last executing test programs: 22m59.52664359s ago: executing program 4 (id=5): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) poll(0x0, 0x0, 0xfffff8f2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0) mount$nfs(&(0x7f0000000200)='[27\xad\x9a\xae]:1:\x00\x00\x00\x00ort\x00\xf6Osu\r\x11\x93\xbe', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 22m58.075798558s ago: executing program 4 (id=11): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x7ac, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x780, 0x2, [@TCA_BPF_ACT={0x77c, 0x1, [@m_bpf={0x13c, 0x11, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0xb0, 0x7, 0x1ff}, {0x6, 0x4, 0x0, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xc4, 0x8, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}]}]}, {0x7d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x434, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x4, 0x6, 0x1000, 0x3, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x4, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1a852a3ac0122d5100000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x64, 0x0, 0x1, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x37}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x20040) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000e80)={r5, 0x80000}, &(0x7f0000000ec0)=0x8) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 22m55.9902547s ago: executing program 4 (id=14): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, 0x0, 0x0) 22m47.140668197s ago: executing program 4 (id=24): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x57, 0xec}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000340)=""/102400, 0x19000) r7 = semget$private(0x0, 0x20000000102, 0x0) semop(r7, 0x0, 0x0) semctl$SETALL(r7, 0x0, 0x11, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002bbd7000fbdbdf253300000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x0, 0xc0, 0x2, 0x0, 0x7, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r9 = syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xe2, 0x24, 0x2c, 0x8, 0x41e, 0x401d, 0x295c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0xab, 0x3, 0x0, 0x96, 0xe2, 0x4d}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, &(0x7f0000019340)=ANY=[]}, {0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000375c386c495d836d508145a2829d3087f4a2054148502851d7bfb3d1bfe19a7766bb9a68ac3576b58c4dc5523002c01e0e57f1d955356f5fb8a94dd325af124be1abd40518b4bdb9117f486"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x410}}, {0x9, &(0x7f00000002c0)=@string={0x9, 0x3, "66cd13f101910a"}}, {0x1c, &(0x7f0000000340)=@string={0x1c, 0x3, "f345409cedf129625f93c36cefb8fcf8556f2f6f6619792cbbba"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x411}}, {0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="4204788845aa96ce1a87321242c4a210c1a4fe774c327295ba5c481a2454afe0300d36b746c486120bb7b34ce510fbc91c06"]}]}) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 22m44.612531812s ago: executing program 4 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setrlimit(0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)={'sit0\x00', 0x0}) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) dup(r4) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000575000/0x400000)=nil) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000480)={0x8000001e}) 22m42.655199714s ago: executing program 4 (id=33): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x0, 0xf0e4) sendto$inet6(r2, &(0x7f0000000500)="88320aa137914792b4bff0d1e13201bf0f2c384dc9045613aaf87c41f53305a9fe606e54f4cfa0dd81f0331dbce8e25c7ef5aacc045f2c2a3921551035f08d0e0add50542758b2f6295b169f964915c54d049e97e9c6cb1e7fd44ff376cc9a68e781b5a5ef62807c5690627cb280", 0x6e, 0x20000000, &(0x7f0000000580)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbf6, {0xa, 0x10, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x3) syz_usb_connect$cdc_ncm(0x5, 0x77, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x40, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "b1ec"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x5, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0xf9, 0x9a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x28, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x80, 0x6}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x2, 0x4, 0x40, 0xff, 0x28}, 0x2b, &(0x7f0000000740)={0x5, 0xf, 0x2b, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7fffff7, 0xf000, 0x9, [0xff3fcf, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x7, 0x3ff, 0x65}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x7, 0xdbb}]}, 0x1, [{0xff, &(0x7f0000000780)=@string={0xff, 0x3, "4fb30282f333d56ca9aef20e0e144e1c477ace0db6037e527a0335b9a3383aa25229c993644639baf042d83e62dcfcb7970a3072de22497f522445ed01f32b17a7f67c5c8e51f50766ccc15a429ff7db50f010b90d559534f54966165654cd4a03e73c381b5a910a5055d02c7e1afa2766e2a452d16db12391741e8f809c9724be2291d478f2a73ab1e06716a4de5531ff7f97cc26a5ddc47884689f2a4a7da06e427b0d2fa6483aec3bb0871bf2caee4c402dd95a546c738572172ad6d54a006ad2069c25eedaf35c53c4951dda06da14fa45d327ec99fb94592573573faefeb0c70f1bd5519a978e28bf68e28408ce9d932c026fb76dd6459cb8a5d8"}}]}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4}, 0x10001) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x7, 0x17, {0x17, 0x22, "e7d65acaca7590352bb0fb62f4d4e05a53610e22a8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x16, 0xff, "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"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x81, 0x3, "93631f"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "e85ba7"}, &(0x7f0000000380)={0x20, 0x83, 0x1, "97"}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000008029f5431e25067340e3dc469208124b7db3cc5d1a388883c514b9a9dee49648ff05bb5b6475a179eb9c000000000000007b07bd2ad6f8006a5b5a9773234b4027a749e8ba8cc85f3455c94c4aa41b3718d0c0d35c544e527700f83788d8c38dea5aae1aee12265cd723c872e8b7fc16e6eb5bc87f61575f989a2d3e6a10924267a16b5ff3770e8fec7fbbb6471d85b18269524930b9f502ade6c98aac3efe76ac3904"], &(0x7f0000000400)={0x20, 