 0x0) 7m38.909227708s ago: executing program 0 (id=5658): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') exit(0x9) getdents64(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80a0}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) connect$bt_rfcomm(r3, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x40, 0x40}}]}}, 0x15) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc8}}}, 0x6) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) close(r3) 7m37.739247693s ago: executing program 0 (id=5660): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x191, 0x480, 0x556, 0x3f, 0x32, 0x2, 0x0, 0x1, {0x400000}, {0x0, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1ffffff, 0x1}, 0x1, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe08, 0x0, 0xe8e, 0x0, 0x0, 0x1, 0x0, 0x3, 0xade8a9ab0357957f}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x2e) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r6, &(0x7f0000000080)=""/42, 0x54) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000180)="3be148f1f1b5a549d2e37ebfb9d1363f302ca526394ca98485374c676ed29d61c760a49630a68ab1dedeabb9ba4465933791928fead7fa6a6012b918", 0x3c}, {&(0x7f0000000280)="276006a207f752d09f5d50a224dfa17431e9c662d2537d664cdcff70bd52d7d4b46d6b6c403995a000e6d12101eaf4a16d27b0e46d639fb5aee61f8bb5e75cbe4b67506f9130607d3ec3e6576e7595289a368aa3b71041cd", 0x58}, {&(0x7f0000000580)="32c8ace899269a696796eef16ad0db5820c407dab61a0a14554ed3b190b592b540a63a3421ed464928deaf3cffe5e3faaa4f74f57347210a756dca49a0fee4aa93d39abbcf296691610e6e7b8cc7d3a8a88971e5fb945987fd5d6157ce7b1be70f0e43984492f74476926b784389efef1452099e3da3824252f2783baaa9d19337357e86fae0486d15837b79c3", 0x8d}, {&(0x7f0000000640)="5be8ade785e799790925bc3f8354ac51b27d2a4273073825d84fbfac4128ae54153fb40799a5bf9c37ae0a5c859e4d41d8a90f7f5b37bf2c33442b0ba85f873409d985ff5044dfc45061b9658c341a0a27", 0x51}, {&(0x7f00000006c0)="1fb02b4f6e239681ba7dc7500de6c19cb87bc068fe707593d39cd1948f1ccaaf9eeb91a3570455cac33c72", 0x2b}, {&(0x7f0000000700)="9d14360f808eb8358088829feece910810e8e69e356a609a852039163927c091918766ff9a2879145ac0a6bb48b5897b5e7ce1111886ae71c81b8aad27d7f47b2863aef4e27208dfa0def30754d24a833fd34befb698b435ce8a3982a588398da9c3122de32358e1aff6d07a6f90450b080e4966aa3855ed3fc218a7edfe472043d95d6f734f8281be956a2b0bb08d1e98109e98017a8836746a0b58892cf64c07ca1234049e70824073d1bb9423d27f520344d487088e2964afa55782cc01927b46be", 0xc3}], 0x6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f0000000100)=""/107, 0x6b) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r9, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)={0x1cc, 0x10, 0x509, 0x0, 0x0, "", [@nested={0x104, 0x2, 0x0, 0x1, [@nested={0xf1, 0xee, 0x0, 0x1, [@nested={0x4, 0x43}, @generic="2fc26a2e43f403869b4eba4d983b310c026432cdaee38806eaa0b9c38d436ce158b72bf83a570968c7ad79702b56e4f5782cf793192456d31f412a0ebe27be3f291e1ac71969ed5b0cb45cbc7501ad00e462721f93d1a9c45c3a08c2f76dcc619db9826f497f9390d4674d7559f34fcee99a91341ef239e74ce00be81b604c45364c878583940b50ea4d31ddade12feb7c1169bc63d28ed00e07ec9ed164a4fb5a51410c28f249e754c8f325b90c777e9170787b8dfea2dab56166f4", @generic="387128e1b32a6d527d9b7f7ae9512c136b1d8b5836e5a055f7b505ab2806b6129a4d4addfd432db4e90e5ad674"]}, @typed={0xc, 0x146, 0x0, 0x0, @u64=0x10001}]}, @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28290a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r8}]}]}, 0x1cc}], 0x1}, 0x40040) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 7m37.131699733s ago: executing program 0 (id=5661): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x80080a, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6d73697a653d3078303030303030303032376636316330662c009d62ea35d6d37a427da4ff845ce4a596d8be73ac6c42a745be68f6faeadeaf797a959192a9fc6a56f5bfc4ac594e49acafdaeeef1efebe0e4b3fabde39fe50e101049f1853ff979f8d496516877fd2919f44c620e6384795d55f4bb9f5ea63ce2b350cae5abed843cc98e26a46f7e3369f488dcef8da484a9ed48341ed7e5c"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) r4 = socket(0x1, 0x3, 0x4) write(r4, &(0x7f0000000000)="2400000011005f0414f9f407000904008100", 0x12) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0x736) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x4c}, 0x2, 0x34005, 0x0, 0x48810}, 0x40084) 7m37.055798943s ago: executing program 3 (id=5659): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0xb, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x8, 0x8, 0x25}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0xb495446df9a4632b, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000280)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x16021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4009}, 0x8000002) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006800e97800000002000080000a00000000cc06000000"], 0x18}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 7m31.933583179s ago: executing program 3 (id=5663): r0 = socket(0x11, 0x3, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r5, 0x0, 0x0) keyctl$negate(0xd, r5, 0x9, r5) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) r6 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0xa}) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="2e69073809677134b3d8152a7d6a7dfa358a51ce1f2d2b5330ad116feca205c645307dcc9b79c095c6788f0a40b626cd7f7b151d6ebff66e38249d9cc196d076a51df5d60159de64abc25a4668d3230fc22f6680a364d876ac93fe174bf519fb1db379585036c4c3d0a6410dacb76610cadafe802295cd8147484f0e4a5091fb374f021e06d138d40d0831021264327308891fbb05c5b167e520ccf0f49b93e605b3e585a55a791a6ffd7e4ab4761a602ecaf1", 0xb3, r5) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x3c, 0x0, @fd, 0x5, 0x0, 0x0, 0x18, 0x0, {0x1, 0x0, 0x0, '\x00', &(0x7f00000006c0)={0x2, 0x6, 0x0, 0x0, 0x4}, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) rename(0x0, &(0x7f0000000080)='./file0\x00') r9 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, &(0x7f0000000180)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ftruncate(0xffffffffffffffff, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 7m31.358112211s ago: executing program 0 (id=5665): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x809}, {0xa, 0x4ea0, 0xe, @mcast2}, 0x2, {[0x1ff, 0x1, 0xfffffffe, 0x8, 0xffffffff, 0x208, 0xe187]}}, 0x5c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x6, 0x2, 0xfffffff9, 'syz0\x00', 0x8}, 0x27, 0x30, 0x7, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000180)}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 7m30.569378444s ago: executing program 0 (id=5668): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:1d.0', 0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x8400) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/uhci_hcd/bind\x00', 0x1, 0x0) getpid() write(r4, &(0x7f00000001c0)='0000:00:1d.0', 0xc) 7m29.88838621s ago: executing program 3 (id=5670): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x40080) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r1}, 0x50) sendfile(r4, r4, 0x0, 0x1002000ff) 7m29.210385572s ago: executing program 0 (id=5671): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x80080a, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6d73697a653d3078303030303030303032376636316330662c009d62ea35d6d37a427da4ff845ce4a596d8be73ac6c42a745be68f6faeadeaf797a959192a9fc6a56f5bfc4ac594e49acafdaeeef1efebe0e4b3fabde39fe50e101049f1853ff979f8d496516877fd2919f44c620e6384795d55f4bb9f5ea63ce2b350cae5abed843cc98e26a46f7e3369f488dcef8da484a9ed48341ed7e5c"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) r4 = socket(0x1, 0x3, 0x4) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) r5 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0x736) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x4c}, 0x2, 0x34005, 0x0, 0x48810}, 0x40084) 7m13.589409377s ago: executing program 42 (id=5670): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x40080) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r1}, 0x50) sendfile(r4, r4, 0x0, 0x1002000ff) 7m13.099502285s ago: executing program 43 (id=5671): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x80080a, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6d73697a653d3078303030303030303032376636316330662c009d62ea35d6d37a427da4ff845ce4a596d8be73ac6c42a745be68f6faeadeaf797a959192a9fc6a56f5bfc4ac594e49acafdaeeef1efebe0e4b3fabde39fe50e101049f1853ff979f8d496516877fd2919f44c620e6384795d55f4bb9f5ea63ce2b350cae5abed843cc98e26a46f7e3369f488dcef8da484a9ed48341ed7e5c"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) r4 = socket(0x1, 0x3, 0x4) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) r5 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0x736) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x4c}, 0x2, 0x34005, 0x0, 0x48810}, 0x40084) 3m47.829733627s ago: executing program 2 (id=5863): ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000100)={0xf, "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"}) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 3m47.668755163s ago: executing program 2 (id=5865): inotify_init() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c6174"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x3, 0xffff, 0x0, 0x2}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r1], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3m47.429406996s ago: executing program 2 (id=5866): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000012c0), 0x0) 3m45.548386114s ago: executing program 2 (id=5867): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') lseek(0xffffffffffffffff, 0x0, 0x1) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001c80)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmod']) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@empty, 0x0}, &(0x7f0000000240)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc03, {0x7, 0x0, 0x0, r5, 0x42, 0x47, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x840) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0xc, 0x52, 0x2, 0x38, @mcast2, @local, 0x8, 0x7800, 0x7fff}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810127bd7000fddbdf25190000001c00018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="088792e6eb36093a000100", @ANYRES32=r7, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) 3m45.022635834s ago: executing program 2 (id=5868): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) pipe(&(0x7f00000000c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3m44.582943121s ago: executing program 2 (id=5871): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r2, r2, 0x0, 0x1002000ff) 3m29.329691872s ago: executing program 44 (id=5871): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r2, r2, 0x0, 0x1002000ff) 6.474749169s ago: executing program 6 (id=6070): mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x0, @private2, 0x3}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) 6.359308266s ago: executing program 6 (id=6072): ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000100)={0xf, "1830f0c49ff85f9f3be187196b822c4c96a3e1b5321f06e0d519e31ca7c071adfe0e91e6ab940a47d51a9d532cefde26a09069904aa56ab16d8fac72c9441a85b61230e6a3d8531f820776026b58d9a5fbe3b1eb2b54858f438ed8ce0b05995a1cf413107d57522daa8125642d1b6e4b3b3cad4a817af4aea4c580edfadd7f6431e28cf3b11156accaa29801b862c2357932b8c1260471e56cfd735333108f0dde3d6c1c87d114b967cf0d9decbb5b094afc646d99cf01ad4c4d8e73e3199d9d3f9082cca8b1a8a023000b1c58d37a0bdefa2aca6f413ef5b2266ecafbdbd0dfe04f1685fb2a1a7445598b1c6abe378e162b35488c60dc101e197ce765cb4c9c969d25adffbb360f95818f0f235eb1150665ba85c37dca3e1cda72f168b91aa8af09570347ff8e0932bce37981017dd4eda58861a8b20434bd58c287a409f434668076be3e5e836ccfa4b0bbbfbca6a0ea69ef6e7f92bf9ce9716e417a98b417fa746bd48b1924fa05772e1db99eeefb7bf2a245d3653b9c14d9653e143bed97432a6368e6550f88701c2c1d8f0f6ac5745a3fa4dd0199475e6340a4b150a9f3e6121107ebcdd928904b13b935a70a4a8f78bcbcc75f6df569ee66aa7eaf16dd00f7a4c4a53fc2ae720f8011ae8ae666579cd20709b2edfcc01b0dcb3658625452f349a55bf257486a9f6220c925983138a20d6a3e98dfbfff6c3b0a105204cd"}) write(0xffffffffffffffff, &(0x7f0000000300)="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", 0x1e1) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 6.132376973s ago: executing program 6 (id=6073): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000380)={0x79, 0x0, 0xb14}) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) setreuid(0xee00, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r5, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r6, 0xc0186e87, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x9, 0x80000000, 0x3, 0x9, 0x7}], 0x1, 0x28, 0x8, 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000240)={r7, r8, 0x9, 0xd93, 0x9}) (async) listen(r1, 0x7) (async) listen(r0, 0x7) 5.727976899s ago: executing program 6 (id=6075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8801) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="0fae258275b7e60b216111d11e496708", 0x10}], 0x1, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x41) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc2042, 0x140) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000004c0)) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000140)={0x3, 0x2}) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf500f0ff}, 0x6b3b1feb8c660fc1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="60005080110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) clock_gettime(0x0, &(0x7f0000002300)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002240)=[{{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/70, 0x46}, {&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000640)=""/218, 0xda}], 0x3, &(0x7f0000000800)=""/192, 0xc0}, 0x2}, {{&(0x7f00000008c0)=@generic, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/127, 0x7f}, {&(0x7f00000009c0)=""/217, 0xd9}, {&(0x7f0000000ac0)=""/83, 0x53}, {&(0x7f0000000b40)=""/216, 0xd8}, {&(0x7f0000000c40)=""/212, 0xd4}, {&(0x7f0000000d40)=""/120, 0x78}], 0x6, &(0x7f0000000e40)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001e40)=""/124, 0x7c}, {&(0x7f0000001ec0)=""/197, 0xc5}, {&(0x7f0000001fc0)=""/93, 0x5d}, {&(0x7f0000002040)=""/173, 0xad}], 0x4, &(0x7f0000002140)=""/194, 0xc2}}], 0x3, 0x10000, &(0x7f0000002340)={r8, r9+60000000}) 5.368223584s ago: executing program 6 (id=6077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f9ff26bd7000ffdbdf250400000018000180140002006261746164765f736c6176655f30"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000540)=""/40) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc2302010203010902120001000000000904"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x9d}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="c0b954ec00000021000000100000", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.476594115s ago: executing program 1 (id=6080): ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000100)={0xf, "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"}) write(0xffffffffffffffff, &(0x7f0000000300)="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", 0x1e1) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 4.409251197s ago: executing program 1 (id=6081): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x35, 0x65, 0x36, 0x66, 0x35, 0x36, 0x62, 0x61, 0x37, 0x31, 0x36, 0x34, 0x61, 0x34, 0x33, 0x62]}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ff9077d80dfa00b100", 0x17}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000180), 0x80) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40840, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') readv(r2, &(0x7f0000000180)=[{&(0x7f0000000480)=""/145, 0x91}], 0x1) read(r2, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 2.390241518s ago: executing program 6 (id=6082): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x66, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="44000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="0101020064c501001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r4, @ANYBLOB="80a5bb08a0c00c29bec3005affe0dda8164f52139a45"], 0x44}, 0x1, 0xba01, 0x0, 0x40d0}, 0x810) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x33, 0x30, 0x65, 0x38, 0x30, 0x30, 0x34, 0x65, 0x66, 0x30, 0x6f, 0x30, 0x31, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00116233445566778899aabbccdceeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r5 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r5, 0x1, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r5, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_read(r5, 0x1, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000001c40)=0x4) 1.588026284s ago: executing program 1 (id=6083): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) read$FUSE(r0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x6fecb1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x80000001, 0x8, 0x9, 0xb, 0x4, 0x1ff, 0x5f50, 0x0, 0x6}) 1.398017346s ago: executing program 1 (id=6084): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5d37}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040080}, 0x4) r2 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x1, 0x1f9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_enter(r2, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 1.046618117s ago: executing program 1 (id=6085): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) 0s ago: executing program 1 (id=6086): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') lseek(0xffffffffffffffff, 0x0, 0x1) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001c80)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootm']) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@empty, 