0x85, 0x3, "79b5b4"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000009", @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 22m27.179717781s ago: executing program 32 (id=33): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x0, 0xf0e4) sendto$inet6(r2, &(0x7f0000000500)="88320aa137914792b4bff0d1e13201bf0f2c384dc9045613aaf87c41f53305a9fe606e54f4cfa0dd81f0331dbce8e25c7ef5aacc045f2c2a3921551035f08d0e0add50542758b2f6295b169f964915c54d049e97e9c6cb1e7fd44ff376cc9a68e781b5a5ef62807c5690627cb280", 0x6e, 0x20000000, &(0x7f0000000580)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbf6, {0xa, 0x10, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x3) syz_usb_connect$cdc_ncm(0x5, 0x77, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x40, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "b1ec"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x5, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0xf9, 0x9a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x28, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x80, 0x6}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x2, 0x4, 0x40, 0xff, 0x28}, 0x2b, &(0x7f0000000740)={0x5, 0xf, 0x2b, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7fffff7, 0xf000, 0x9, [0xff3fcf, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x7, 0x3ff, 0x65}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x7, 0xdbb}]}, 0x1, [{0xff, &(0x7f0000000780)=@string={0xff, 0x3, "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"}}]}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4}, 0x10001) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x7, 0x17, {0x17, 0x22, "e7d65acaca7590352bb0fb62f4d4e05a53610e22a8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x16, 0xff, "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"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x81, 0x3, "93631f"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "e85ba7"}, &(0x7f0000000380)={0x20, 0x83, 0x1, "97"}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000008029f5431e25067340e3dc469208124b7db3cc5d1a388883c514b9a9dee49648ff05bb5b6475a179eb9c000000000000007b07bd2ad6f8006a5b5a9773234b4027a749e8ba8cc85f3455c94c4aa41b3718d0c0d35c544e527700f83788d8c38dea5aae1aee12265cd723c872e8b7fc16e6eb5bc87f61575f989a2d3e6a10924267a16b5ff3770e8fec7fbbb6471d85b18269524930b9f502ade6c98aac3efe76ac3904"], &(0x7f0000000400)={0x20, 0x85, 0x3, "79b5b4"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000009", @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 21m31.302117991s ago: executing program 1 (id=131): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x0, 0xf0e4) sendto$inet6(r2, &(0x7f0000000500)="88320aa137914792b4bff0d1e13201bf0f2c384dc9045613aaf87c41f53305a9fe606e54f4cfa0dd81f0331dbce8e25c7ef5aacc045f2c2a3921551035f08d0e0add50542758b2f6295b169f964915c54d049e97e9c6cb1e7fd44ff376cc9a68e781b5a5ef62807c5690627cb28046d2c8848069c180dce078b9", 0x7a, 0x20000000, &(0x7f0000000580)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbf6, {0xa, 0x10, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x3) syz_usb_connect$cdc_ncm(0x5, 0x77, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x40, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "b1ec"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x5, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0xf9, 0x9a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x28, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x80, 0x6}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x2, 0x4, 0x40, 0xff, 0x28}, 0x2b, &(0x7f0000000740)={0x5, 0xf, 0x2b, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7fffff7, 0xf000, 0x9, [0xff3fcf, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x7, 0x3ff, 0x65}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x7, 0xdbb}]}, 0x1, [{0xff, &(0x7f0000000780)=@string={0xff, 0x3, "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"}}]}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4}, 0x10001) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x7, 0x17, {0x17, 0x22, "e7d65acaca7590352bb0fb62f4d4e05a53610e22a8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x16, 0xff, "1ec5fa8bd9ecd2278cd2ebbaf894f289f8e9aa965d74469d13fcdb17e10526c7561a5e74b3cd0297c834e4f3ec0cd9bee7d0553e7a7ba5d2c81bb29ceabbb139736f2b66d28a904fee16e8398f7178104854e1c47a2631b717b034bfe664ea7dfa3c43286845ff47d5074f9bf62fe274b530b3d88f6aa7337b93dc5856c908cb6ab2c8f5683918cd0aba00c8deb5f14cfb67b65a33a729ec92327c05bc99ce523660508dbf6ea8f5829c78c0965c657b7b50e169d84ffc64a02b503423cdeefe3dc3408d95f1735c2f2037d205c5971bd51a0682ef72b45934b0574cf42cf28f89415fe3fc31c28f5ad2134ac213e6305b643e23b7b2b0240f246487ec7d12"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x81, 0x3, "93631f"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "e85ba7"}, &(0x7f0000000380)={0x20, 0x83, 0x1, "97"}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000008029f5431e25067340e3dc469208124b7db3cc5d1a388883c514b9a9dee49648ff05bb5b6475a179eb9c000000000000007b07bd2ad6f8006a5b5a9773234b4027a749e8ba8cc85f3455c94c4aa41b3718d0c0d35c544e527700f83788d8c38dea5aae1aee12265cd723c872e8b7fc16e6eb5bc87f61575f989a2d3e6a10924267a16b5ff3770e8fec7fbbb6471d85b18269524930b9f502ade6c98aac3efe76ac3904"], &(0x7f0000000400)={0x20, 0x85, 0x3, "79b5b4"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000009", @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 21m26.964110842s ago: executing program 1 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000002d00010000000000ffdbdf25037c000008000180040004c00800028004"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 21m26.422398441s ago: executing program 1 (id=144): setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x6, 0xc9, 0x8}}}, 0x7) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x4c78a85f, 0x0, &(0x7f0000000000)=[r1, r1, r1, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0, r1]}, 