0x0}, &(0x7f0000000240)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc03, {0x7, 0x0, 0x0, r5, 0x42, 0x47, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x840) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0xc, 0x52, 0x2, 0x38, @mcast2, @local, 0x8, 0x7800, 0x7fff}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810127bd7000fddbdf25190000001c00018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="088792e6eb36093a000100", @ANYRES32=r7, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) kernel console output (not intermixed with test programs): dge_slave_0: default FDB implementation only supports local addresses [ 1608.792753][T24627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.792818][T24627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.792896][T24627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.923387][T22833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1611.973689][T22833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1611.975740][T22833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1611.993625][T22833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1612.202014][T22833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1616.306027][T24627] hsr_slave_0: entered promiscuous mode [ 1616.316086][T24627] hsr_slave_1: entered promiscuous mode [ 1616.324959][T24627] debugfs: 'hsr0' already exists in 'hsr' [ 1616.324990][T24627] Cannot create hsr debugfs directory [ 1616.461888][T19383] Bluetooth: hci1: command tx timeout [ 1618.568303][T19383] Bluetooth: hci1: command tx timeout [ 1620.621256][T19383] Bluetooth: hci1: command tx timeout [ 1622.747854][T19383] Bluetooth: hci1: command tx timeout [ 1625.823475][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1625.823555][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1627.192048][T24918] bridge_slave_0: default FDB implementation only supports local addresses [ 1633.763668][T22833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1633.780629][T22833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1633.793797][T22833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1633.795026][T22833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1633.796850][T22833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1633.819042][T24843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.819180][T24843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.819430][T24843] bridge_slave_0: entered allmulticast mode [ 1633.863024][T24843] bridge_slave_0: entered promiscuous mode [ 1633.871956][T24843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.875197][T24843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.875468][T24843] bridge_slave_1: entered allmulticast mode [ 1633.891605][T24843] bridge_slave_1: entered promiscuous mode [ 1634.484265][T22833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1634.545374][T22833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1634.561915][T22833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1634.581422][T22833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1634.582430][T22833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1635.160929][T24843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1635.184739][T24843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1635.210404][T22833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1635.284318][T22833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1635.297249][T22833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1635.301119][T22833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1635.303311][T22833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1636.059046][T19383] Bluetooth: hci2: command tx timeout [ 1636.867663][T19383] Bluetooth: hci3: command tx timeout [ 1637.595902][T19383] Bluetooth: hci7: command tx timeout [ 1638.145180][T19383] Bluetooth: hci2: command tx timeout [ 1638.221150][T24843] team0: Port device team_slave_0 added [ 1638.256598][T24843] team0: Port device team_slave_1 added [ 1638.939643][T19383] Bluetooth: hci3: command tx timeout [ 1639.664260][T19383] Bluetooth: hci7: command tx timeout [ 1640.226307][T19383] Bluetooth: hci2: command tx timeout [ 1641.020356][T19383] Bluetooth: hci3: command tx timeout [ 1641.749645][T19383] Bluetooth: hci7: command tx timeout [ 1641.876472][T25045] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5889'. [ 1641.946575][T24843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.946594][T24843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.946631][T24843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.985284][T24843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.985309][T24843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.985335][T24843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.300970][T19383] Bluetooth: hci2: command tx timeout [ 1643.233298][T19383] Bluetooth: hci3: command tx timeout [ 1643.976917][T19383] Bluetooth: hci7: command tx timeout [ 1647.589708][T24843] hsr_slave_0: entered promiscuous mode [ 1647.745799][T24843] hsr_slave_1: entered promiscuous mode [ 1647.816457][T24843] debugfs: 'hsr0' already exists in 'hsr' [ 1647.816553][T24843] Cannot create hsr debugfs directory [ 1652.468181][T19285] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1652.622040][T19285] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1652.622075][T19285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.628489][T19285] usb 2-1: config 0 descriptor?? [ 1653.215792][T25094] vivid-002: ================= START STATUS ================= [ 1653.216109][T25094] vivid-002: Radio HW Seek Mode: Bounded [ 1653.216483][T25094] vivid-002: Radio Programmable HW Seek: false [ 1653.216671][T25094] vivid-002: RDS Rx I/O Mode: Block I/O [ 1653.216747][T25094] vivid-002: Generate RBDS Instead of RDS: false [ 1653.216856][T25094] vivid-002: RDS Reception: true [ 1653.216939][T25094] vivid-002: RDS Program Type: 0 inactive [ 1653.217119][T25094] vivid-002: RDS PS Name: inactive [ 1653.217289][T25094] vivid-002: RDS Radio Text: inactive [ 1653.217399][T25094] vivid-002: RDS Traffic Announcement: false inactive [ 1653.217454][T25094] vivid-002: RDS Traffic Program: false inactive [ 1653.217565][T25094] vivid-002: RDS Music: false inactive [ 1653.217662][T25094] vivid-002: ================== END STATUS ================== [ 1654.404177][T19285] usb 2-1: Cannot read MAC address [ 1654.404473][T19285] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1654.434323][T19285] usb 2-1: USB disconnect, device number 11 [ 1654.485910][T25096] random: crng reseeded on system resumption [ 1654.856991][T19285] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1655.017821][T19285] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1655.017866][T19285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.034176][T19285] usb 2-1: config 0 descriptor?? [ 1655.040251][T19285] cp210x 2-1:0.0: cp210x converter detected [ 1655.449800][T19285] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1655.517437][T19285] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1655.517472][T19285] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 1655.522476][T19285] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1656.710626][ T4263] bridge_slave_1: left allmulticast mode [ 1656.710668][ T4263] bridge_slave_1: left promiscuous mode [ 1656.710976][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.899957][ T4263] bridge_slave_0: left allmulticast mode [ 1656.900002][ T4263] bridge_slave_0: left promiscuous mode [ 1656.900319][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.218013][ T4263] bridge_slave_1: left allmulticast mode [ 1657.218051][ T4263] bridge_slave_1: left promiscuous mode [ 1657.218312][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.388989][ T4263] bridge_slave_0: left allmulticast mode [ 1657.389020][ T4263] bridge_slave_0: left promiscuous mode [ 1657.389246][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.598668][ T4263] bridge_slave_1: left allmulticast mode [ 1657.598704][ T4263] bridge_slave_1: left promiscuous mode [ 1657.598965][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.604838][ T5819] usb 2-1: USB disconnect, device number 12 [ 1657.613548][ T5819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1657.614401][ T5819] cp210x 2-1:0.0: device disconnected [ 1657.661658][T25148] random: crng reseeded on system resumption [ 1657.799181][ T4263] bridge_slave_0: left allmulticast mode [ 1657.799210][ T4263] bridge_slave_0: left promiscuous mode [ 1657.799394][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.048298][ T5819] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1658.202452][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.220314][ T5819] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1658.220342][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.224975][ T5819] usb 2-1: config 0 descriptor?? [ 1658.259549][ T5819] cp210x 2-1:0.0: cp210x converter detected [ 1658.310096][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.370749][ T4263] bond0 (unregistering): Released all slaves [ 1658.719408][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.799582][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.861109][ T4263] bond0 (unregistering): Released all slaves [ 1658.943743][ T5819] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1659.216566][ T5819] usb 2-1: USB disconnect, device number 13 [ 1659.223803][ T5819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1659.235303][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.309498][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.390632][ T4263] bond0 (unregistering): Released all slaves [ 1659.450848][ T5819] cp210x 2-1:0.0: device disconnected [ 1664.194590][T25195] random: crng reseeded on system resumption [ 1664.207900][T24981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.208045][T24981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.208329][T24981] bridge_slave_0: entered allmulticast mode [ 1664.239384][T24981] bridge_slave_0: entered promiscuous mode [ 1664.291848][T24981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.291991][T24981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.292200][T24981] bridge_slave_1: entered allmulticast mode [ 1664.296489][T24981] bridge_slave_1: entered promiscuous mode [ 1664.324218][T24965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.324344][T24965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.324579][T24965] bridge_slave_0: entered allmulticast mode [ 1664.327391][T24965] bridge_slave_0: entered promiscuous mode [ 1664.451488][ T5817] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1664.481522][ T4263] hsr_slave_0: left promiscuous mode [ 1664.501507][ T4263] hsr_slave_1: left promiscuous mode [ 1664.502300][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.542099][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.604344][ T5817] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1664.604390][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.609502][ T5817] usb 2-1: config 0 descriptor?? [ 1664.637950][ T5817] cp210x 2-1:0.0: cp210x converter detected [ 1664.731839][ T4263] hsr_slave_0: left promiscuous mode [ 1664.753128][ T4263] hsr_slave_1: left promiscuous mode [ 1664.756633][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.793721][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.931671][ T4263] hsr_slave_0: left promiscuous mode [ 1664.959815][ T4263] hsr_slave_1: left promiscuous mode [ 1664.962577][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.992445][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.039886][ T5817] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1665.054051][ T5817] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1665.054086][ T5817] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 1665.078773][ T5817] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1665.442489][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1665.502493][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1665.976537][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1666.032779][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1666.525823][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1666.574934][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1666.745013][T24965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.745124][T24965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.745390][T24965] bridge_slave_1: entered allmulticast mode [ 1666.747492][T24965] bridge_slave_1: entered promiscuous mode [ 1666.907156][T24981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1666.974420][T24981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.083059][T24965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.145901][T24993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.146047][T24993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.146264][T24993] bridge_slave_0: entered allmulticast mode [ 1667.148177][T24993] bridge_slave_0: entered promiscuous mode [ 1667.275997][T24965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.299121][T24993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.299331][T24993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.299533][T24993] bridge_slave_1: entered allmulticast mode [ 1667.301520][T24993] bridge_slave_1: entered promiscuous mode [ 1667.338899][T24981] team0: Port device team_slave_0 added [ 1667.375010][T23416] usb 2-1: USB disconnect, device number 14 [ 1667.517363][T23416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1667.518406][T23416] cp210x 2-1:0.0: device disconnected [ 1668.780004][T24981] team0: Port device team_slave_1 added [ 1669.080515][T24965] team0: Port device team_slave_0 added [ 1669.274834][T24993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.300190][T24965] team0: Port device team_slave_1 added [ 1669.510718][T24993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.502772][T24981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.502792][T24981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.502821][T24981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.118225][T24981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.118244][T24981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.118273][T24981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.496818][T24965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.496839][T24965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.496869][T24965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.553678][T24993] team0: Port device team_slave_0 added [ 1676.574156][T24993] team0: Port device team_slave_1 added [ 1676.584471][T24965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.584488][T24965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.584515][T24965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.903974][T19285] IPVS: starting estimator thread 0... [ 1677.022463][T25239] IPVS: using max 9 ests per chain, 21600 per kthread [ 1677.022728][T22833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1677.070768][T22833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1677.079209][T22833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1677.080539][T22833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1677.090729][T22833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1678.326182][T24993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1678.326209][T24993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1678.326238][T24993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.443243][T24981] hsr_slave_0: entered promiscuous mode [ 1678.505822][T24981] hsr_slave_1: entered promiscuous mode [ 1678.508369][T24981] debugfs: 'hsr0' already exists in 'hsr' [ 1678.508395][T24981] Cannot create hsr debugfs directory [ 1678.528892][T25248] random: crng reseeded on system resumption [ 1678.531266][T24993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1678.531285][T24993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1678.531313][T24993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.848566][T19839] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1679.114798][T19839] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1679.114831][T19839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.119885][T19839] usb 2-1: config 0 descriptor?? [ 1679.208098][T19839] cp210x 2-1:0.0: cp210x converter detected [ 1679.316073][T24965] hsr_slave_0: entered promiscuous mode [ 1679.317411][T24965] hsr_slave_1: entered promiscuous mode [ 1679.318318][T24965] debugfs: 'hsr0' already exists in 'hsr' [ 1679.318337][T24965] Cannot create hsr debugfs directory [ 1679.368791][T22833] Bluetooth: hci5: command tx timeout [ 1679.797470][T19839] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1679.797504][T19839] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1679.797656][T24993] hsr_slave_0: entered promiscuous mode [ 1679.810130][T24993] hsr_slave_1: entered promiscuous mode [ 1679.812809][T24993] debugfs: 'hsr0' already exists in 'hsr' [ 1679.812836][T24993] Cannot create hsr debugfs directory [ 1679.824935][T19839] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1679.848760][T19839] usb 2-1: USB disconnect, device number 15 [ 1679.898707][T19839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1679.904883][T19839] cp210x 2-1:0.0: device disconnected [ 1681.475463][T22833] Bluetooth: hci5: command tx timeout [ 1681.554337][T25275] overlay: Unknown parameter '/' [ 1681.749519][ T4263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.939342][T25275] bridge_slave_0: default FDB implementation only supports local addresses [ 1682.282758][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1683.033132][T25293] random: crng reseeded on system resumption [ 1683.239173][ T4263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.341476][ T5610] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1683.493297][ T5610] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1683.493342][ T5610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.513978][ T5610] usb 2-1: config 0 descriptor?? [ 1683.520867][T22833] Bluetooth: hci5: command tx timeout [ 1683.523546][ T5610] cp210x 2-1:0.0: cp210x converter detected [ 1683.677796][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1683.927279][ T5610] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1683.972883][ T5610] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1684.032098][ T4263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.507170][ T4263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.553133][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1684.603109][T24981] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1684.642750][T24981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1684.646146][T24981] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1684.739465][T24981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1684.772025][T24981] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1684.842538][T24981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1684.872152][T24981] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1684.966214][T24981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1685.601946][T22833] Bluetooth: hci5: command tx timeout [ 1685.658717][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1685.684861][T25238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.685025][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.685306][T25238] bridge_slave_0: entered allmulticast mode [ 1685.741652][T25238] bridge_slave_0: entered promiscuous mode [ 1685.821338][T25238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.821568][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.821781][T25238] bridge_slave_1: entered allmulticast mode [ 1685.850280][T25238] bridge_slave_1: entered promiscuous mode [ 1686.073685][ T5817] usb 2-1: USB disconnect, device number 16 [ 1686.101104][ T5817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1686.299315][T25356] netlink: 'syz.1.5913': attribute type 7 has an invalid length. [ 1686.338305][ T5817] cp210x 2-1:0.0: device disconnected [ 1686.425987][T25238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.448834][T24993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1686.494566][T24993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1686.524923][T25238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.600463][T24993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1686.690031][T24993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1686.951876][T24993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1687.004514][T24993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1687.106458][T24993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1687.136437][T24993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1687.138712][ T5259] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1687.143322][T25238] team0: Port device team_slave_0 added [ 1687.193461][T25238] team0: Port device team_slave_1 added [ 1687.286014][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1687.286088][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1687.505307][ T4263] bridge_slave_1: left allmulticast mode [ 1687.505354][ T4263] bridge_slave_1: left promiscuous mode [ 1687.505667][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.982552][ T4263] bridge_slave_0: left allmulticast mode [ 1687.983110][ T4263] bridge_slave_0: left promiscuous mode [ 1687.985288][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.964446][ T4263] bridge_slave_1: left allmulticast mode [ 1688.964484][ T4263] bridge_slave_1: left promiscuous mode [ 1688.964739][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.094723][ T4263] bridge_slave_0: left allmulticast mode [ 1689.094753][ T4263] bridge_slave_0: left promiscuous mode [ 1689.094927][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.334109][ T4263] bridge_slave_1: left allmulticast mode [ 1689.334139][ T4263] bridge_slave_1: left promiscuous mode [ 1689.334315][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.435642][ T4263] bridge_slave_0: left allmulticast mode [ 1689.435686][ T4263] bridge_slave_0: left promiscuous mode [ 1689.435875][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.655099][ T4263] bridge_slave_1: left allmulticast mode [ 1689.655141][ T4263] bridge_slave_1: left promiscuous mode [ 1689.655404][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.755392][ T4263] bridge_slave_0: left allmulticast mode [ 1689.755422][ T4263] bridge_slave_0: left promiscuous mode [ 1689.755638][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.285581][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.365102][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.427015][ T4263] bond0 (unregistering): Released all slaves [ 1690.646400][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.726280][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.790786][ T4263] bond0 (unregistering): Released all slaves [ 1691.046336][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.126123][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.188890][ T4263] bond0 (unregistering): Released all slaves [ 1691.796324][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.855946][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.877594][ T4263] bond0 (unregistering): Released all slaves [ 1692.074892][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1692.598273][T25238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1692.598295][T25238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1692.598325][T25238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1692.690009][T25238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1692.690029][T25238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1692.690061][T25238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.856885][ T5817] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1693.009666][ T5817] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1693.009708][ T5817] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1693.009748][ T5817] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1693.009773][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.039125][T25398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1693.067105][ T5817] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1693.496821][T24965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1693.754646][T24965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1693.820521][T25238] hsr_slave_0: entered promiscuous mode [ 1693.887623][T25238] hsr_slave_1: entered promiscuous mode [ 1693.893109][T25238] debugfs: 'hsr0' already exists in 'hsr' [ 1693.893188][T25238] Cannot create hsr debugfs directory [ 1693.930287][ T5259] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1694.092550][ T5817] usb 2-1: USB disconnect, device number 17 [ 1695.464658][T19383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1695.565420][T19383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1695.596198][T19383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1695.721195][T19383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1695.742562][T19383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1695.925185][T19383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1695.964316][T19383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1696.064659][T19383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1696.073257][T19383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1696.076716][T19383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1696.336440][T25442] random: crng reseeded on system resumption [ 1696.574965][T22833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1696.615042][T22833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1696.625568][T22833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1696.636713][T22833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1696.707615][ T1008] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1696.721016][T22833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1696.908342][ T1008] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1696.908379][ T1008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.943638][ T5259] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1696.958466][ T1008] usb 2-1: config 0 descriptor?? [ 1696.972666][ T1008] cp210x 2-1:0.0: cp210x converter detected [ 1697.611582][ T1008] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1697.811378][ T1008] usb 2-1: USB disconnect, device number 18 [ 1697.833198][ T1008] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1697.928387][T22833] Bluetooth: hci1: command tx timeout [ 1698.078784][ T1008] cp210x 2-1:0.0: device disconnected [ 1698.258202][T22833] Bluetooth: hci2: command tx timeout [ 1698.534839][ T4263] hsr_slave_0: left promiscuous mode [ 1698.570931][ T4263] hsr_slave_1: left promiscuous mode [ 1698.572063][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.619962][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.782921][T22833] block nbd0: Receive control failed (result -32) [ 1698.819092][T22833] Bluetooth: hci4: command tx timeout [ 1698.821351][ T4263] hsr_slave_0: left promiscuous mode [ 1698.861272][ T4263] hsr_slave_1: left promiscuous mode [ 1698.862383][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.908007][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.926495][T25483] random: crng reseeded on system resumption [ 1699.101569][ T4263] hsr_slave_0: left promiscuous mode [ 1699.144448][ T4263] hsr_slave_1: left promiscuous mode [ 1699.145555][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1699.188702][T25456] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1699.189910][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1699.342390][T25456] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1699.342427][T25456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.369812][T25456] usb 2-1: config 0 descriptor?? [ 1699.398955][T25456] cp210x 2-1:0.0: cp210x converter detected [ 1699.419482][ T4263] hsr_slave_0: left promiscuous mode [ 1699.459022][ T4263] hsr_slave_1: left promiscuous mode [ 1699.460115][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1699.460143][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1699.512527][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1699.512560][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1699.685651][ T4263] veth1_macvtap: left promiscuous mode [ 1699.687077][ T4263] veth0_macvtap: left promiscuous mode [ 1699.687685][ T4263] veth1_vlan: left promiscuous mode [ 1699.699276][ T4263] veth0_vlan: left promiscuous mode [ 1699.885996][T25456] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1699.902247][T25456] usb 2-1: USB disconnect, device number 19 [ 1699.918150][T25456] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1700.009207][T22833] Bluetooth: hci1: command tx timeout [ 1700.129397][T25456] cp210x 2-1:0.0: device disconnected [ 1700.329492][T22833] Bluetooth: hci2: command tx timeout [ 1700.889908][T22833] Bluetooth: hci4: command tx timeout [ 1702.100484][T22833] Bluetooth: hci1: command tx timeout [ 1702.339820][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1702.420359][T22833] Bluetooth: hci2: command tx timeout [ 1702.421105][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1702.914837][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1702.961291][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1702.980640][T22833] Bluetooth: hci4: command tx timeout [ 1703.280419][T25540] capability: warning: `syz.1.5924' uses deprecated v2 capabilities in a way that may be insecure [ 1703.504160][T25543] cgroup: Invalid name [ 1703.602355][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1703.683191][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1704.171418][T22833] Bluetooth: hci1: command tx timeout [ 1704.494331][T22833] Bluetooth: hci2: command tx timeout [ 1705.051692][T22833] Bluetooth: hci4: command tx timeout [ 1705.315566][T25553] FAULT_INJECTION: forcing a failure. [ 1705.315566][T25553] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1705.315605][T25553] CPU: 1 UID: 0 PID: 25553 Comm: syz.1.5928 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1705.315632][T25553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1705.315646][T25553] Call Trace: [ 1705.315733][T25553] [ 1705.315791][T25553] dump_stack_lvl+0xe8/0x150 [ 1705.315931][T25553] should_fail_ex+0x467/0x600 [ 1705.316050][T25553] _copy_to_user+0x31/0xb0 [ 1705.316122][T25553] simple_read_from_buffer+0xe1/0x170 [ 1705.316218][T25553] proc_fail_nth_read+0x1be/0x230 [ 1705.316280][T25553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1705.316324][T25553] ? rw_verify_area+0x250/0x4d0 [ 1705.316376][T25553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1705.316394][T25553] vfs_read+0x219/0xa90 [ 1705.316445][T25553] ? __pfx_vfs_read+0x10/0x10 [ 1705.316468][T25553] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1705.316553][T25553] ? lockdep_hardirqs_on+0x7a/0x110 [ 1705.316594][T25553] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1705.316616][T25553] ? mutex_lock_nested+0x152/0x1d0 [ 1705.316633][T25553] ? fdget_pos+0x252/0x320 [ 1705.316680][T25553] ksys_read+0x156/0x270 [ 1705.316703][T25553] ? __pfx_ksys_read+0x10/0x10 [ 1705.316732][T25553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.316771][T25553] do_syscall_64+0x174/0x580 [ 1705.316812][T25553] ? trace_irq_disable+0x3b/0x140 [ 1705.316860][T25553] ? clear_bhb_loop+0x40/0x90 [ 1705.316881][T25553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.316898][T25553] RIP: 0033:0x7f1f2ad0e84e [ 1705.316935][T25553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1705.316950][T25553] RSP: 002b:00007f1f28f84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1705.316988][T25553] RAX: ffffffffffffffda RBX: 00007f1f28f856c0 RCX: 00007f1f2ad0e84e [ 1705.317001][T25553] RDX: 000000000000000f RSI: 00007f1f28f850a0 RDI: 0000000000000005 [ 1705.317012][T25553] RBP: 00007f1f28f85090 R08: 0000000000000000 R09: 0000000000000000 [ 1705.317023][T25553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1705.317034][T25553] R13: 00007f1f2afd6128 R14: 00007f1f2afd6090 R15: 00007ffeb7640248 [ 1705.317062][T25553] [ 1705.692087][ T5819] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1705.773204][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1705.812707][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1705.895101][ T5819] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1705.895140][ T5819] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1705.895173][ T5819] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1705.895188][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.901994][T25555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1705.916285][ T5819] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1707.959490][ T5819] usb 2-1: USB disconnect, device number 20 [ 1709.141812][ T5819] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1709.344246][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 1709.346784][ T5819] usb 2-1: config 0 has an invalid interface number: 131 but max is 0 [ 1709.346816][ T5819] usb 2-1: config 0 has no interface number 0 [ 1709.346850][ T5819] usb 2-1: config 0 interface 131 has no altsetting 0 [ 1709.358279][ T5819] usb 2-1: New USB device found, idVendor=04d8, idProduct=e183, bcdDevice= a.13 [ 1709.358310][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.358327][ T5819] usb 2-1: Product: syz [ 1709.358341][ T5819] usb 2-1: Manufacturer: syz [ 1709.358354][ T5819] usb 2-1: SerialNumber: syz [ 1709.364752][ T5819] usb 2-1: config 0 descriptor?? [ 1709.515737][T25238] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1709.569029][T25238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1709.710454][T25581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1709.793728][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1709.802262][T25238] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1709.842678][T25238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1710.109974][T25238] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1710.196582][T25238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1710.197020][T25573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1710.317174][T25238] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1710.483818][T25238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1710.686208][ T5819] cdc_acm 2-1:0.131: Zero length descriptor references [ 1710.686283][ T5819] cdc_acm 2-1:0.131: probe with driver cdc_acm failed with error -22 [ 1710.780933][ T5819] usb 2-1: USB disconnect, device number 21 [ 1711.390239][T25435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.390389][T25435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.390511][T25435] bridge_slave_0: entered allmulticast mode [ 1711.392126][T25435] bridge_slave_0: entered promiscuous