0xa) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r1, 0x4004743c, 0x0) 21m24.080913574s ago: executing program 1 (id=148): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) unshare(0x22020600) (async) unshare(0x22020600) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) (async) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x206c40, 0x4a545fb659d23ed9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029fcdbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="00210400022400001400030062617461647630000000000000000000040014001c0016801800018014000b"], 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r3], 0x48}}, 0x2404c054) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf42e11294573d087800fca088c8fcd8e6bc8e4bcfa79f088fc24c2039fa72ef28da1a1f7ce78be7d04d3fc756f729441a41e18131a5caf488a800907d02d3545334cde783bd18d1d5e03fa43ebd67137956b3021f7ea0bcbeb8fbce825791f1eb7a3eefb463c1c0505281b73f484f6a25216cd39db927771f3b2f41bf41fd0b249f1f3a4d654dd9727b1623452fb3d2d87b3b394309cd686292e8a5785e527b95ccf5607bf9c5f77e793df12d4923445b306651748055e40584ec682320", @ANYRES32=r4, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c65723000000000000008000500040000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf42e11294573d087800fca088c8fcd8e6bc8e4bcfa79f088fc24c2039fa72ef28da1a1f7ce78be7d04d3fc756f729441a41e18131a5caf488a800907d02d3545334cde783bd18d1d5e03fa43ebd67137956b3021f7ea0bcbeb8fbce825791f1eb7a3eefb463c1c0505281b73f484f6a25216cd39db927771f3b2f41bf41fd0b249f1f3a4d654dd9727b1623452fb3d2d87b3b394309cd686292e8a5785e527b95ccf5607bf9c5f77e793df12d4923445b306651748055e40584ec682320", @ANYRES32=r4, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c65723000000000000008000500040000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 21m22.988491169s ago: executing program 1 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) close(0x3) 21m20.127015705s ago: executing program 1 (id=158): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000300), 0x1}) set_mempolicy(0x8002, &(0x7f0000000040)=0x6, 0x800000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) 21m17.613005084s ago: executing program 33 (id=158): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000300), 0x1}) set_mempolicy(0x8002, &(0x7f0000000040)=0x6, 0x800000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) 19m43.398622188s ago: executing program 2 (id=313): r0 = mq_open(&(0x7f0000000880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#u\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v\xa24\x88\xc3\xe1kOxr\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x1e8, 0x0) mq_notify(r0, &(0x7f0000001440)={0x0, 0x2f, 0x1, @thr={&(0x7f00000000c0)="ca09e1569188046eb386df57e3db787d40664ece9f54b30225e81f74928c1599866b25bd17f9b46ffca29b47a19924568a81252f6ff0cf5627fc1e54501c1bc02757046673a6ad36dbb325099af1086f84559725143b0777c5e3e43376bf21e52175740193f377d3c2bf18efe9820378512f43", &(0x7f0000001480)="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"}}) syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa090400"], 0x0) mq_notify(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 19m41.532048811s ago: executing program 2 (id=319): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x22020600) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000400) 19m38.261479024s ago: executing program 2 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc) 19m38.132468455s ago: executing program 2 (id=327): r0 = mq_open(&(0x7f0000000880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#u\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v\xa24\x88\xc3\xe1kOxr\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x1e8, 0x0) mq_notify(r0, &(0x7f0000001440)={0x0, 0x2f, 0x1, @thr={&(0x7f00000000c0)="ca09e1569188046eb386df57e3db787d40664ece9f54b30225e81f74928c1599866b25bd17f9b46ffca29b47a19924568a81252f6ff0cf5627fc1e54501c1bc02757046673a6ad36dbb325099af1086f84559725143b0777c5e3e43376bf21e52175740193f377d3c2bf18efe9820378512f43", &(0x7f0000001480)="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"}}) syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa090400"], 0x0) mq_notify(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 19m36.676108291s ago: executing program 2 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setrlimit(0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaca82, 0x0) r4 = userfaultfd(0x801) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000480)={0x8000001e}) 19m34.866303605s ago: executing program 2 (id=331): socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0x8, &(0x7f0000000140)={0xb}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) (async) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) (rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f000001ea40)=""/102383, 0xfffffd56) (async, rerun: 32) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) (rerun: 32) syz_open_procfs$userns(0x0, &(0x7f0000000240)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e01800"], 0x38}}], 0x1, 0x4850) (rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x4) sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="5142f799401b2697442aa13a372889c98528cc36f63af4d303d450c683895364ff23dfd245b2fa2f3dc15dc9b74afecdcb600f1ed0e578e267a95e2c1669f1e21711b5067941e1760ac563aa44feef91f85cdfe47da2da93e81bc9a077c33ee4152e0102af95c04f9a32035cc47092161f514af8c27bcc2cec1c5da4613c070b3a49a12c9fc6bc00d20026ec96fc035825c489e6b30eb0f6462ce1f4404bad4dd33d13dcc9f230d51e21f7f183da7fbd451025386faa2427321a4cde7bfbc077ea5110390bd2d26c44780408a327c6eb5a0c1f0df79cc1546ecbb212a51a6ee1e1589fcf3111533dc2fa492fb959a3aeb1776b85d047919d4439dd93a6432d53dba5b4961afc9878fd270f7804cc5f988682e53d65630d3986f43072a64ebf96c0672f9f10849f33308c820a5277455e73b708e6ef1833d9d8c79e6730603dcefa943d29b868519e61afaa957ee1a99a30f96473977a823d24d0c843a2ea0859d38d9cc91c74d6b4fb56a396905d2e6a2f67d5fbc9888e025e8f36dfa1ffa0d3951c9a5d9f17755e09969823eff40a12076dbcd17c65f920efb2c0e1c0f9aee95a65e1c0c2bf7b62eb2737627d8c24445a1051283814e