mode [ 1711.452993][T25435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.453147][T25435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.453359][T25435] bridge_slave_1: entered allmulticast mode [ 1711.489198][T25435] bridge_slave_1: entered promiscuous mode [ 1711.585111][T25430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.585254][T25430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.585479][T25430] bridge_slave_0: entered allmulticast mode [ 1711.588622][T25430] bridge_slave_0: entered promiscuous mode [ 1711.713292][T25430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.713457][T25430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.713664][T25430] bridge_slave_1: entered allmulticast mode [ 1711.739193][T25430] bridge_slave_1: entered promiscuous mode [ 1711.826169][T25443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.828083][T25443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.828450][T25443] bridge_slave_0: entered allmulticast mode [ 1711.832475][T25443] bridge_slave_0: entered promiscuous mode [ 1711.891213][T25435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.901088][T25443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.901221][T25443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.901794][T25443] bridge_slave_1: entered allmulticast mode [ 1711.904600][T25443] bridge_slave_1: entered promiscuous mode [ 1711.993217][T25435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.057570][T22833] block nbd1: Receive control failed (result -32) [ 1712.177290][T25430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.354550][T25629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1712.378321][T25430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.654431][T25443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.670168][T25435] team0: Port device team_slave_0 added [ 1712.844145][T25443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.862008][T25435] team0: Port device team_slave_1 added [ 1713.282484][T25430] team0: Port device team_slave_0 added [ 1713.439466][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1713.459488][T25430] team0: Port device team_slave_1 added [ 1713.601849][T25443] team0: Port device team_slave_0 added [ 1713.602885][T25435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.602901][T25435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.602932][T25435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.702764][T25443] team0: Port device team_slave_1 added [ 1713.704623][T25435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.704641][T25435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.704673][T25435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.730344][T25430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.730366][T25430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.730392][T25430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.809365][T25430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.809386][T25430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.809416][T25430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.874812][T25443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.874833][T25443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.874863][T25443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.998537][T25443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.998559][T25443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.998590][T25443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.006296][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1714.154708][T25435] hsr_slave_0: entered promiscuous mode [ 1714.156350][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1714.162718][T25435] hsr_slave_1: entered promiscuous mode [ 1714.181334][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1714.181370][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.181393][ T10] usb 2-1: Product: syz [ 1714.181409][ T10] usb 2-1: Manufacturer: syz [ 1714.181425][ T10] usb 2-1: SerialNumber: syz [ 1714.212168][ T10] usb 2-1: config 0 descriptor?? [ 1714.248467][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1714.313785][ T4263] IPVS: stop unused estimator thread 0... [ 1714.488203][T25430] hsr_slave_0: entered promiscuous mode [ 1714.491163][T25430] hsr_slave_1: entered promiscuous mode [ 1714.493834][T25430] debugfs: 'hsr0' already exists in 'hsr' [ 1714.493864][T25430] Cannot create hsr debugfs directory [ 1714.751892][T25640] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 1714.841523][T25443] hsr_slave_0: entered promiscuous mode [ 1714.843217][T25443] hsr_slave_1: entered promiscuous mode [ 1714.844364][T25443] debugfs: 'hsr0' already exists in 'hsr' [ 1714.844393][T25443] Cannot create hsr debugfs directory [ 1715.323818][ T10] gspca_ov534_9: reg_w failed -71 [ 1715.606919][ T10] gspca_ov534_9: Unknown sensor 0000 [ 1715.607032][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1715.634549][ T10] usb 2-1: USB disconnect, device number 22 [ 1716.013071][T25238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.459180][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5936'. [ 1716.592359][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1716.604831][T25657] warning: `syz.1.5936' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1717.219187][T25238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1717.769949][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.770188][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.953913][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.954082][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.874728][T25675] gadgetfs: bound to dummy_udc driver [ 1720.560550][T25673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.560968][T25673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.659767][T25673] fuse: Bad value for 'fd' [ 1721.139989][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1721.140540][ C0] gadgetfs: connected [ 1721.155723][ T10] gadgetfs: disconnected [ 1721.902262][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1724.233268][T25716] ipvlan2: entered promiscuous mode [ 1724.270190][T25238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.491424][ T5726] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1724.648336][ T5726] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1724.648370][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.359512][T25238] veth0_vlan: entered promiscuous mode [ 1725.406417][T25238] veth1_vlan: entered promiscuous mode [ 1725.941154][ T5726] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 1725.941184][ T5726] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 1725.971166][ T5726] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 1725.971231][ T5726] ATM dev 0: poll status: error -71 [ 1725.971351][ T5726] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 1725.973088][ C0] ATM dev 0: usbatm_complete: urb 0xffff888029b45400 failed (-71)! [ 1725.973215][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034d6ee00 failed (-71)! [ 1725.973817][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034d6ea00 failed (-71)! [ 1725.973873][ C0] ATM dev 0: usbatm_complete: urb 0xffff888028ee1d00 failed (-71)! [ 1726.003817][ T5726] usb 2-1: USB disconnect, device number 24 [ 1726.385809][T25238] veth0_macvtap: entered promiscuous mode [ 1726.408622][T25238] veth1_macvtap: entered promiscuous mode [ 1726.466366][T25238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.567861][T25238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.643107][ T3408] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.643160][ T3408] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.643200][ T3408] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.643238][ T3408] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.902533][T25456] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1727.143934][T25456] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1727.143976][T25456] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1727.144018][T25456] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1727.144044][T25456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.202755][T25758] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1727.209598][T25456] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1727.247598][ T4263] bridge_slave_1: left allmulticast mode [ 1727.247635][ T4263] bridge_slave_1: left promiscuous mode [ 1727.247880][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.556389][ T4263] bridge_slave_0: left allmulticast mode [ 1727.556430][ T4263] bridge_slave_0: left promiscuous mode [ 1727.556707][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.172362][ T4263] bridge_slave_1: left allmulticast mode [ 1728.172436][ T4263] bridge_slave_1: left promiscuous mode [ 1728.172658][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.521410][ T4263] bridge_slave_0: left allmulticast mode [ 1728.521437][ T4263] bridge_slave_0: left promiscuous mode [ 1728.521882][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.664672][ T5817] usb 2-1: USB disconnect, device number 25 [ 1728.844437][ T4263] bridge_slave_1: left allmulticast mode [ 1728.844467][ T4263] bridge_slave_1: left promiscuous mode [ 1728.844652][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.944602][ T4263] bridge_slave_0: left allmulticast mode [ 1728.944633][ T4263] bridge_slave_0: left promiscuous mode [ 1728.944814][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.144210][ T4263] bridge_slave_1: left allmulticast mode [ 1729.144238][ T4263] bridge_slave_1: left promiscuous mode [ 1729.144417][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.265515][ T4263] bridge_slave_0: left allmulticast mode [ 1729.265557][ T4263] bridge_slave_0: left promiscuous mode [ 1729.265832][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.306341][T25775] overlay: Unknown parameter '/' [ 1729.806935][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1729.884879][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1729.947998][ T4263] bond0 (unregistering): Released all slaves [ 1730.315063][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1730.399691][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1730.475987][ T4263] bond0 (unregistering): Released all slaves [ 1730.752893][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1730.836551][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1730.896990][ T4263] bond0 (unregistering): Released all slaves [ 1731.125390][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.207165][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.267083][ T4263] bond0 (unregistering): Released all slaves [ 1731.437625][T25775] bridge_slave_0: default FDB implementation only supports local addresses [ 1732.088740][T25778] overlay: Unknown parameter '/' [ 1732.338380][ T4885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.338404][ T4885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.346801][T25778] bridge_slave_0: default FDB implementation only supports local addresses [ 1732.577333][T21049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.577357][T21049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.912652][T25782] bond0: entered promiscuous mode [ 1732.912677][T25782] bond_slave_0: entered promiscuous mode [ 1732.912831][T25782] bond_slave_1: entered promiscuous mode [ 1732.953243][T25782] bond0: left promiscuous mode [ 1732.953270][T25782] bond_slave_0: left promiscuous mode [ 1732.953491][T25782] bond_slave_1: left promiscuous mode [ 1733.303417][T25785] FAULT_INJECTION: forcing a failure. [ 1733.303417][T25785] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.303454][T25785] CPU: 0 UID: 0 PID: 25785 Comm: syz.1.5947 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1733.303479][T25785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1733.303491][T25785] Call Trace: [ 1733.303500][T25785] [ 1733.303509][T25785] dump_stack_lvl+0xe8/0x150 [ 1733.303553][T25785] should_fail_ex+0x467/0x600 [ 1733.303596][T25785] should_failslab+0xa8/0x100 [ 1733.303709][T25785] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1733.303767][T25785] ? __alloc_skb+0x1d7/0x7a0 [ 1733.303951][T25785] ? __alloc_skb+0x1d7/0x7a0 [ 1733.303983][T25785] __alloc_skb+0x1d7/0x7a0 [ 1733.304013][T25785] __ip6_append_data+0x2ec4/0x40c0 [ 1733.304114][T25785] ? __pfx_raw6_getfrag+0x10/0x10 [ 1733.304205][T25785] ? ip6_mtu+0x7d/0x490 [ 1733.304278][T25785] ? ip6_mtu+0x7d/0x490 [ 1733.304308][T25785] ? __pfx___ip6_append_data+0x10/0x10 [ 1733.304336][T25785] ? ip6_setup_cork+0x547/0xf60 [ 1733.304365][T25785] ? ip6_append_data+0x1a6/0x270 [ 1733.304395][T25785] ip6_append_data+0x108/0x270 [ 1733.304424][T25785] ? __pfx_raw6_getfrag+0x10/0x10 [ 1733.304454][T25785] rawv6_sendmsg+0x1298/0x18c0 [ 1733.304498][T25785] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1733.304524][T25785] ? __lock_acquire+0x683/0x2ce0 [ 1733.304599][T25785] ? smack_socket_sendmsg+0x1a9/0x590 [ 1733.304673][T25785] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1733.304712][T25785] ? __lock_acquire+0x683/0x2ce0 [ 1733.304738][T25785] ? sock_rps_record_flow+0x19/0x350 [ 1733.304801][T25785] ? inet_sendmsg+0x298/0x320 [ 1733.304826][T25785] ? __pfx_inet_sendmsg+0x10/0x10 [ 1733.304846][T25785] sock_sendmsg_nosec+0x10e/0x180 [ 1733.304923][T25785] ____sys_sendmsg+0x565/0x870 [ 1733.304949][T25785] ? __might_fault+0xaf/0x130 [ 1733.305008][T25785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1733.305045][T25785] ? import_iovec+0x73/0xa0 [ 1733.305100][T25785] ___sys_sendmsg+0x2a5/0x360 [ 1733.305126][T25785] ? __lock_acquire+0x683/0x2ce0 [ 1733.305163][T25785] ? __pfx____sys_sendmsg+0x10/0x10 [ 1733.305198][T25785] ? kstrtouint+0x6e/0xe0 [ 1733.305261][T25785] ? __fget_files+0x2a/0x420 [ 1733.305286][T25785] ? __fget_files+0x3a8/0x420 [ 1733.305321][T25785] __sys_sendmmsg+0x279/0x4d0 [ 1733.305356][T25785] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1733.305401][T25785] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1733.305444][T25785] ? ksys_write+0x248/0x270 [ 1733.305476][T25785] ? __pfx_ksys_write+0x10/0x10 [ 1733.305511][T25785] __x64_sys_sendmmsg+0xa0/0xc0 [ 1733.305539][T25785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.305562][T25785] do_syscall_64+0x174/0x580 [ 1733.305589][T25785] ? trace_irq_disable+0x3b/0x140 [ 1733.305613][T25785] ? clear_bhb_loop+0x40/0x90 [ 1733.305638][T25785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.305660][T25785] RIP: 0033:0x7f1f2ad4e019 [ 1733.305681][T25785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1733.305700][T25785] RSP: 002b:00007f1f28fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1733.305724][T25785] RAX: ffffffffffffffda RBX: 00007f1f2afd5fa0 RCX: 00007f1f2ad4e019 [ 1733.305741][T25785] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1733.305769][T25785] RBP: 00007f1f28fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1733.305784][T25785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1733.305798][T25785] R13: 00007f1f2afd6038 R14: 00007f1f2afd5fa0 R15: 00007ffeb7640248 [ 1733.305834][T25785] [ 1733.707401][ T4263] hsr_slave_0: left promiscuous mode [ 1733.746035][ T4263] hsr_slave_1: left promiscuous mode [ 1733.746701][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.798362][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.803739][T25799] overlay: Unknown parameter '/' [ 1733.976260][ T4263] hsr_slave_0: left promiscuous mode [ 1733.994657][T25801] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5953'. [ 1733.994688][T25801] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5953'. [ 1734.047773][ T4263] hsr_slave_1: left promiscuous mode [ 1734.048889][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.086823][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1734.226225][ T4263] hsr_slave_0: left promiscuous mode [ 1734.246195][ T4263] hsr_slave_1: left promiscuous mode [ 1734.247077][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.298113][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1734.436395][ T4263] hsr_slave_0: left promiscuous mode [ 1734.456438][ T4263] hsr_slave_1: left promiscuous mode [ 1734.457772][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.502072][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1734.958045][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1734.987200][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1735.438100][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1735.487725][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1735.949756][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1736.008550][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1736.499227][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 1736.548031][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 1736.819992][T25799] bridge_slave_0: default FDB implementation only supports local addresses [ 1738.397726][ T36] audit: type=1326 audit(1800325757.203:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.398629][ T36] audit: type=1326 audit(1800325757.203:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.398683][ T36] audit: type=1326 audit(1800325757.203:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.398824][ T36] audit: type=1326 audit(1800325757.203:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.398880][ T36] audit: type=1326 audit(1800325757.203:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.398931][ T36] audit: type=1326 audit(1800325757.203:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.398981][ T36] audit: type=1326 audit(1800325757.203:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.399029][ T36] audit: type=1326 audit(1800325757.203:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.399079][ T36] audit: type=1326 audit(1800325757.203:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.399127][ T36] audit: type=1326 audit(1800325757.203:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2ad4e019 code=0x7ffc0000 [ 1738.993945][T25435] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1739.046606][T25435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1739.048175][T25435] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1739.109283][T25435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1739.136380][T25435] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1739.353910][T25435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1739.359213][T25435] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1739.400984][T25435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1740.730713][T25430] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1740.899200][T25430] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1740.921404][T25430] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1741.150069][T25430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1741.279776][T25430] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1741.378464][T25430] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1741.405664][T25430] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1741.450715][T25430] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1741.596737][T25877] overlay: Unknown parameter '/' [ 1741.984669][T25877] bridge_slave_0: default FDB implementation only supports local addresses [ 1742.610403][ T5817] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1742.813606][ T5817] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.813668][ T5817] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1742.816713][ T5817] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1742.816745][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.816766][ T5817] usb 7-1: Product: syz [ 1742.816783][ T5817] usb 7-1: Manufacturer: syz [ 1742.816798][ T5817] usb 7-1: SerialNumber: syz [ 1743.013568][T25435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.054902][T25443] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1743.103202][T25907] loop4: detected capacity change from 0 to 7 [ 1743.140574][T25443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1743.163784][T25443] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1743.271379][T25443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1743.279512][T25443] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1743.389487][T25897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.390205][T25897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.412612][ T5817] cdc_ether 7-1:1.0: bad CDC descriptors [ 1743.427606][ T5817] usb 7-1: USB disconnect, device number 17 [ 1743.494765][T25443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1743.544766][T25443] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1743.672483][T25907] loop4: [ 1743.672515][T25907] loop4: partition table partially beyond EOD, truncated [ 1743.728902][T25443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1743.881235][T25435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1744.051159][T20612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.051311][T20612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1744.267018][T21050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.267189][T21050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1744.292295][T25430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1744.523382][T25430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1744.561121][T20213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.573026][T20213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1744.760845][T21049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.760989][T21049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1745.190431][T25443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1745.639152][T25443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1745.736844][T20612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.738641][T20612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1745.841699][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.852187][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1745.881461][T25940] overlay: Unknown parameter '/' [ 1746.106514][T25940] bridge_slave_0: default FDB implementation only supports local addresses [ 1746.471325][T25952] batadv_slave_1: entered promiscuous mode [ 1746.838470][T25949] batadv_slave_1: left promiscuous mode [ 1747.344890][T22833] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1747.344922][T22833] CPU: 0 UID: 0 PID: 22833 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1747.344951][T22833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1747.344966][T22833] Workqueue: hci5 hci_rx_work [ 1747.345083][T22833] Call Trace: [ 1747.345094][T22833] [ 1747.345105][T22833] dump_stack_lvl+0xe8/0x150 [ 1747.345144][T22833] sysfs_create_dir_ns+0x271/0x2a0 [ 1747.345203][T22833] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1747.345243][T22833] ? rt_spin_unlock+0x163/0x200 [ 1747.345270][T22833] kobject_add_internal+0x62c/0xce0 [ 1747.345328][T22833] kobject_add+0x163/0x240 [ 1747.345382][T22833] ? rt_spin_unlock+0x157/0x200 [ 1747.345413][T22833] ? __pfx_kobject_add+0x10/0x10 [ 1747.345457][T22833] ? get_device_parent+0x370/0x3a0 [ 1747.345552][T22833] device_add+0x3fa/0xb80 [ 1747.345586][T22833] hci_conn_add_sysfs+0xd5/0x210 [ 1747.345642][T22833] le_conn_complete_evt+0xfef/0x1580 [ 1747.345729][T22833] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1747.345766][T22833] ? lockdep_hardirqs_on+0x7a/0x110 [ 1747.345798][T22833] ? rt_mutex_slowunlock+0x219/0x460 [ 1747.345823][T22833] ? skb_pull_data+0xf0/0x200 [ 1747.345861][T22833] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1747.345899][T22833] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1747.345939][T22833] hci_event_packet+0x67a/0xf10 [ 1747.345977][T22833] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1747.346009][T22833] ? __pfx_hci_event_packet+0x10/0x10 [ 1747.346037][T22833] ? rt_spin_unlock+0x157/0x200 [ 1747.346069][T22833] ? hci_send_to_monitor+0xe2/0x590 [ 1747.346095][T22833] hci_rx_work+0x3ee/0x1020 [ 1747.346133][T22833] ? process_scheduled_works+0xa20/0x14e0 [ 1747.346222][T22833] process_scheduled_works+0xa8e/0x14e0 [ 1747.346282][T22833] ? __pfx_process_scheduled_works+0x10/0x10 [ 1747.346319][T22833] ? assign_work+0x3cf/0x5d0 [ 1747.346352][T22833] worker_thread+0xa47/0xfb0 [ 1747.346396][T22833] ? __kthread_parkme+0x71/0x1f0 [ 1747.346461][T22833] kthread+0x388/0x470 [ 1747.346497][T22833] ? __pfx_worker_thread+0x10/0x10 [ 1747.346524][T22833] ? __pfx_kthread+0x10/0x10 [ 1747.346557][T22833] ret_from_fork+0x514/0xb70 [ 1747.346644][T22833] ? __pfx_ret_from_fork+0x10/0x10 [ 1747.346679][T22833] ? __switch_to+0xc89/0x1420 [ 1747.346733][T22833] ? __pfx_kthread+0x10/0x10 [ 1747.346769][T22833] ret_from_fork_asm+0x1a/0x30 [ 1747.346810][T22833] [ 1747.346847][T22833] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1747.346892][T22833] Bluetooth: hci5: failed to register connection device [ 1747.719020][T25435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1747.814155][T25430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1748.158176][T25978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1748.158323][T25978] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1748.344486][T25994] program syz.1.5974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1748.370308][T25994] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1748.514609][T25978] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1748.514798][T25978] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1748.637115][T25978] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1748.679182][T25443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1748.756856][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1748.756937][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1748.852844][T25978] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1748.916934][T25978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1748.917065][T25978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1749.062018][T25978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1749.165515][T25978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1749.165679][T25978] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1749.229124][T25435] veth0_vlan: entered promiscuous mode [ 1749.248292][T25978] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1749.367745][T25435] veth1_vlan: entered promiscuous mode [ 1749.380770][T25430] veth0_vlan: entered promiscuous mode [ 1749.411578][T25978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1749.411697][T25978] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1749.486963][T25430] veth1_vlan: entered promiscuous mode [ 1749.604662][T25978] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1749.627472][T25435] veth0_macvtap: entered promiscuous mode [ 1749.716578][T25435] veth1_macvtap: entered promiscuous mode [ 1749.794283][T22833] Bluetooth: hci0: command 0x0406 tx timeout [ 1749.903788][T25430] veth0_macvtap: entered promiscuous mode [ 1749.986244][T25435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1749.989181][T26035] 9pnet_fd: Insufficient options for proto=fd [ 1750.012379][T25430] veth1_macvtap: entered promiscuous mode [ 1750.021373][T25443] veth0_vlan: entered promiscuous mode [ 1750.045244][T25435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1750.205798][T20612] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.207042][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.207248][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.250470][T25443] veth1_vlan: entered promiscuous mode [ 1750.278127][T25430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1750.829103][T22833] Bluetooth: hci5: command 0x0c1a tx timeout [ 1750.994591][T22833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1751.039818][T25430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1751.170261][T22833] Bluetooth: hci2: command 0x0c1a tx timeout [ 1751.481712][T22833] Bluetooth: hci4: command 0x0c1a tx timeout [ 1751.875414][T22833] Bluetooth: hci0: command 0x0406 tx timeout [ 1752.020230][T26022] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1752.250807][T26022] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.250867][T26022] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1752.250895][T26022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1752.250923][T26022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1752.250948][T26022] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1752.300287][T26022] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1752.300324][T26022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1752.300346][T26022] usb 2-1: Product: syz [ 1752.300362][T26022] usb 2-1: Manufacturer: syz [ 1752.300378][T26022] usb 2-1: SerialNumber: syz [ 1752.359021][T26022] usb 2-1: config 0 descriptor?? [ 1752.387124][T25443] veth0_macvtap: entered promiscuous mode [ 1752.505422][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.505447][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.527320][ T3339] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.527371][ T3339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.527428][ T3339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.527463][ T3339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.527498][ T3339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.767640][T25443] veth1_macvtap: entered promiscuous mode [ 1752.839456][T22833] Bluetooth: hci5: command 0x0c1a tx timeout [ 1753.095984][T22833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1753.186156][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 1753.186177][ T36] audit: type=1326 audit(1800325771.986:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26056 comm="syz.6.5978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e262ce019 code=0x7ffc0000 [ 1753.221330][ T36] audit: type=1326 audit(1800325771.996:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26056 comm="syz.6.5978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e262ce019 code=0x7ffc0000 [ 1753.238315][T22833] Bluetooth: hci2: command 0x0c1a tx timeout [ 1753.671272][ T36] audit: type=1326 audit(1800325772.375:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26056 comm="syz.6.5978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e262ce019 code=0x7ffc0000 [ 1753.687263][T22833] Bluetooth: hci4: command 0x0c1a tx timeout [ 1754.184523][ T36] audit: type=1326 audit(1800325772.855:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26056 comm="syz.6.5978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e262ce019 code=0x7ffc0000 [ 1754.184656][ T36] audit: type=1326 audit(1800325772.855:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26056 comm="syz.6.5978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e262ce019 code=0x7ffc0000 [ 1754.283156][T26022] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1755.017435][T22833] Bluetooth: hci5: command 0x0c1a tx timeout [ 1755.227437][T19383] Bluetooth: hci1: command 0x0c1a tx timeout [ 1755.397430][T26022] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1755.400328][T22833] Bluetooth: hci2: command 0x0c1a tx timeout [ 1755.776007][T22833] Bluetooth: hci4: command 0x0c1a tx timeout [ 1757.319168][T22833] Bluetooth: hci5: command 0x0c1a tx timeout [ 1757.918059][T25443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.048758][T25443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1758.549276][T20213] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.592658][ T1118] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.753554][T26073] overlay: Unknown parameter '/' [ 1758.756246][T19383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1758.838730][T20213] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.841895][T19383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1758.862710][T19383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1758.899507][T19383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1758.899715][T20213] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.901645][T19383] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1759.504677][T26077] bridge_slave_0: default FDB implementation only supports local addresses [ 1759.856668][T26022] usb 2-1: USB disconnect, device number 26 [ 1761.033274][T19383] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1761.105349][T22643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1761.118492][T26090] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1761.118516][T26090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1761.383853][T19383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1761.404130][T19383] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1761.423060][T19383] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1761.431360][T22643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1761.488558][T22643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1761.502495][T22643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1761.502718][T19383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1761.553233][T19383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1761.641413][T19383] Bluetooth: hci3: command tx timeout [ 1761.691706][T25456] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1762.269945][T25456] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1762.269974][T25456] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1762.269991][T25456] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1762.272820][T25456] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1762.272840][T25456] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1762.272853][T25456] usb 2-1: Product: syz [ 1762.272862][T25456] usb 2-1: Manufacturer: syz [ 1762.272871][T25456] usb 2-1: SerialNumber: syz [ 1762.276222][T25456] usb 2-1: config 0 descriptor?? [ 1762.363750][T25456] usb 2-1: selecting invalid altsetting 0 [ 1762.597624][T26099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.630634][T26099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.687735][T25456] usb 2-1: USB disconnect, device number 27 [ 1763.727910][T20614] Bluetooth: hci3: command tx timeout [ 1764.043292][T20614] Bluetooth: hci6: command tx timeout [ 1764.202952][T20614] Bluetooth: hci2: command tx timeout [ 1765.632571][T26146] overlay: Unknown parameter '/' [ 1765.743809][T25402] udevd[25402]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1765.802050][T20614] Bluetooth: hci3: command tx timeout [ 1766.168055][T20614] Bluetooth: hci6: command tx timeout [ 1766.269529][ T3315] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.282808][T20614] Bluetooth: hci2: command tx timeout [ 1766.458414][T26146] bridge_slave_0: default FDB implementation only supports local addresses [ 1767.202662][T12751] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1767.672810][T12751] usb 7-1: Using ep0 maxpacket: 16 [ 