23e4a5a073f56fb9a780e792c1774704a7a0f7fcdb4c20a61bd63f3d7920bf5bb980baed7c6511d18d154ca5ed141c9e01a81b58234b7d6da28170fbf0e4cbd6754043374fc4ac4f12fd0fd28bc63320fd0c6ce05cca297aa58ddcca794b2bf1e8c9fdacd12803fba572fb8e66c4d96d3a1cd27145fe75ba0d93cb975dff6b99f7009bf3079be3ba8f479b130ae4fb70375a1079fe105317ed52d7883b292171c8387aa7c15612a84fbdc2893a48fbd12c768c50a006b2bb48e82a0c392031147da884c1d2720e4c22d8e0f3a1baec4b8ccc3bb58ed29a0cd6b34a53a6a4217f9dc0767c3ae8de0d72224bc7436125edb03e5535d04e0af8aa64639495e629d52637eb5c8af26bb7039735c1301bdf9637c704eb7cbafe912b9c95972ee92419c36976d242ef0ca169b0605207659c8f68e99319b6dc255753e96deb012dff2bf274663a9c37f6523ad662aeb89007c928576fc25f7d7ca82373ff6369767885942ea13ac81c7620f95aaee06b366842c6305a4e2713a472a15634ec5de080fea416c7f3ab979563d8232db89a7f149f7626b53efead362e95a6ce53700f5e05547ae7f9a452433855a7be10f9eaf2b8f19aa972381e1c0c20b7dc265f8089df799bb9837b14f2ac174f5b140d417a34477660b56709e664336e596f52a33e19e91936223894e666ec70071cef3d394b65b8cb2fd428f367b071c88300bb0959b00d4ae97ffeee9095e34e20366d339524dba224c580d5525a0a14957dc8a4cfbc10ca62d58ca50bda7d663b61205089fa5cd2f911323fbdc1d09c3d79cdc52e8e64159135b67703ed0a3789e73d15a54ab4e7ec6264fa3a97ebeb752239de3badddf7d3b7cf3714291b16b0daa07b10368c2b7c86f8c29207388828112a9211c3712dc6b338e52187ee0c12007a7e9296cf6efb3f18f547f5491f2ead564599efc95df503aaec591ba5894a19a3305b11c15b44b3dddcf8c63262376c15dceb82ff378aaa3c09c18f2c3632eb38edc3ec4c1cff81f0def04fe2e6b91368eb7134e37978515ab475abce8154544e236574099334428bacd3c9b408324610aef183d0609c75e6c14315730af2dc0c9c35c04c5deaf022aa2778bfef77507771a13da99d7496d3cd083b4afdb6406a14218bf7d659456f897bcf24d11cef92affe5a70c90de1ef4fa1e00da7df9e9fab856ce399e5df30bf2178409edd7011024bdd260172eede1bfdc1ddad1b90f1d01602a2c9649eb65052a0bea235aa0eca4e79ad5e6e5b939a2c42779a8f8dada9fafb569ae492d890490ae5c91d4fff9671070cfa0b23257b302e57f7c7beb51f7de15f8bbd7270431fcd0b08e2c09238c479b2fc13513a0ed6536522cd7dc458a32bdd4d5e9e4eaeab17b41884137c2791eaa44fb8972764b7236dab712828086197ea12781597795a1c6a11f163b25377d05bf3479685c4027b87d4f21d48c9908c2d4298aa81f2f1faf1a95a8365dc15c179dfd90ff2dec176c3d3ecc8daabb927ae6f048e7d37f06684aa40698e83fd4ac22a0eee3bd675fbc631b04a18ee05b71590ad26e546f023a880b89aa7f96b82a7dd09d4bdc14504b670d54aa3b627178f4ac703c4207607d6632ae435c18c36cd159ef133c23ad016fa13660a88b4ab5ca66f908b415bfceea5045d52cc285f00e7d0ab19ec7d43427fb04a55a4d125fef96c601d60032c09dd1a019ce0cd4be923437cb9846c2ad3cbd3834ba26f50a53f831c13dc160edb8d33e80fd62c245993f0977360269913d6190e920ebe5149af8ed18c6f59f0328c58c77db1f82af5df261301e094ff95b43b94940d65392b90b715738e8a34edbf3117fa244c9fb3b7ecc4a443721e313494837129b861de7951d9dee32eb45d7ce755a44bd09ca116c05f42e2e3cee7e90e9e8ce3f7f6ddf66c9a9b0f9029f3f887d0e90a61d617a20683f8286c732eab6cb536ddb9a7e092cd3c8ee54a04f43dc14cbc54e3d0b503d1aac0cc5bb0f59ca384f8674d840d266b0e8abf915fa123d9a60608d335745a884ee03d3159a4be4393f8d8391bf8f6b7115a3b54cde22fefc15c9182072771d83a7c1b21d0d9256e1bd1a2e360055db209cd1c352acd1975d25d8a2c1caf038b16a6302e8d996b1ad1820ad182cf3e36d927cc7b1c62211618950315cb4b54c2b44ccc9db1f7fa4b0de6eba347b6a351965611bdaff88874cddd688728354ef1f12449d1ef57ab2d05709d5019ed12463b735f6b3626c54800bb03046cb18700893e86169c6fdea51f6e05e3babf193c57c89d0f4de0d95cb0f1f4c453fa159cf25ead8b180ef615c09a89869f28b05c9886ea235e1c893ec2814c9f3387b992b01b505c0dd8d0f69be8757c924fb9825ed2c122e06b45f63208f5a20fae1c1496d4f0bb5781617de2940bbff8d611816d95e050e9ea5d58eb9d645ad0e902cb74e2af400b3eb76a837783b90151fe759c6af2130833f409a3dd6dd9b085a45ef5dc07ec5c14d07f806b122578b31ea41668023d0d32adb86dadba69e27a9fd940b5a50fcd8c127b7bbd762914b4b7b4e0144fe8978f020bd7eea4379c7b0a100b2ac23c816bdc1bb0704cb92c57b86b05cd3a58bd7c8b932cdb9cb1a9bdeda9c99ba9e88f0c3fc3ea1f79545e0c30588cf898864928b89612d15630e999d52c3e386d8ca4f22c7de0ce673dfff4a13b0080e8d268d7400e0ff4e7294a47157500ebf8f85482a10caffc49be7dace99371a34a04b98ac036aae7b9121db90018c541b6901ac969d4831600ec80061ab6afa6752abf50193256fd05e1d79aec958995f2537f8557028fc9471c3b63b64f5a6a2ca43448fff426d86b646e0523a94668b6a318a4e789020b2af1e6d6e0b2d9b56d579d7ffe8685894e4799d34b6d9443995bd1cb7631b145d6c652d931a1338c1a62f1fd6be3c80d4f8d50869cf2310b4620b1ccfd2ded7ad2144cfa3d03ed176ffd09aae1be693a9c59583fe2cf0145ebb7e218876d2527bd2f70e7e4b6d18616c65ab0225858ed2534afa2dee4a559864a7e4363b68d0e74ade78ceb7b825fe60d752d76ea4b49459f634ee6a25f5a62c82a13f4457e9d4501065c9d40f850572f2f19daa1c7a2f0a66ff4ad62c1f7b9d664882fdf94a0cb73d136e557e152410480f4162ad677ea54d6a5a31d055d319d29a565d9dce083950a87f7752c63b9506ff8b41993cc687a93f506765aaac62a8d153f9becac54fda42797827c078b971e5eab1991f7bd3a9ff2eb8787ca60b4e90efde12a8149371dbb54a903749473462f1461df25a0a7bf65a4a683d2cc2591a967ff5b5bc640df5efc395d231e4e64b5d6910b4b5482a9f14932dff503bc01ea2a62197b60050c76d3f9371372f8fa8fd0f50aef81af9a10b1357c7695e4427d2b9e05df1649f95767bf08f5322dd9804f3b9531461128e1acf696549c77794139276a87f271e71ba9ec7f89a31044b5a721211b5efebee3f656ec9248d63b6eddb4c130f75eb2a05d3a5b5a7e02ff1d2e42a0fae1b51da66323904eeef606ad6206e93da5da4987d0a3adee2f9a6469b365ceb409cdec100cf861156c0dd311056415dd8ad6178d98781994af7fb54d4bda7395ce72b6b4405cc432a7a66088232e3f92e43d40baa99b3e0ce51014f24154de207310d1fa40de3ef5c804089d31943b1641dc1b65a4ff10a087006e81ad8ec7b6b0245602f8329213d626f35c4ed89c264d3b698aa412e83d4ca13bf070affb57b309d857d4783cc06f44b460c1923ad1b5e478cbb1e4b186d997d1be50f3ab555c66c0865998ba4f15f3eac6be3ca67755830b55f59a1df641a6225b0f9261f6e15aa1c9eabb325b419538dc12dc58de3adfd6a39ac7ecf358a3865db736a1e675a7018194f283e1a4fc4652d3bb412598c9320911f583864c64137d97bd503ecd1919203a2ffe00b659be68af320313b5101a7950f548b8449b27bdc2cd071683eadab4e06a6fd37b13f7e52ce08b4f199fa9ac0c21bf1537289a86a309a619e7cad2e3d7bee87faa1ec57acc1e3551b57d98c97f6d41f856380cccb6c5609390d5d121dbff99d6db04259e1d8a3b2cb4545bed85744a2dbaf4759e75d0d04960dd2e45123bdd58f235b029e19b31348ed0b53cf0d7ecd143b573c8d290b7eb89654a2d7245c78dac6b3139bdac4f61962bc5ccbfa6cbd89d8ab9c167b9880b09ff844498d58f21a253804ccd190dd20bfdd185c311cea5543c2519c11dbbea8dd4e