1767.675945][T12751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1767.675994][T12751] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1767.676042][T12751] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1767.676068][T12751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.907383][T20614] Bluetooth: hci3: command tx timeout [ 1767.923871][T12751] usb 7-1: config 0 descriptor?? [ 1768.070437][T12751] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1768.103553][ T3315] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.203385][T20614] Bluetooth: hci6: command tx timeout [ 1768.240287][T26179] FAULT_INJECTION: forcing a failure. [ 1768.240287][T26179] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.240327][T26179] CPU: 1 UID: 0 PID: 26179 Comm: syz.6.5991 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1768.240354][T26179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1768.240368][T26179] Call Trace: [ 1768.240377][T26179] [ 1768.240387][T26179] dump_stack_lvl+0xe8/0x150 [ 1768.240428][T26179] should_fail_ex+0x467/0x600 [ 1768.240470][T26179] should_failslab+0xa8/0x100 [ 1768.240499][T26179] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1768.240525][T26179] ? __alloc_skb+0x1d7/0x7a0 [ 1768.240549][T26179] ? __alloc_skb+0x1d7/0x7a0 [ 1768.240581][T26179] __alloc_skb+0x1d7/0x7a0 [ 1768.240612][T26179] netlink_sendmsg+0x5d4/0xb40 [ 1768.240746][T26179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.240779][T26179] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1768.240836][T26179] ? __kernel_text_address+0xd/0x30 [ 1768.240863][T26179] ? unwind_get_return_address+0x4d/0x90 [ 1768.240940][T26179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.240967][T26179] sock_sendmsg_nosec+0x13a/0x180 [ 1768.241002][T26179] ____sys_sendmsg+0x565/0x870 [ 1768.241041][T26179] ? __might_fault+0xaf/0x130 [ 1768.241073][T26179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1768.241109][T26179] ? import_iovec+0x73/0xa0 [ 1768.241138][T26179] ___sys_sendmsg+0x2a5/0x360 [ 1768.241164][T26179] ? __lock_acquire+0x683/0x2ce0 [ 1768.241190][T26179] ? __pfx____sys_sendmsg+0x10/0x10 [ 1768.241247][T26179] ? __fget_files+0x2a/0x420 [ 1768.241265][T26179] ? __fget_files+0x3a8/0x420 [ 1768.241294][T26179] __x64_sys_sendmsg+0x1b7/0x290 [ 1768.241320][T26179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1768.241355][T26179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.241374][T26179] do_syscall_64+0x174/0x580 [ 1768.241396][T26179] ? trace_irq_disable+0x3b/0x140 [ 1768.241413][T26179] ? clear_bhb_loop+0x40/0x90 [ 1768.241438][T26179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.241458][T26179] RIP: 0033:0x7f8e262ce019 [ 1768.241476][T26179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.241490][T26179] RSP: 002b:00007f8e24526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1768.241509][T26179] RAX: ffffffffffffffda RBX: 00007f8e26555fa0 RCX: 00007f8e262ce019 [ 1768.241521][T26179] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1768.241533][T26179] RBP: 00007f8e24526090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.241543][T26179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.241553][T26179] R13: 00007f8e26556038 R14: 00007f8e26555fa0 R15: 00007ffd3b130ce8 [ 1768.241583][T26179] [ 1768.363277][T20614] Bluetooth: hci2: command tx timeout [ 1768.442642][T19839] usb 7-1: USB disconnect, device number 18 [ 1769.069693][T25456] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1769.117230][ T3315] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.193746][T25456] usb 2-1: device descriptor read/64, error -71 [ 1769.428324][T26223] overlay: Unknown parameter '/' [ 1769.433877][T25456] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1769.485438][T26223] bridge_slave_0: default FDB implementation only supports local addresses [ 1769.563914][T25456] usb 2-1: device descriptor read/64, error -71 [ 1769.674458][T25456] usb usb2-port1: attempt power cycle [ 1769.942862][ T3315] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.034145][T25456] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1770.055215][T25456] usb 2-1: device descriptor read/8, error -71 [ 1770.076331][T26235] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1770.076357][T26235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1770.284242][T20614] Bluetooth: hci6: command tx timeout [ 1770.335541][T25456] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1770.355060][T25456] usb 2-1: device descriptor read/8, error -71 [ 1770.397982][T26236] tipc: Started in network mode [ 1770.398017][T26236] tipc: Node identity ac14140f, cluster identity 4711 [ 1770.444398][T20614] Bluetooth: hci2: command tx timeout [ 1770.473419][T25456] usb usb2-port1: unable to enumerate USB device [ 1770.552291][T26236] tipc: New replicast peer: 255.255.255.255 [ 1770.606922][T26236] tipc: Enabled bearer , priority 10 [ 1771.032394][T26254] FAULT_INJECTION: forcing a failure. [ 1771.032394][T26254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1771.032441][T26254] CPU: 0 UID: 0 PID: 26254 Comm: syz.6.6002 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1771.032468][T26254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1771.032482][T26254] Call Trace: [ 1771.032491][T26254] [ 1771.032501][T26254] dump_stack_lvl+0xe8/0x150 [ 1771.032541][T26254] should_fail_ex+0x467/0x600 [ 1771.032581][T26254] strncpy_from_user+0x36/0x2c0 [ 1771.032661][T26254] do_getname+0x77/0x250 [ 1771.032770][T26254] __se_sys_renameat2+0x34/0x2c0 [ 1771.032815][T26254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.032839][T26254] do_syscall_64+0x174/0x580 [ 1771.032869][T26254] ? trace_irq_disable+0x3b/0x140 [ 1771.032892][T26254] ? clear_bhb_loop+0x40/0x90 [ 1771.032920][T26254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.032941][T26254] RIP: 0033:0x7f8e262ce019 [ 1771.032960][T26254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1771.032980][T26254] RSP: 002b:00007f8e24526028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1771.033002][T26254] RAX: ffffffffffffffda RBX: 00007f8e26555fa0 RCX: 00007f8e262ce019 [ 1771.033023][T26254] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 1771.033038][T26254] RBP: 00007f8e24526090 R08: 0000000000000002 R09: 0000000000000000 [ 1771.033053][T26254] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1771.033067][T26254] R13: 00007f8e26556038 R14: 00007f8e26555fa0 R15: 00007ffd3b130ce8 [ 1771.033102][T26254] [ 1771.734338][T25456] tipc: Node number set to 2886997007 [ 1772.030607][T26277] overlay: Unknown parameter '/' [ 1772.305227][T26277] bridge_slave_0: default FDB implementation only supports local addresses [ 1772.340451][T26284] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1772.340477][T26284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1772.608892][T26288] tipc: Enabling of bearer rejected, already enabled [ 1773.786376][ T3315] bridge_slave_1: left allmulticast mode [ 1773.786418][ T3315] bridge_slave_1: left promiscuous mode [ 1773.786724][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.919084][ T3315] bridge_slave_0: left allmulticast mode [ 1773.919113][ T3315] bridge_slave_0: left promiscuous mode [ 1773.920129][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.592937][T26318] netlink: 'syz.6.6012': attribute type 8 has an invalid length. [ 1774.592964][T26318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6012'. [ 1775.147454][ T3315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.227553][ T3315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.249826][ T3315] bond0 (unregistering): Released all slaves [ 1775.630101][T26071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.630583][T26071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.630791][T26071] bridge_slave_0: entered allmulticast mode [ 1775.633644][T26071] bridge_slave_0: entered promiscuous mode [ 1775.766210][T26071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.766394][T26071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.766652][T26071] bridge_slave_1: entered allmulticast mode [ 1775.873680][T26071] bridge_slave_1: entered promiscuous mode [ 1776.022058][T26341] overlay: Unknown parameter '/' [ 1776.265183][T26341] bridge_slave_0: default FDB implementation only supports local addresses [ 1776.265470][T26348] tipc: Started in network mode [ 1776.265498][T26348] tipc: Node identity ac14140f, cluster identity 4711 [ 1776.299230][T26348] tipc: New replicast peer: 255.255.255.255 [ 1776.330929][T26348] tipc: Enabled bearer , priority 10 [ 1776.498511][T26071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.498844][T26086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.498987][T26086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.499176][T26086] bridge_slave_0: entered allmulticast mode [ 1776.501778][T26086] bridge_slave_0: entered promiscuous mode [ 1776.575973][T26094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.576118][T26094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.576378][T26094] bridge_slave_0: entered allmulticast mode [ 1776.588707][T26094] bridge_slave_0: entered promiscuous mode [ 1776.607814][T26071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.608085][T26086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.608215][T26086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.608410][T26086] bridge_slave_1: entered allmulticast mode [ 1776.611598][T26086] bridge_slave_1: entered promiscuous mode [ 1776.623581][T26357] netlink: 'syz.1.6020': attribute type 5 has an invalid length. [ 1776.762896][T26360] ieee802154 phy0 wpan0: encryption failed: -22 [ 1778.221490][T26094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.221641][T26094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.221906][T26094] bridge_slave_1: entered allmulticast mode [ 1778.494254][T26094] bridge_slave_1: entered promiscuous mode [ 1778.566055][T25456] tipc: Node number set to 2886997007 [ 1778.712820][T26367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6021'. [ 1778.865257][T26071] team0: Port device team_slave_0 added [ 1778.877934][T26086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1778.902627][T26071] team0: Port device team_slave_1 added [ 1778.924566][T26094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1778.948028][T26086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1779.038552][T12751] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1779.151815][ T3315] hsr_slave_0: left promiscuous mode [ 1779.200284][ T3315] hsr_slave_1: left promiscuous mode [ 1779.201464][ T3315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1779.201491][ T3315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1779.231327][T12751] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.231391][T12751] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1779.231418][T12751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.237266][T12751] usb 2-1: config 0 descriptor?? [ 1779.291492][ T3315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1779.291522][ T3315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1779.486566][ T3315] veth1_macvtap: left promiscuous mode [ 1779.486689][ T3315] veth0_macvtap: left promiscuous mode [ 1779.486991][ T3315] veth1_vlan: left promiscuous mode [ 1779.487201][ T3315] veth0_vlan: left promiscuous mode [ 1779.487324][T12751] ath6kl: Failed to submit usb control message: -71 [ 1779.487379][T12751] ath6kl: unable to send the bmi data to the device: -71 [ 1779.487395][T12751] ath6kl: Unable to send get target info: -71 [ 1779.553622][T12751] ath6kl: Failed to init ath6kl core: -71 [ 1779.629622][T12751] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1779.654233][T12751] usb 2-1: USB disconnect, device number 32 [ 1780.293058][T26381] overlay: Unknown parameter '/' [ 1780.770223][ T3315] team0 (unregistering): Port device team_slave_1 removed [ 1780.830788][ T3315] team0 (unregistering): Port device team_slave_0 removed [ 1781.054261][T26094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1781.290508][T26381] bridge_slave_0: default FDB implementation only supports local addresses [ 1781.290631][T26384] tipc: Enabling of bearer rejected, already enabled [ 1781.364022][T26071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.364042][T26071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.364073][T26071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.415626][T26086] team0: Port device team_slave_0 added [ 1781.419028][T26071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.419048][T26071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.419079][T26071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.427514][T26094] team0: Port device team_slave_0 added [ 1781.434463][T26086] team0: Port device team_slave_1 added [ 1781.501341][T26094] team0: Port device team_slave_1 added [ 1781.913385][T26086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.913406][T26086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.913434][T26086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1784.194803][T26416] process 'syz.1.6032' launched './file0' with NULL argv: empty string added [ 1784.277397][T26416] trusted_key: syz.1.6032 sent an empty control message without MSG_MORE. [ 1784.337614][T26094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1784.337634][T26094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1784.337664][T26094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1784.340286][T26086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1784.340301][T26086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1784.340327][T26086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.603185][T26094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1784.603205][T26094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1784.603235][T26094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.680768][T26071] hsr_slave_0: entered promiscuous mode [ 1784.691359][T26071] hsr_slave_1: entered promiscuous mode [ 1784.742086][T26434] FAULT_INJECTION: forcing a failure. [ 1784.742086][T26434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.742125][T26434] CPU: 1 UID: 0 PID: 26434 Comm: syz.6.6033 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1784.742151][T26434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1784.742164][T26434] Call Trace: [ 1784.742174][T26434] [ 1784.742184][T26434] dump_stack_lvl+0xe8/0x150 [ 1784.742225][T26434] should_fail_ex+0x467/0x600 [ 1784.742268][T26434] _copy_from_iter+0x1d3/0x1660 [ 1784.742301][T26434] ? unwind_next_frame+0x8f/0x2550 [ 1784.742339][T26434] ? __pfx__copy_from_iter+0x10/0x10 [ 1784.742367][T26434] ? smack_socket_sendmsg+0x1a9/0x590 [ 1784.742417][T26434] bcm_sendmsg+0x157/0x7a0 [ 1784.742518][T26434] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1784.742539][T26434] ? __lock_acquire+0x683/0x2ce0 [ 1784.742575][T26434] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1784.742610][T26434] ? __kernel_text_address+0xd/0x30 [ 1784.742633][T26434] ? unwind_get_return_address+0x4d/0x90 [ 1784.742661][T26434] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1784.742681][T26434] sock_sendmsg_nosec+0x13a/0x180 [ 1784.742721][T26434] ____sys_sendmsg+0x565/0x870 [ 1784.742750][T26434] ? __might_fault+0xaf/0x130 [ 1784.742782][T26434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1784.742821][T26434] ? import_iovec+0x73/0xa0 [ 1784.742852][T26434] ___sys_sendmsg+0x2a5/0x360 [ 1784.742880][T26434] ? __lock_acquire+0x683/0x2ce0 [ 1784.742906][T26434] ? __pfx____sys_sendmsg+0x10/0x10 [ 1784.742973][T26434] ? __fget_files+0x2a/0x420 [ 1784.742998][T26434] ? __fget_files+0x3a8/0x420 [ 1784.743033][T26434] __x64_sys_sendmsg+0x1b7/0x290 [ 1784.743066][T26434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1784.743122][T26434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.743148][T26434] do_syscall_64+0x174/0x580 [ 1784.743178][T26434] ? trace_irq_disable+0x3b/0x140 [ 1784.743202][T26434] ? clear_bhb_loop+0x40/0x90 [ 1784.743227][T26434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.743249][T26434] RIP: 0033:0x7f8e262ce019 [ 1784.743269][T26434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1784.743288][T26434] RSP: 002b:00007f8e24526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1784.743313][T26434] RAX: ffffffffffffffda RBX: 00007f8e26555fa0 RCX: 00007f8e262ce019 [ 1784.743329][T26434] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 1784.743343][T26434] RBP: 00007f8e24526090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.743358][T26434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1784.743371][T26434] R13: 00007f8e26556038 R14: 00007f8e26555fa0 R15: 00007ffd3b130ce8 [ 1784.743414][T26434] [ 1785.229842][T26086] hsr_slave_0: entered promiscuous mode [ 1785.239258][T26086] hsr_slave_1: entered promiscuous mode [ 1785.240339][T26086] debugfs: 'hsr0' already exists in 'hsr' [ 1785.240366][T26086] Cannot create hsr debugfs directory [ 1785.267761][T26439] FAULT_INJECTION: forcing a failure. [ 1785.267761][T26439] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.267798][T26439] CPU: 0 UID: 0 PID: 26439 Comm: syz.6.6034 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1785.267822][T26439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1785.267835][T26439] Call Trace: [ 1785.267844][T26439] [ 1785.267854][T26439] dump_stack_lvl+0xe8/0x150 [ 1785.267903][T26439] should_fail_ex+0x467/0x600 [ 1785.267948][T26439] should_failslab+0xa8/0x100 [ 1785.267977][T26439] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1785.268002][T26439] ? __alloc_skb+0x1d7/0x7a0 [ 