097d9174e82e7ab10a1ebcd15b8306f0e69409de7c60f7e8c958e68ec9746c1baeeffa84a100db5b55ca4f24552a0b434c31ca9b9a1110b0f5589c05d620263f410d04d87918e7ffa0562840e0e65469b37ff4bb4ede66a312637dddb6cf427360ccfac709e0b4dd60c8d9c475bf42152b39775ad080a0e7878e09ad24f1f919d95b1d082ae0629490220cca2eb79a8636999f594494690517178912ff99f6b08ac3a59a6f1c41b7ca8bcb563b486a197d7e05048c2690727f17ebfbba44560cb061b3fdda4e55c42a55d0db6f9b7a4caef1c82f64e9e1afceec87562ff95fc3ecdff51baa20f80d6f8a9f3efc536638a28677102dbc2de53f0fcb870c0dbd445b5fe0fe23dfa08acf6ac0bff61def6a0a28c9aae181ab96961958712622ef0e557f1fadd0dc9fa353ac234e0321a4227b0890dae9bb62010b4ff16f926ad528e1f7e4f050b3659d71231e2ae9831e9179ee8bd40e03514cdb13c047a73b566d8202a733d69ea2cbd04d188f37436362058025322cd022ebb7db9edcb14651d518ce395766361c87727baf3be875f2a0afe8b0a98c7392de70bdf27d336d6546d53d409d90f5d4e758e5203d03989390714ddf96eee2a5e922fa262cf5b7f69856f86d8cfe2d13e81f41fa4117121de2a4a735d3823dce218f97acda147df98c6a6eeb669c152b3b91a78f3921743e1d9c432497f6596851f5cd97a4d50a264b89c5444da050172f8359c3ded0f919111369ddad135e37dc17f9763e788d7192422e844185a835bf3170de4e8b89de4cda4fecdc36a8873bb9cf44a3fea319e96b086182f40ff466cddcdfce8f5147ed841313cf459475b63a83fedcd2c6d2270e0a62740289b45b6b97e41ccaae2b3c018be12393cd866c24b7dbe103a45f11520005c632072b77b5", 0x1000}, {&(0x7f0000002340)="06bc899d07e269d36876e612df0f80855b0fb434adb3c12ac17473323498fed36387d618c5c9f88f7bf699e64ad5c3d70d460cf45d6b14e977a2bf06b2fbbf9bec38cc21d1ce523d0d9f159b7729ee1f33102bf73ec1af60b3e5d25f439b62da91af0430260ac82ffa061a42521ab98fd31725c9e141de93b4381032ddc023d2ed3f23a3c98fc9d07430c397476f557d222606c972c766b8fc68226232e8d4e6daf3da20830b5de82a665803abb9c60d47ea4dcb2bcf6b96fc2eb6f7c5590d40f764dbbc6fe3198e3f22f434769864ecdc4d96a34d641237aee51e4420fb43f5f9c230dc4fd7b444f5ad1f4a75c4090b3ebabc", 0xf3}], 0x3}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002480)="70d9184805df02a8c6da1ae3daee82950936c7a775935ddbe46b94ecd3ba86cd135835fe3a69097aa02e223987d02d12c14e46", 0x33}], 0x1, &(0x7f0000002500)=[@ip_tos_int={{0x14}}], 0x18}}], 0x3, 0xf00) (async, rerun: 64) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 19m19.737453985s ago: executing program 34 (id=331): socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0x8, &(0x7f0000000140)={0xb}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) (async) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) (rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f000001ea40)=""/102383, 0xfffffd56) (async, rerun: 32) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) (rerun: 32) syz_open_procfs$userns(0x0, &(0x7f0000000240)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e01800"], 0x38}}], 0x1, 0x4850) (rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x4) sendmmsg$inet(r4, &(0x7f0000002540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="06bc899d07e269d36876e612df0f80855b0fb434adb3c12ac17473323498fed36387d618c5c9f88f7bf699e64ad5c3d70d460cf45d6b14e977a2bf06b2fbbf9bec38cc21d1ce523d0d9f159b7729ee1f33102bf73ec1af60b3e5d25f439b62da91af0430260ac82ffa061a42521ab98fd31725c9e141de93b4381032ddc023d2ed3f23a3c98fc9d07430c397476f557d222606c972c766b8fc68226232e8d4e6daf3da20830b5de82a665803abb9c60d47ea4dcb2bcf6b96fc2eb6f7c5590d40f764dbbc6fe3198e3f22f434769864ecdc4d96a34d641237aee51e4420fb43f5f9c230dc4fd7b444f5ad1f4a75c4090b3ebabc", 0xf3}], 0x3}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002480)="70d9184805df02a8c6da1ae3daee82950936c7a775935ddbe46b94ecd3ba86cd135835fe3a69097aa02e223987d02d12c14e46", 0x33}], 0x1, &(0x7f0000002500)=[@ip_tos_int={{0x14}}], 0x18}}], 0x3, 0xf00) (async, rerun: 64) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 8m46.696815859s ago: executing program 0 (id=1962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000340)='1\x00', 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) unshare(0x40200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x40400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x7) 8m45.569603024s ago: executing program 0 (id=1964): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) tee(r1, r0, 0x5, 0x1) 8m41.196635801s ago: executing program 0 (id=1975): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x34, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x64, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x4, 0x9}, 0x10}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x20040) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000e80)={r5, 0x80000}, &(0x7f0000000ec0)=0x8) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8m40.257976563s ago: executing program 0 (id=1976): socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000050000"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES16=r0], 0x10) 8m38.736325885s ago: executing program 0 (id=1979): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x1, 0x0) write(r0, &(0x7f0000000940)='1', 0x1) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) lstat(&(0x7f0000000040)='./sys\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000180)='\x00', 0x6000, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) ioctl(r1, 0x8, &(0x7f0000000300)="67f51435c138aa178697ca186aa264") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$bpf(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r7, @ANYBLOB="aee0"]) statx(r5, &(0x7f0000000700)='./file0\x00', 0x2000, 0x105, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x3, 0x0, 0x0, r7, r8, 0x62, 0x2}, 0x0, 0x0, 0x1, 0x7, 0x10, 0x6, 0x2, 0x7, 0x7, 0xc, r6, r4}) setgroups(0x4, &(0x7f00000002c0)=[0x0, r2, r3, r8]) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000740)=[{0x34, '\x00', @data=0x2, 0xe}, {0x45, '\x00', @st={0x4, [{0x0, @uvalue=0x712}, {0x2, @uvalue=0x6}, {0x1, @svalue=0x8}, {0x3, @svalue=0x291a}]}, 0x2}, {0x45, '\x00', @st={0x4, [{0x2, @uvalue=0x6a}, {0x3, @uvalue=0x6}, {0x1, @uvalue=0x7}, {0x2, @svalue=0x6}]}, 0x6}, {0x42, '\x00', @st={0x4, [{0x1, @uvalue=0x80000003}, {0x1, @uvalue=0x8}, {0x3, @uvalue=0x6}, {0x0, @svalue=0x5}]}, 0x3}]}) 8m37.030121029s