1785.268027][T26439] ? __alloc_skb+0x1d7/0x7a0 [ 1785.268055][T26439] __alloc_skb+0x1d7/0x7a0 [ 1785.268085][T26439] netlink_sendmsg+0x5d4/0xb40 [ 1785.268124][T26439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1785.268156][T26439] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1785.268190][T26439] ? __kernel_text_address+0xd/0x30 [ 1785.268211][T26439] ? unwind_get_return_address+0x4d/0x90 [ 1785.268241][T26439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1785.268270][T26439] sock_sendmsg_nosec+0x13a/0x180 [ 1785.268308][T26439] ____sys_sendmsg+0x565/0x870 [ 1785.268338][T26439] ? __might_fault+0xaf/0x130 [ 1785.268368][T26439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1785.268405][T26439] ? import_iovec+0x73/0xa0 [ 1785.268436][T26439] ___sys_sendmsg+0x2a5/0x360 [ 1785.268462][T26439] ? __lock_acquire+0x683/0x2ce0 [ 1785.268490][T26439] ? __pfx____sys_sendmsg+0x10/0x10 [ 1785.268556][T26439] ? __fget_files+0x2a/0x420 [ 1785.268580][T26439] ? __fget_files+0x3a8/0x420 [ 1785.268615][T26439] __x64_sys_sendmsg+0x1b7/0x290 [ 1785.268647][T26439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1785.268694][T26439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.268718][T26439] do_syscall_64+0x174/0x580 [ 1785.268747][T26439] ? trace_irq_disable+0x3b/0x140 [ 1785.268769][T26439] ? clear_bhb_loop+0x40/0x90 [ 1785.268795][T26439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.268814][T26439] RIP: 0033:0x7f8e262ce019 [ 1785.268834][T26439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.268853][T26439] RSP: 002b:00007f8e24526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1785.268876][T26439] RAX: ffffffffffffffda RBX: 00007f8e26555fa0 RCX: 00007f8e262ce019 [ 1785.268901][T26439] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1785.268914][T26439] RBP: 00007f8e24526090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.268928][T26439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.268941][T26439] R13: 00007f8e26556038 R14: 00007f8e26555fa0 R15: 00007ffd3b130ce8 [ 1785.268974][T26439] [ 1785.379740][T26442] overlay: Unknown parameter '/' [ 1785.625344][T26094] hsr_slave_0: entered promiscuous mode [ 1785.627129][T26094] hsr_slave_1: entered promiscuous mode [ 1785.628306][T26094] debugfs: 'hsr0' already exists in 'hsr' [ 1785.628335][T26094] Cannot create hsr debugfs directory [ 1785.714416][T26443] bridge_slave_0: default FDB implementation only supports local addresses [ 1786.135253][T26456] tipc: Enabling of bearer rejected, already enabled [ 1786.470437][ T3315] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.952595][T25456] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1787.198068][T25456] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1787.198110][T25456] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1787.198154][T25456] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1787.198180][T25456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.209552][T26461] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1787.228195][T25456] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1787.597633][ T3315] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.658412][ T5726] usb 7-1: USB disconnect, device number 19 [ 1789.482825][T26071] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.803880][T26501] netlink: 'syz.1.6041': attribute type 8 has an invalid length. [ 1789.803907][T26501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6041'. [ 1790.252565][ T3315] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.672731][T26522] overlay: Unknown parameter '/' [ 1790.852953][T26071] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.935500][T26522] bridge_slave_0: default FDB implementation only supports local addresses [ 1791.238313][ T3315] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.268414][T26531] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1791.268440][T26531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1791.633142][T26071] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.756199][T26535] tipc: Enabling of bearer rejected, already enabled [ 1791.806071][T25456] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1791.958973][T25456] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1791.959007][T25456] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1791.959025][T25456] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1792.000906][T25456] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1792.000940][T25456] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1792.000955][T25456] usb 2-1: Product: syz [ 1792.000967][T25456] usb 2-1: Manufacturer: syz [ 1792.000976][T25456] usb 2-1: SerialNumber: syz [ 1792.030820][T25456] usb 2-1: config 0 descriptor?? [ 1792.076953][T25456] usb 2-1: selecting invalid altsetting 0 [ 1792.286405][T26535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.290465][T26535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.218706][T26071] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.397030][T25456] usb 2-1: USB disconnect, device number 33 [ 1795.356214][T26556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6048'. [ 1796.047385][ T3315] bridge_slave_1: left allmulticast mode [ 1796.047428][ T3315] bridge_slave_1: left promiscuous mode [ 1796.047749][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.171593][T26575] FAULT_INJECTION: forcing a failure. [ 1796.171593][T26575] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.171632][T26575] CPU: 1 UID: 0 PID: 26575 Comm: syz.6.6047 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1796.171658][T26575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1796.171672][T26575] Call Trace: [ 1796.171681][T26575] [ 1796.171691][T26575] dump_stack_lvl+0xe8/0x150 [ 1796.171731][T26575] should_fail_ex+0x467/0x600 [ 1796.171772][T26575] should_failslab+0xa8/0x100 [ 1796.171801][T26575] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1796.171835][T26575] ? __alloc_skb+0x1d7/0x7a0 [ 1796.171860][T26575] ? __alloc_skb+0x1d7/0x7a0 [ 1796.171891][T26575] __alloc_skb+0x1d7/0x7a0 [ 1796.171921][T26575] netlink_sendmsg+0x5d4/0xb40 [ 1796.171961][T26575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1796.171992][T26575] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1796.172027][T26575] ? __kernel_text_address+0xd/0x30 [ 1796.172051][T26575] ? unwind_get_return_address+0x4d/0x90 [ 1796.172082][T26575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1796.172111][T26575] sock_sendmsg_nosec+0x13a/0x180 [ 1796.172149][T26575] ____sys_sendmsg+0x565/0x870 [ 1796.172178][T26575] ? __might_fault+0xaf/0x130 [ 1796.172210][T26575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1796.172250][T26575] ? import_iovec+0x73/0xa0 [ 1796.172281][T26575] ___sys_sendmsg+0x2a5/0x360 [ 1796.172308][T26575] ? __lock_acquire+0x683/0x2ce0 [ 1796.172336][T26575] ? __pfx____sys_sendmsg+0x10/0x10 [ 1796.172402][T26575] ? __fget_files+0x2a/0x420 [ 1796.172426][T26575] ? __fget_files+0x3a8/0x420 [ 1796.172461][T26575] __x64_sys_sendmsg+0x1b7/0x290 [ 1796.172492][T26575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1796.172538][T26575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.172564][T26575] do_syscall_64+0x174/0x580 [ 1796.172593][T26575] ? trace_irq_disable+0x3b/0x140 [ 1796.172616][T26575] ? clear_bhb_loop+0x40/0x90 [ 1796.172644][T26575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.172667][T26575] RIP: 0033:0x7f8e262ce019 [ 1796.172688][T26575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.172708][T26575] RSP: 002b:00007f8e24526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1796.172731][T26575] RAX: ffffffffffffffda RBX: 00007f8e26555fa0 RCX: 00007f8e262ce019 [ 1796.172748][T26575] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1796.172763][T26575] RBP: 00007f8e24526090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.172778][T26575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1796.172791][T26575] R13: 00007f8e26556038 R14: 00007f8e26555fa0 R15: 00007ffd3b130ce8 [ 1796.172835][T26575] [ 1796.520962][ T3315] bridge_slave_0: left allmulticast mode [ 1796.521002][ T3315] bridge_slave_0: left promiscuous mode [ 1796.521304][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.637746][T26583] overlay: Unknown parameter '/' [ 1796.755343][T26590] FAULT_INJECTION: forcing a failure. [ 1796.755343][T26590] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.755383][T26590] CPU: 0 UID: 0 PID: 26590 Comm: syz.1.6052 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1796.755415][T26590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1796.755429][T26590] Call Trace: [ 1796.755436][T26590] [ 1796.755446][T26590] dump_stack_lvl+0xe8/0x150 [ 1796.755487][T26590] should_fail_ex+0x467/0x600 [ 1796.755529][T26590] should_failslab+0xa8/0x100 [ 1796.755559][T26590] kmem_cache_alloc_noprof+0xa4/0x650 [ 1796.755583][T26590] ? dst_alloc+0x105/0x170 [ 1796.755678][T26590] ? dst_alloc+0x105/0x170 [ 1796.755717][T26590] dst_alloc+0x105/0x170 [ 1796.755746][T26590] ? ip_check_mc_rcu+0x64f/0x690 [ 1796.755781][T26590] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1796.755872][T26590] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1796.755905][T26590] ip_route_output_key_hash+0x18d/0x2a0 [ 1796.755932][T26590] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1796.755961][T26590] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1796.755994][T26590] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1796.756027][T26590] ip_route_output_flow+0x2a/0x150 [ 1796.756059][T26590] ? security_sk_classify_flow+0x6d/0x150 [ 1796.756132][T26590] __ip4_datagram_connect+0x940/0x1220 [ 1796.756208][T26590] udp_connect+0x32/0x1e0 [ 1796.756260][T26590] __sys_connect+0x336/0x470 [ 1796.756289][T26590] ? __pfx___sys_connect+0x10/0x10 [ 1796.756328][T26590] ? __pfx_ksys_write+0x10/0x10 [ 1796.756363][T26590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.756387][T26590] __x64_sys_connect+0x7a/0x90 [ 1796.756412][T26590] do_syscall_64+0x174/0x580 [ 1796.756440][T26590] ? trace_irq_disable+0x3b/0x140 [ 1796.756463][T26590] ? clear_bhb_loop+0x40/0x90 [ 1796.756490][T26590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.756513][T26590] RIP: 0033:0x7f1f2ad4e019 [ 1796.756534][T26590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.756553][T26590] RSP: 002b:00007f1f28f64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1796.756576][T26590] RAX: ffffffffffffffda RBX: 00007f1f2afd6180 RCX: 00007f1f2ad4e019 [ 1796.756593][T26590] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 1796.756607][T26590] RBP: 00007f1f28f64090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.756621][T26590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1796.756635][T26590] R13: 00007f1f2afd6218 R14: 00007f1f2afd6180 R15: 00007ffeb7640248 [ 1796.756671][T26590] [ 1797.003756][ T3315] bridge_slave_1: left allmulticast mode [ 1797.003796][ T3315] bridge_slave_1: left promiscuous mode [ 1797.004051][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.161913][ T3315] bridge_slave_0: left allmulticast mode [ 1797.161941][ T3315] bridge_slave_0: left promiscuous mode [ 1797.162107][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.188758][ T3315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.250276][ T3315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.292116][ T3315] bond0 (unregistering): Released all slaves [ 1798.930010][ T3315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.991156][ T3315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.012368][ T3315] bond0 (unregistering): Released all slaves [ 1799.057303][T26583] bridge_slave_0: default FDB implementation only supports local addresses [ 1801.440271][T25456] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1801.469856][ T3315] hsr_slave_0: left promiscuous mode [ 1801.549962][ T3315] hsr_slave_1: left promiscuous mode [ 1801.551151][ T3315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1801.551178][ T3315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1801.601121][ T3315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1801.601152][ T3315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1801.627983][T25456] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 1801.628016][T25456] usb 2-1: config 2 has no interface number 0 [ 1801.628052][T25456] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1801.628074][T25456] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 1801.628089][T25456] usb 2-1: config 2 interface 43 has no altsetting 0 [ 1801.673068][T25456] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1801.673103][T25456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.673118][T25456] usb 2-1: Product: syz [ 1801.673126][T25456] usb 2-1: Manufacturer: syz [ 1801.673135][T25456] usb 2-1: SerialNumber: syz [ 1801.727927][T26607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1801.728073][T26607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1801.830103][ T3315] hsr_slave_0: left promiscuous mode [ 1801.870005][ T3315] hsr_slave_1: left promiscuous mode [ 1801.871072][ T3315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1801.871100][ T3315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1801.915251][ T3315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1801.915283][ T3315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.100074][ T1008] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1802.213807][ T3315] veth1_macvtap: left promiscuous mode [ 1802.213929][ T3315] veth0_macvtap: left promiscuous mode [ 1802.214228][ T3315] veth1_vlan: left promiscuous mode [ 1802.214463][ T3315] veth0_vlan: left promiscuous mode [ 1802.272776][ T1008] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1802.272817][ T1008] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1802.272861][ T1008] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1802.272885][ T1008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.322916][T26615] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1802.336330][ T1008] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1802.424005][ T3315] veth1_macvtap: left promiscuous mode [ 1802.424129][ T3315] veth0_macvtap: left promiscuous mode [ 1802.424451][ T3315] veth1_vlan: left promiscuous mode [ 1802.424662][ T3315] veth0_vlan: left promiscuous mode [ 1804.045219][ T1008] usb 7-1: USB disconnect, device number 20 [ 1805.144076][ T3315] team0 (unregistering): Port device team_slave_1 removed [ 1805.201683][ T5819] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1805.204546][ T3315] team0 (unregistering): Port device team_slave_0 removed [ 1805.361646][ T5819] usb 7-1: Using ep0 maxpacket: 32 [ 1805.365718][ T5819] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1805.365748][ T5819] usb 7-1: config 0 has no interface number 0 [ 1805.365801][ T5819] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1805.370280][ T5819] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1805.370312][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.370334][ T5819] usb 7-1: Product: syz [ 1805.370349][ T5819] usb 7-1: Manufacturer: syz [ 1805.370365][ T5819] usb 7-1: SerialNumber: syz [ 1805.384989][ T5819] usb 7-1: config 0 descriptor?? [ 1806.623969][ T3315] team0 (unregistering): Port device team_slave_1 removed [ 1806.723668][ T3315] team0 (unregistering): Port device team_slave_0 removed [ 1806.806908][T25456] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 1806.852060][T25456] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 1806.999037][T25456] ums-usbat 2-1:2.43: probe with driver ums-usbat failed with error -5 [ 1807.620548][T26022] usb 2-1: USB disconnect, device number 34 [ 1808.053517][ T5819] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1808.053642][ T5819] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1808.053692][ T5819] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1808.053801][ T5819] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1808.093354][ T5819] usb 7-1: USB disconnect, device number 21 [ 1808.323565][T26638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6059'. [ 1808.659769][T26645] overlay: Unknown parameter '/' [ 1808.751580][T26644] bridge_slave_0: default FDB implementation only supports local addresses [ 1810.892763][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1810.892809][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1810.975899][T26637] [U]  [ 1811.586631][ T5819] IPVS: starting estimator thread 0... [ 1811.730117][T26657] IPVS: using max 8 ests per chain, 19200 per kthread [ 1812.102485][T26660] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1812.102511][T26660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1812.165334][T26663] tipc: Enabling of bearer rejected, already enabled [ 1812.545396][T25456] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1812.702172][T25456] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1812.702213][T25456] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1812.702243][T25456] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1812.834102][T25456] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1812.834124][T25456] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1812.834138][T25456] usb 7-1: Product: syz [ 1812.834147][T25456] usb 7-1: Manufacturer: syz [ 1812.834155][T25456] usb 7-1: SerialNumber: syz [ 1812.960296][T25456] usb 7-1: config 0 descriptor?? [ 1813.078082][T25456] usb 7-1: selecting invalid altsetting 0 [ 1813.572951][T26666] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 