ago: executing program 0 (id=1986): socket(0xa, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x7ff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01, 0x0, 0x10}, 0x2400e0c0) r1 = syz_open_dev$mtd(&(0x7f0000000040), 0x5, 0x4a2080) read$mtd(r1, &(0x7f0000000080)=""/174, 0xae) 8m20.527180845s ago: executing program 35 (id=1986): socket(0xa, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x7ff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01, 0x0, 0x10}, 0x2400e0c0) r1 = syz_open_dev$mtd(&(0x7f0000000040), 0x5, 0x4a2080) read$mtd(r1, &(0x7f0000000080)=""/174, 0xae) 7m55.141863748s ago: executing program 5 (id=2146): syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x7f, '\x00', @dev={0xfe, 0x80, '\x00', 0x11}}}}}}}, 0x0) (fail_nth: 3) 7m54.929204955s ago: executing program 5 (id=2147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xeda, 0x8, 0x90, 0x9, 0x101}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000ffffffff8500000028000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ff80ffb702000008000000b703000002000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="83c2fd2c00000000000000010010", 0x0, 0x80000977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000001600)=@vmx={0x4, 0x0, 0x2080, {0x7000, 0x10000, {0x3}, 0x0, 0x9}, {"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", "f7bc7728551f0135030752fee99e9de9ee5b7e13094bc4a31051603482645721cca394de73110508bad71ec56a7ea5a5d1a77a3a16a20336c17231cdc5ec96911d34fe03f8bd074feb503852047dd74e7d8b168bc4b2d61c03aa1702568b2c315656d02944ba775458e4f3a728b27dea23c2b4040efbbde5dc96549db6d173c05efadef7c837af8cf44f66d31ebefd3fbb07f180b8a6caba23a13fd542d0d1f6043ec11a11eea03317e00a9c361b653338c5909f436056248c625161ed41d217f323624fcb7b954207852b6aaad1ecd92935d43a8569aa8d820e2180de7fc3c7e7874c7610014bc331b184fb3510c348f99af66d4767b57f2e16c986d25910f032526f8e80f1d41288d260eecfba44f9aba1b63562b5d5dd5cc13c9fc96baef38ff5a8f446e2423228fc641223e9387fec88a630682e58b17d09510a92634014b16d430b072a982b8be772ccd78afcf51eb66d777c7464ecdae3c6c7b81d3fa8cc12bda939de7caee389a9f3a2a27064aee28a4fbe0171db5fc273083a966eaf40cf118b4b9032678459a46a94b9732a757984506d5867abfa6f993d7bc50288a10c8b79fc050bb835a65db1d3c688b2bd4518221ea64add19740f4841e9556b70446965c96977cb11cdd718c7dfaa453c91f9ffc7bef0a8f98bd43f16bb670abbf59e8db86c8e705e6461cd5385588fab13467223992ab50e336b19326ac9945fdc15123bf0cf5d9bee49fa56e33683f1eb7d1370c1d965a293c04d039db93cd5127f03c00b28740f3ceb5dbb4991e32800688ae8813c54a144efa3475a6f5d41d28c1aae6aeb0753765f835d0e16447481df847e6f198c15d48380e6dbb2f3b195dec2977da967f32ce1af6555072e044a25c6f5fe828dff43be2c57fac33c0843c0fe60c30a2cb27d88dd87df3b3f56bb0a282d4ec6f4dab6266a572a4b905f737c7d0d74a853fc32c19ebb53137f14b7984f2bd2220e624da8b33c00f8de088e6e5cdc96faa3c20d1c38fbbed4792d25497761874e5462656b8de93a9f09401b89c236774be4f7605ff2fe13fb2311ac7556338226b2129d39a49e247c5dcd6d2d5860c3cc429619d0a235979e025aef7c587292155bbfec50373b29fa2aa7533a498e0504e1ebcefd6b1ef076e371aa4c046c6b99ab8230bccadd7f10786a7577788b34456d06253f25b40aa369f7373fd38164ea191d1dfc31dd6dff4997e40f60765381a15e75c2523b2ad55e9467cb41786c5b06292fccab1a14499623ac3e6ca83730aa896356e1159079b0c5ae74292db975873603881a40c8f3ecad9ac71252c57a51db4c83fdf4531f6947ccebf9f172618337c2fa7abcfafbdf92d161d12ea88005980c404b55ad64a7c093dd2d5e4d715a66351656ce696d14493fb0940893eed2ad06d0ff465d641482c46bf61b9e234654919ddbb8009c9c2f9c26715b3e3b5c586f4e0d6b26d639a2e58f4cfeaba1e5b6a561118c8b030f47c35545c1e95d262996051816e66e37bca15302087faefd6cbf0d142686fa32d810370571fbdbf70fe4fe104f360ebc8bb1e89b11b5e953a1723f718f7d9f02450c497bc350c185086617531414f1f03414f87f214fb924351fc2c6eff566aa70146a8b4da0e06a42158d88f4acf772978b3626eee48cd1ee79079d3c85edba8251c8239418c1c9fd9587e628570c686d8d1e45816b518f265fcd69d9a746d1fe258f83779bda55b0197260cfc329ff2ab89756cfb03580495638984519ea6cea81913ef1687923d8ee139d3509a9c4d05367dee3ce87c889d471272991edc488ff41796bc3f11f791630582ecb80b154c7eb51447d4d9da901238b0d6305dec811416ce2f84f63f3d2dd5ccf60053034903bb6cc0f3dbf8c9424ef52b5efaf52456389795364a55ecbb20c2822a90bdf4e666a8797aeee9449899c34cc93dc29b909495eddf8806d721475092e80f9f2c265bb0dd9ac8072589e527c0f3e98446f5d86842630a4f2338ae1b766d8d854bc18d7f6e64c639bffdf6b07052462e80f03c25b335292f72e9ebba8dfefe5f1c2244a877e31dee6fac7655328a0a34c7ded9499030db005e9b10993ae06db38c96607f0d3a103857cc48d74195a4dab6824408d005bbee3a0374e28becaaf1b5eaabef866f0af276108546629f6565e9765b9a35d2063150cd2667b49fb349074f933ebcc4629e27390ec5329ab1282b5981af9c583e5a9ea4c7938710ac672a63fa0ba5353b5980929abc63d754e70e5244349bbe2ebc65c946b4cb7ca7273be3c7e289c9ab837fba76a0dc5bed8a805c0c2a9c3f4065ee256f4c30b0635c2b90608f400c3ae26cf83a1000d3dc7bd470726a56a00d6177770b438eb46fa399771650632239d630048b167b198b0e88bc189d3d2dd5c48990f2fa116c1b014d0aa15784587f40437a02d3947e235f23a3ee89a49043945fd4ddb794418d5b744fc0fe4522743cfc7afa1fefa5876efa355b4a8d13de3191205b9396c8cf2d9e28f12241ad24a37eb3d74d416794d01e4813ed7b92fee45af4731ab729164e37ddde625f5ed46c2e275ab0ec21af95a20f770cec521f74254d360af7c29d5ca1a0b68ca2e45cd3be282929222def54703e4300933772ba3aca75fb5700245a1d7c30812d1836bbf3784befd397b5371b537a8421abc13cf6753d5368d76129f94560440f6609d08816d6458c8eace470425e8004363b681032c5301053e7257f8fed436e32a8c6b3c66c369289a993f9d21eab96ad88169160d70d310bd78ff4ff6492181c072a5d13544fb34f3ea6a1e1909f270c5f46619acaa5cb941d4f757f64bc247ca7692e350caebb8dd5c4415cb813514f61a775aa86607d6d3ad33087a4b9af534d9e3f87d0dbe5ece7401dda5ea4677acca78d5a6e653c3fb6b0f262e09bd099815e90c149b594c16dde1d11276e933a5f22f73eb0959149d53c2c128e7436fc9a67407e2487a09cad53eef5a996826ec296d7331ab515cd2f953f2c2dd96f9e39e8cab000d88abc660dd0791666533349878919eff08f86e0cc76be9237589439e865f54a6fee1a0f8c838ae4fcac4db0a8755fba6d5628e5c7486a4df3c54f9fcc0abaff2917753ae577c3c488f18cef1e8ffa8b27a349a0e577c1c49875323107d10801a3692e8667dbf119f0c16881e55fcc5f84f016ab5a470260e09b51febc3e9baadb79a80fe1cfe7e9bb6c21de2ed039889b631b217f4b57ad2b459b25a1bbf0c1018a087bb38f4924e1e78517c72f2281f237f0fe345abf21d2fcd6bb1011803df2