1813.603646][T26022] usb 7-1: USB disconnect, device number 22 [ 1814.204873][T26685] overlay: Unknown parameter '/' [ 1814.325294][T26685] bridge_slave_0: default FDB implementation only supports local addresses [ 1815.184208][T26071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1815.261378][T26071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1815.293107][T26712] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6075'. [ 1815.295262][T26071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1815.540682][T26071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1815.564749][T26071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1815.650643][T26071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1815.701948][T26071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1815.777671][T26724] overlay: Unknown parameter '/' [ 1815.783455][T26071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1815.894937][T26724] bridge_slave_0: default FDB implementation only supports local addresses [ 1816.009212][T26651] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1816.206924][T26651] usb 7-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 1816.207371][T26651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.207400][T26651] usb 7-1: Product: syz [ 1816.207416][T26651] usb 7-1: Manufacturer: syz [ 1816.207433][T26651] usb 7-1: SerialNumber: syz [ 1816.252516][T26651] usb 7-1: config 0 descriptor?? [ 1816.321030][T26733] program syz.1.6079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1816.397830][T26086] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1816.493544][ T5726] usb 7-1: USB disconnect, device number 23 [ 1816.544708][T26086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1816.576427][T26086] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1816.586722][T26738] sg_read: process 814 (syz.1.6081) changed security contexts after opening file descriptor, this is not allowed. [ 1816.630676][T26086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1816.649018][T26086] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1816.694852][T26086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1816.711257][T26086] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1816.751734][T26086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1816.855083][T26071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.195574][T26094] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1817.234996][T26094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1817.271305][T26094] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1817.310335][T26094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.315442][T26094] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1817.362067][T26094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1817.390869][T26094] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1817.458966][T26094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1817.767674][T26086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.831694][T26086] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.863913][T26094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.879791][T19359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.880024][T19359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.905632][T26060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.905716][T26060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.977608][T26094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.361606][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.361888][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.474994][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.475824][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.650480][T26764] ipvlan2: entered promiscuous mode [ 1818.756487][T19383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1818.807049][T19383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1818.813781][T19383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1818.827042][T19383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1818.843463][T19383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1819.128648][T19840] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1819.291439][T19840] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1819.291476][T19840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.657884][T20614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1819.772467][T20614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1819.791028][T20614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1819.797799][T20614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1819.834020][T20614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1820.949595][T19383] Bluetooth: hci1: command tx timeout [ 1821.096469][T26785] overlay: Unknown parameter '/' [ 1821.728800][T20614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1821.783739][T20614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1821.788630][T20614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1821.804946][T20614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1821.806338][T20614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1822.070480][T19840] cxacru 7-1:1.0: send of cm 0x84 failed (-104) [ 1822.070511][T19840] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -104 [ 1822.070645][T19840] ------------[ cut here ]------------ [ 1822.070657][T19840] URB ffff888034093e00 submitted while active [ 1822.070672][T19840] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: kworker/1:10/19840 [ 1822.070858][T19840] Modules linked in: [ 1822.070880][T19840] CPU: 1 UID: 0 PID: 19840 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1822.070907][T19840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1822.070923][T19840] Workqueue: usb_hub_wq hub_event [ 1822.070951][T19840] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1822.070987][T19840] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 43 56 fb 49 83 3e 00 74 40 e8 5e d0 ec fa 48 8d 3d a7 62 e3 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 43 d0 ec fa eb 05 e8 3c d0 [ 1822.071007][T19840] RSP: 0018:ffffc90004386858 EFLAGS: 00010283 [ 1822.071027][T19840] RAX: ffffffff86d90b52 RBX: ffff888034093e00 RCX: 0000000000100000 [ 1822.071045][T19840] RDX: ffffc9001af1c000 RSI: ffff888034093e00 RDI: ffffffff8fbc6e00 [ 1822.071062][T19840] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 1822.071077][T19840] R10: dffffc0000000000 R11: fffffbfff1f5f447 R12: 0000000000000040 [ 1822.071094][T19840] R13: 0000000000000000 R14: ffff888034093e08 R15: 0000000000000cc0 [ 1822.071110][T19840] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 1822.071129][T19840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1822.071145][T19840] CR2: 00007fb906437180 CR3: 00000000363c4000 CR4: 00000000003526f0 [ 1822.071168][T19840] Call Trace: [ 1822.071177][T19840] [ 1822.071190][T19840] ? __raw_spin_lock_init+0x45/0x100 [ 1822.071231][T19840] ? __init_swait_queue_head+0xa8/0x150 [ 1822.071320][T19840] cxacru_cm+0x21a/0xf10 [ 1822.071414][T19840] ? bus_probe_device+0x12d/0x220 [ 1822.071468][T19840] ? device_add+0x7d7/0xb80 [ 1822.071496][T19840] ? usb_new_device+0x98d/0x1610 [ 1822.071553][T19840] ? process_scheduled_works+0xa8e/0x14e0 [ 1822.071596][T19840] ? __pfx_cxacru_cm+0x10/0x10 [ 1822.071643][T19840] ? __kasan_kmalloc+0x93/0xb0 [ 1822.071679][T19840] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1822.071705][T19840] ? cxacru_poll_status+0x14b/0x1110 [ 1822.071727][T19840] ? cxacru_poll_status+0x14b/0x1110 [ 1822.071762][T19840] cxacru_poll_status+0x178/0x1110 [ 1822.071796][T19840] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1822.071831][T19840] ? __pfx_cxacru_poll_status+0x10/0x10 [ 1822.071875][T19840] ? cxacru_atm_start+0x176/0x360 [ 1822.071907][T19840] cxacru_atm_start+0x185/0x360 [ 1822.071937][T19840] usbatm_atm_init+0x144/0x3a0 [ 1822.071998][T19840] usbatm_usb_probe+0x15e9/0x1dd0 [ 1822.072059][T19840] cxacru_usb_probe+0x17f/0x220 [ 1822.072089][T19840] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 1822.072125][T19840] usb_probe_interface+0x653/0xc60 [ 1822.072167][T19840] ? __pfx_usb_probe_interface+0x10/0x10 [ 1822.072222][T19840] really_probe+0x254/0xae0 [ 1822.072262][T19840] __driver_probe_device+0x1e8/0x360 [ 1822.072300][T19840] driver_probe_device+0x4f/0x240 [ 1822.072339][T19840] __device_attach_driver+0x270/0x410 [ 1822.072389][T19840] bus_for_each_drv+0x25b/0x2f0 [ 1822.072417][T19840] ? __pfx___device_attach_driver+0x10/0x10 [ 1822.072453][T19840] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1822.072479][T19840] ? rt_spin_unlock+0x163/0x200 [ 1822.072513][T19840] __device_attach+0x2c7/0x450 [ 1822.072543][T19840] ? rt_spin_unlock+0x157/0x200 [ 1822.072571][T19840] ? __pfx___device_attach+0x10/0x10 [ 1822.072615][T19840] device_initial_probe+0xa1/0xd0 [ 1822.072652][T19840] bus_probe_device+0x12d/0x220 [ 1822.072683][T19840] device_add+0x7d7/0xb80 [ 1822.072718][T19840] usb_set_configuration+0x1ad8/0x2180 [ 1822.072781][T19840] usb_generic_driver_probe+0x8d/0x150 [ 1822.072874][T19840] usb_probe_device+0x1c3/0x3b0 [ 1822.072909][T19840] ? __pfx_usb_probe_device+0x10/0x10 [ 1822.072936][T19840] really_probe+0x254/0xae0 [ 1822.072976][T19840] __driver_probe_device+0x1e8/0x360 [ 1822.073014][T19840] driver_probe_device+0x4f/0x240 [ 1822.073054][T19840] __device_attach_driver+0x270/0x410 [ 1822.073091][T19840] bus_for_each_drv+0x25b/0x2f0 [ 1822.073118][T19840] ? __pfx___device_attach_driver+0x10/0x10 [ 1822.073153][T19840] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1822.073180][T19840] ? rt_spin_unlock+0x163/0x200 [ 1822.073214][T19840] __device_attach+0x2c7/0x450 [ 1822.073250][T19840] ? __pfx___device_attach+0x10/0x10 [ 1822.073297][T19840] device_initial_probe+0xa1/0xd0 [ 1822.073333][T19840] bus_probe_device+0x12d/0x220 [ 1822.073371][T19840] device_add+0x7d7/0xb80 [ 1822.073405][T19840] usb_new_device+0x98d/0x1610 [ 1822.073440][T19840] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1822.073477][T19840] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1822.073503][T19840] ? __pfx_usb_new_device+0x10/0x10 [ 1822.073551][T19840] hub_event+0x28cf/0x4cf0 [ 1822.073643][T19840] ? __pfx_hub_event+0x10/0x10 [ 1822.073670][T19840] ? process_scheduled_works+0xa20/0x14e0 [ 1822.073707][T19840] ? rcu_is_watching+0x15/0xb0 [ 1822.073805][T19840] ? process_scheduled_works+0xa20/0x14e0 [ 1822.073831][T19840] process_scheduled_works+0xa8e/0x14e0 [ 1822.073890][T19840] ? __pfx_process_scheduled_works+0x10/0x10 [ 1822.073928][T19840] ? assign_work+0x3cf/0x5d0 [ 1822.073964][T19840] worker_thread+0xa47/0xfb0 [ 1822.074026][T19840] kthread+0x388/0x470 [ 1822.074065][T19840] ? __pfx_worker_thread+0x10/0x10 [ 1822.074092][T19840] ? __pfx_kthread+0x10/0x10 [ 1822.074131][T19840] ret_from_fork+0x514/0xb70 [ 1822.074167][T19840] ? __pfx_ret_from_fork+0x10/0x10 [ 1822.074204][T19840] ? __switch_to+0xc89/0x1420 [ 1822.074239][T19840] ? __pfx_kthread+0x10/0x10 [ 1822.074275][T19840] ret_from_fork_asm+0x1a/0x30 [ 1822.074320][T19840] [ 1822.074333][T19840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1822.074353][T19840] CPU: 1 UID: 0 PID: 19840 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1822.074388][T19840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1822.074403][T19840] Workqueue: usb_hub_wq hub_event [ 1822.074429][T19840] Call Trace: [ 1822.074439][T19840] [ 1822.074448][T19840] vpanic+0x56c/0xa60 [ 1822.074485][T19840] ? __pfx__printk+0x10/0x10 [ 1822.074515][T19840] ? __pfx_vpanic+0x10/0x10 [ 1822.074536][T19840] ? is_bpf_text_address+0x292/0x2b0 [ 1822.074612][T19840] ? is_bpf_text_address+0x26/0x2b0 [ 1822.074649][T19840] panic+0xc5/0xd0 [ 1822.074671][T19840] ? __pfx_panic+0x10/0x10 [ 1822.074717][T19840] ? ret_from_fork_asm+0x1a/0x30 [ 1822.074749][T19840] __warn+0x315/0x4c0 [ 1822.074771][T19840] ? usb_submit_urb+0x79/0x18b0 [ 1822.074810][T19840] ? usb_submit_urb+0x79/0x18b0 [ 1822.074846][T19840] __report_bug+0x276/0x570 [ 1822.074921][T19840] ? usb_submit_urb+0x79/0x18b0 [ 1822.074960][T19840] ? __pfx___report_bug+0x10/0x10 [ 1822.075016][T19840] report_bug_entry+0x19a/0x290 [ 1822.075049][T19840] ? usb_submit_urb+0x7c/0x18b0 [ 1822.075082][T19840] ? usb_submit_urb+0x81/0x18b0 [ 1822.075115][T19840] handle_bug+0xce/0x200 [ 1822.075151][T19840] exc_invalid_op+0x1a/0x50 [ 1822.075187][T19840] asm_exc_invalid_op+0x1a/0x20 [ 1822.075210][T19840] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1822.075246][T19840] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 43 56 fb 49 83 3e 00 74 40 e8 5e d0 ec fa 48 8d 3d a7 62 e3 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 43 d0 ec fa eb 05 e8 3c d0 [ 1822.075265][T19840] RSP: 0018:ffffc90004386858 EFLAGS: 00010283 [ 1822.075286][T19840] RAX: ffffffff86d90b52 RBX: ffff888034093e00 RCX: 0000000000100000 [ 1822.075304][T19840] RDX: ffffc9001af1c000 RSI: ffff888034093e00 RDI: ffffffff8fbc6e00 [ 1822.075321][T19840] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 1822.075335][T19840] R10: dffffc0000000000 R11: fffffbfff1f5f447 R12: 0000000000000040 [ 1822.075351][T19840] R13: 0000000000000000 R14: ffff888034093e08 R15: 0000000000000cc0 [ 1822.075391][T19840] ? usb_submit_urb+0x72/0x18b0 [ 1822.075434][T19840] ? usb_submit_urb+0x72/0x18b0 [ 1822.075469][T19840] ? __raw_spin_lock_init+0x45/0x100 [ 1822.075507][T19840] ? __init_swait_queue_head+0xa8/0x150 [ 1822.075547][T19840] cxacru_cm+0x21a/0xf10 [ 1822.075571][T19840] ? bus_probe_device+0x12d/0x220 [ 1822.075595][T19840] ? device_add+0x7d7/0xb80 [ 1822.075622][T19840] ? usb_new_device+0x98d/0x1610 [ 1822.075657][T19840] ? process_scheduled_works+0xa8e/0x14e0 [ 1822.075696][T19840] ? __pfx_cxacru_cm+0x10/0x10 [ 1822.075740][T19840] ? __kasan_kmalloc+0x93/0xb0 [ 1822.075768][T19840] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1822.075795][T19840] ? cxacru_poll_status+0x14b/0x1110 [ 1822.075818][T19840] ? cxacru_poll_status+0x14b/0x1110 [ 1822.075852][T19840] cxacru_poll_status+0x178/0x1110 [ 1822.075884][T19840] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1822.075917][T19840] ? __pfx_cxacru_poll_status+0x10/0x10 [ 1822.075962][T19840] ? cxacru_atm_start+0x176/0x360 [ 1822.076013][T19840] cxacru_atm_start+0x185/0x360 [ 1822.076043][T19840] usbatm_atm_init+0x144/0x3a0 [ 1822.076083][T19840] usbatm_usb_probe+0x15e9/0x1dd0 [ 1822.076144][T19840] cxacru_usb_probe+0x17f/0x220 [ 1822.076174][T19840] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 1822.076213][T19840] usb_probe_interface+0x653/0xc60 [ 1822.076256][T19840] ? __pfx_usb_probe_interface+0x10/0x10 [ 1822.076283][T19840] really_probe+0x254/0xae0 [ 1822.076322][T19840] __driver_probe_device+0x1e8/0x360 [ 1822.076370][T19840] driver_probe_device+0x4f/0x240 [ 1822.076407][T19840] __device_attach_driver+0x270/0x410 [ 1822.076447][T19840] bus_for_each_drv+0x25b/0x2f0 [ 1822.076476][T19840] ? __pfx___device_attach_driver+0x10/0x10 [ 1822.076511][T19840] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1822.076538][T19840] ? rt_spin_unlock+0x163/0x200 [ 1822.076572][T19840] __device_attach+0x2c7/0x450 [ 1822.076602][T19840] ? rt_spin_unlock+0x157/0x200 [ 1822.076629][T19840] ? __pfx___device_attach+0x10/0x10 [ 1822.076671][T19840] device_initial_probe+0xa1/0xd0 [ 1822.076706][T19840] bus_probe_device+0x12d/0x220 [ 1822.076737][T19840] device_add+0x7d7/0xb80 [ 1822.076771][T19840] usb_set_configuration+0x1ad8/0x2180 [ 1822.076831][T19840] usb_generic_driver_probe+0x8d/0x150 [ 1822.076861][T19840] usb_probe_device+0x1c3/0x3b0 [ 1822.076893][T19840] ? __pfx_usb_probe_device+0x10/0x10 [ 1822.076919][T19840] really_probe+0x254/0xae0 [ 1822.076959][T19840] __driver_probe_device+0x1e8/0x360 [ 1822.076996][T19840] driver_probe_device+0x4f/0x240 [ 1822.077034][T19840] __device_attach_driver+0x270/0x410 [ 1822.077074][T19840] bus_for_each_drv+0x25b/0x2f0 [ 1822.077101][T19840] ? __pfx___device_attach_driver+0x10/0x10 [ 1822.077136][T19840] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1822.077162][T19840] ? rt_spin_unlock+0x163/0x200 [ 1822.077197][T19840] __device_attach+0x2c7/0x450 [ 1822.077232][T19840] ? __pfx___device_attach+0x10/0x10 [ 1822.077279][T19840] device_initial_probe+0xa1/0xd0 [ 1822.077316][T19840] bus_probe_device+0x12d/0x220 [ 1822.077346][T19840] device_add+0x7d7/0xb80 [ 1822.077389][T19840] usb_new_device+0x98d/0x1610 [ 1822.077424][T19840] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1822.077463][T19840] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1822.077489][T19840] ? __pfx_usb_new_device+0x10/0x10 [ 1822.077539][T19840] hub_event+0x28cf/0x4cf0 [ 1822.077626][T19840] ? __pfx_hub_event+0x10/0x10 [ 1822.077653][T19840] ? process_scheduled_works+0xa20/0x14e0 [ 1822.077690][T19840] ? rcu_is_watching+0x15/0xb0 [ 1822.077723][T19840] ? process_scheduled_works+0xa20/0x14e0 [ 1822.077752][T19840] process_scheduled_works+0xa8e/0x14e0 [ 1822.077815][T19840] ? __pfx_process_scheduled_works+0x10/0x10 [ 1822.077854][T19840] ? assign_work+0x3cf/0x5d0 [ 1822.077887][T19840] worker_thread+0xa47/0xfb0 [ 1822.077954][T19840] kthread+0x388/0x470 [ 1822.077989][T19840] ? __pfx_worker_thread+0x10/0x10 [ 1822.078017][T19840] ? __pfx_kthread+0x10/0x10 [ 1822.078054][T19840] ret_from_fork+0x514/0xb70 [ 1822.078094][T19840] ? __pfx_ret_from_fork+0x10/0x10 [ 1822.078131][T19840] ? __switch_to+0xc89/0x1420 [ 1822.078166][T19840] ? __pfx_kthread+0x10/0x10 [ 1822.078203][T19840] ret_from_fork_asm+0x1a/0x30 [ 1822.078249][T19840] [ 1822.078578][T19840] Kernel Offset: disabled