d36f8eea54d0fc952c142de1336e88ee07222ce22dde0f6c9117675badf15ea03b28a8df61775d1b88153e2b979c01cb406fca3b7cd027eb33a702414abe706c1caa9d4ddd5309a97c6e8284dd4dcac80190faadebaedb65c537af67bed3cacc122f2c92dbedbb7e9978086f35ac0032327b76b12d3a0797e0f9117ed0ae78dc9b457d66059b7ad13b37f9ca8670a646293bcf5851a844e1913848d296dbea5ecf6870cc48f245e634366f378d0e5b6a8aca588fad4c451956db390a0c3601dc139cfb2baca5827526c6ca1efef3dbcb2f50cd8f71bd3b47ee04e881e54c602b150cbf2b415a0333d8cdb1b712830e020d618860a2f3eb4cfdfeaf64da8362453176a79015eb4e58ef4c2d1cbaec260996f0bef469c99d1101c37d5c26301d346bdce66e3ee5e150bbf2cedd062461cc0d660bd96716310c6ed5a36db37867e7b837bfd805db748f66005e8faba913bc9bd35b9fa0cdeeea330dcd134626f36f996f7f17bf031d7ea0246aa6a67f696c05f75b48a55a61f27b33ef48dd6a23a0dedfcf55a6d6d099f6b39fe8a1eb538ea9baeabc823364da7f6520b47a975921029f49afc1681ea814eacfc1fc76dc69e5b034e77adb399e8a7e2ed53cc77e49848a56dc0a8248f1671773be59b6936804f9644385ea9947b4b692c4c9ee2ce3306a36355336363cd4cd13788c70741364b5f226fd05e2886619d582bf1436673093c96461cce4aca57fd40f213a18526bdcd0fe9276dbe9aade086bb865b79fa1a6d27eec4374f932efe25d85bedb705f9d4c21c5dc0126ebd1a47addc735fbd479299b228bf8288176acd290356aafe8a66c0a8737ae71661120601fd9abf71c2abdb0709d530afe50ff0081cf04fa81b6419ce5ce6fae8607800897f51fa494bed6ccc00275ea07b96f76d4df256400991b4c25dec21440f904daa72247603946f8c80f9bdce148f1fa0e02455f5ab20d4d254eacddd3efc4427ea5c732fe99024300d53659d30692dd54813d09a0b4fb4b8416122a29ea7886545cd2933ead825f69def0cbd48fae8129456034562f0fc287dda827d7652dafaa4466df337be5823b2932fc26ced54162910a8eb121892376a0a6e64b87ee89e03533162bff67087d9424fc02b074fcf76f9430e6e06f36543c279b52fe1b61d7a9e5d9e08d0ec89d8bd90fd9f4ad88b70ddbd9435d5ce9dc8f0dd8e61730eb7755f28aac16903671f5d5809dcd933ddb5c45d342e7db2f277a0dae54de7bbd15309ef370c768247072d71f1ba154e4863d09c12d1aa0984dd3010ed4bfbb2712ff4cc6dd9bb0612117aa6e28249f88a083badee34394e6a985ee760fef06053024f5a4f8ba2114fc385c1b7e084a6af8fe0f3348e5f45af86b3728c506e5ebbabeb4ddd8808450f25af6bc10ed8a61383fb0514ce9984ee19d33db3b39a0630bb09e9146e568af93ffec403cb224ff9c2110d0b4f3b0ccfd1652d186a4edba7e2a0f44034b88652e08e9984d630b9ce396d89b1b2553aa8e682d6ca0b94339b6d58c8761512694898a625470201193fe481df94ea67f25b5a37e6175e3da2037db344309d726b14b9963ba7e65eb301cb16e54e688e78ec8f8c1bf3b6bc5fef64103d584e9ca5a1b6aff06e134b0c932c41c1f530e1399ea4c840e0aed45cfc25d62f595a6343bbad9cb29905b5c8db75869ecaf8407caf858c62bc449450f988a3fb1fb1e01456736d8f96460de06970f39e036aefbce0aba97faa185884302ee1da3c807ccb12afad111308e666cb089e418ee719bd076c11d1b0d09e255085a87208a93e2504e7d6a25242d23ae65411fe95344229dfe30cdc0300104a39553540f69c736b192336025d81972324bab23a0090e870c8b40230382b5f95ff9b62a0748ad84cd798f23f1fc5f3a6c8f2719e2a67113be7221a249c99dcfcbd8652751752428ba5ef89f95205b253cb14269f57492fa9d61f27fbf325cffcb754fc79a444d816512edf4c47fa058bd6e9a71fac5e4101e86330641f50ca6987318adfcac51d6a125c35c5df2a8760cddae26a642f28000bac8a2b140c146d3e3b9d305f33fba89b0dde963e96787205bee6d72a9c64d28cf74e53dc7d01df3473602bab7aed37c40d1d9b39bf66a0e700caf3abe68900a943c09b5d0fba5895c0d50c1b4aed2ccf8212f353f9c9282d8c3397a641f7a9be63ce36a042a3263d35af608a374692ec64a5c3bc87a6bfd91a486acf56e223f1cc95c253ccdf52cf0f0890c309d5f795781fc33e11d27219faa1766f0d0ec665abd5a5f3b9cc2362d1dc850c80f20a7ae6e71ef0bfe9d5becf935dc4525e125c0a1ca163a0e15a356b0967d30fcf828a64b9acd124df9d3624deae2bfa7e80fcd405a958db2ea1f92fb11e34bfc88a9a8f8977672169094e08111ec932b778c449424d241ccc8ade811e1208d79b3dbaa1e7311272c015395520eb98eeabe8382829d14cfbf567d616fb3e26c7410589"}}) (async) socket$rxrpc(0x21, 0x2, 0xa) 7m51.973157361s ago: executing program 5 (id=2153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, 0x0, 0x24044010) 7m51.732650933s ago: executing program 5 (id=2156): mkdir(&(0x7f0000000000)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x7}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000004000000f955000598000000003030612e00743b46120085bae28aa2eb117475a739b5fe7cf98782c21ad0eb7f27f89e58c4ce4d326b4c8774750d961ee0354a1830c5ec"], 0x0, 0x2a, 0x0, 0x8, 0xbf81}, 0x28) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="fd8afe46566e2d2271010000db80cbac916e44320919418e5dfbd6153f8866f4438059269c7ad2261283e99bd8f86e499c50cff6de179595c8cac6975ae4459fba56342b3d295ffc0cfc68041ddb5032de9426700ba76100"/102], 0x50) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2000033f, &(0x7f0000000240)=ANY=[], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x50}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500)=r3, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={r7, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x6, 0x6000, 0x8d8, 0xb1, 0xa, 0x8}, &(0x7f0000000680)=0x9c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r7, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) write(r0, &(0x7f0000000300)="060000000300000000", 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@getchain={0x64, 0x66, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2}, {0xffff, 0x2}, {0x3, 0xb}}, [{0x8, 0xb, 0x401}, {0x8, 0xb, 0xfff}, {0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd0f}, {0x8, 0xb, 0x9b}]}, 0x64}}, 0x44014) socket$inet6_mptcp(0xa, 0x1, 0x106) 7m49.826908759s ago: executing program 5 (id=2159): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x702, 0x86, 0x0, &(0x7f0000001ac0)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047ca70166486b459fdaae00000725643f7b3ab502617b47209ff2079650cc1957a26a24a29edbed9463081eef61aa7fab052ffcc89b4bac5bae255a31d000000000000000000000000000000d84b8f08f81d5121b33d82c4f3f2e88ff02aea52f1c1e1ca", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000180)={0xdb, 0x0, 0x10000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x2c, r5, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000380)=""/188) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r5, 0x400, 0x3, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x45}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8841}, 0x20004001) 7m47.073027936s ago: executing program 5 (id=2163): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000240)={&(0x7f0000000180)="45469e518c11eb5eff92f360c5545d6861bcb429dc8c8d43a8ee20f64443e18d7767cc04bac8328c7f12a68679b1b865f1c0c52ac19cb84e5913cacd84c16a180a6ad87941c2e8cf17f5950d778771f0891916a69b168fa6054bc96978bc0afe16affbe2302cbb72a143dfe3e96103fedfef79fcc7b26416639debe76369ce16a5f3c75e44d5", 0x86}, 0x1, 0x0, 0x0, 0x4000}, 0x2) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}}, 0x0) (async) setns(0xc9, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002ebd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e64300000000000000000008b45"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c010) 7m31.876392804s ago: executing program 36 (id=2163): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000240)={&(0x7f0000000180)="45469e518c11eb5eff92f360c5545d6861bcb429dc8c8d43a8ee20f64443e18d7767cc04bac8328c7f12a68679b1b865f1c0c52ac19cb84e5913cacd84c16a180a6ad87941c2e8cf17f5950d778771f0891916a69b168fa6054bc96978bc0afe16affbe2302cbb72a143dfe3e96103fedfef79fcc7b26416639debe76369ce16a5f3c75e44d5", 0x86}, 0x1, 0x0, 0x0, 0x4000}, 0x2) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}}, 0x0) (async) setns(0xc9, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002ebd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e64300000000000000000008b45"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c010) 6m1.500358493s ago: executing program 8 (id=2458): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0x1}, {0x81, 0x2, 0x9, 0xfffffef7}, {0x4, 0x9, 0xff, 0x3}, {0x6, 0x2, 0x1, 0x4}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x850, 0x30, 0x12f, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x6d14, 0x3, 0x981, 0x8, 0xbe0c, 0x7, 0x4, 0x5, 0x2, 0x1ff, 0x91f, 0x3, 0x5, 0xfffffff8, 0x6000000, 0x20000, 0x3, 0x0, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0xfffffff3, 0x9, 0x41, 0x8, 0x8c1, 0x7, 0x7, 0x8b5, 0x6, 0x5, 0x8, 0x2, 0x5, 0xdf, 0x1, 0xfffffff7, 0x214c000, 0x9, 0xad3, 0x8000, 0x4, 0x0, 0x0, 0x5, 0x2, 0x5, 0x4, 0xfff, 0x9, 0x5, 0x1, 0x4, 0x6, 0x1, 0x1, 0x5, 0x3, 0x2, 0xca, 0x8, 0x7fffffff, 0x2, 0x1, 0xfffeffff, 0x10, 0x1, 0x3ff, 0xf, 0x9, 0x4, 0x7, 0x3, 0xfffffffc, 0x1, 0x4e, 0x6, 0x8, 0x6, 0xeb4, 0xa, 0x7ffe, 0x8, 0x4, 0x10, 0x1, 0x80000001, 0x0, 0x5, 0x1, 0xfff, 0x3, 0x5, 0x6, 0x5, 0x80000001, 0xc, 0x2, 0xd8f3, 0x3ff, 0x9, 0x3, 0x24000, 0x5, 0x3, 0x200, 0x7, 0x1, 0xfffffff2, 0x1, 0x0, 0xb1, 0x8000000, 0x7, 0x2, 0x81f, 0x7ff, 0x4, 0x65b6, 0x2, 0x315, 0x80, 0x1ff, 0xb, 0x1, 0x800, 0x0, 0x8e, 0x80000000, 0x401, 0x8, 0xff, 0x10000, 0x2, 0xc469, 0x71, 0x1, 0x2b, 0xa, 0x8f, 0xe88c, 0xf5, 0x80000001, 0x4, 0xb618, 0xf3, 0xffff8001, 0x51, 0x0, 0x2, 0x5, 0x81, 0xea5, 0x0, 0x9, 0x7, 0x3, 0x80000001, 0x0, 0xe19, 0xf, 0x3, 0x1, 0x6, 0x0, 0x80000001, 0x7, 0x3, 0x80, 0x7fffffff, 0x0, 0x6, 0x9, 0xfffffff7, 0x66, 0xffffffb1, 0x9d1f, 0x7fffffff, 0x8, 0x7fffffff, 0x4, 0x81, 0x6885b8d8, 0x0, 0x3, 0x8, 0x400, 0x70, 0xf9, 0x0, 0x5, 0x1, 0x30b, 0xa, 0x200, 0xfffffffd, 0x5, 0x0, 0x0, 0xa1, 0x9, 0xfff, 0x4, 0x401, 0x3, 0x2, 0x0, 0x0, 0x40, 0x101, 0x7, 0x0, 0xaad, 0x3, 0x0, 0x0, 0x8, 0x0, 0x8, 0x3, 0x10, 0x589d, 0x3, 0x2, 0x9, 0x200, 0x5, 0xfffff001, 0x0, 0xfffffffe, 0x3, 0x3, 0x2, 0xfc4, 0xb, 0x296, 0x2, 0x7, 0x1, 0x8000, 0x80000001, 0x7fffffff, 0x7f, 0x4, 0x5, 0x7, 0x6, 0x2, 0x0, 0x8, 0x4, 0xbc4, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x3d4, 0x5, 0x0, 0x2, 0x10, 0x7, 0x9, 0x5, 0x8, 0x7, 0x8, 0x8, 0x9, 0xffff, 0x8f13, 0x1, 0x3, 0x8, 0x8, 0x9, 0x4, 0x8, 0x81, 0x0, 0x7ff, 0x2, 0x10001, 0x6, 0x100, 0xfffffff4, 0x2, 0x8, 0x0, 0x800, 0x0, 0x4, 0x61, 0x7, 0x7, 0xdf4, 0x1ff, 0x80000001, 0xffffffff, 0xffffffc0, 0x7, 0xec3a, 0x80000001, 0x7, 0xe429, 0x8c9, 0x4, 0x8001, 0xc, 0x5, 0x7fff, 0x10001, 0xb436, 0x8001, 0x4, 0x2, 0x5, 0x5, 0x5ba7, 0x5, 0xe3c, 0xfff, 0x2, 0x0, 0x8, 0xd9a1, 0x4, 0x3, 0x8, 0x4, 0xd6fa, 0x2, 0x8, 0x4, 0x31c00000, 0x6, 0x7f, 0x0, 0x67, 0x2, 0x400, 0x10, 0x0, 0xfd, 0x9, 0x8, 0x1ff, 0xffff4426, 0x1, 0xa, 0x4, 0x80000000, 0x2, 0x1, 0x81, 0xfffffffb, 0x6, 0x1, 0x4e, 0x9, 0x3, 0x2, 0x6, 0x8, 0x2b3, 0xb003, 0x3, 0x8001, 0x1, 0x2, 0xec, 0x41, 0x9, 0x0, 0x8, 0x7, 0xa, 0x5, 0xc21, 0x8000, 0x401, 0x3, 0x8, 0x24c8000, 0x2, 0x7c9, 0x5, 0x400, 0xd2, 0xfffff8a1, 0x80, 0x2, 0xf1, 0x76d4, 0x5ab, 0xfff, 0x7, 0x1, 0xfffffffe, 0x52d, 0x401, 0x0, 0x200, 0x4bc, 0x66fc6967, 0x4d5d, 0x79f, 0x0, 0x3, 0x680, 0x9, 0x4, 0xb460, 0x7, 0x3d4, 0x1009, 0x0, 0x5, 0xb, 0x0, 0x9, 0x4, 0x80000001, 0x9, 0x2, 0x5, 0xff, 0x8, 0x5, 0xe, 0x0, 0x2, 0x3, 0xfffffffc, 0x9, 0x401, 0x1602, 0x2, 0x337162be, 0x1, 0x90, 0xfffff475, 0xffc00000, 0x4, 0x80, 0x0, 0x7, 0xf6, 0x1, 0xa196, 0x6, 0xba, 0x6b, 0x1bf, 0xc, 0x2, 0x2, 0x8, 0x10000, 0x6, 0x0, 0x7, 0x8, 0x7f, 0x7, 0x9, 0x9, 0xa, 0x0, 0xb7, 0x2, 0x2, 0x7, 0x8, 0x0, 0x0, 0x4, 0xd, 0x7, 0x5, 0x3, 0x7ff, 0x2ab, 0x7c, 0x9, 0x2, 0xe, 0x8f7, 0xb, 0xd6de, 0x10, 0x13, 0x10001, 0xe7, 0x8, 0x5, 0x9, 0x0, 0x9, 0x0, 0x4, 0x32788e81, 0xc, 0x3, 0x81, 0xfffffffa, 0x1, 0x5, 0x5, 0x6]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x850}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052409000105240000000d0b979d60a53067d50060200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_open_dev$usbmon(&(0x7f00000008c0), 0x5, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x4095, 0x7721, 0x16, 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) 5m57.912989422s ago: executing program 8 (id=2463): memfd_create(&(0x7f0000000840)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\x00\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\n%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\x00\x00\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~E\xd2G\xbfE\xb3\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF\xb1\t\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x9dR\xde\xf6\xc9!R#\xd7\xc0\xea\x9a\x04v\x85\xbcx\x9ai\xd2\r\x05ZY\x0e\"d\xc7\xd7\x02v32Z\xe0\n3\x8b\xa0\x83z\v\x90\x8ce\x12\xbcw\x1e\x7f \xdaPh: \x8e\x95\xb2\xee\xd9\xd9\xe47\x1c\xab\x97P\x86\x8c\xcb]Q\x83\xaaM\xc0\xd4\tQ\xec\x9c\x98\xe4\x18cb\xbd/\xd8\xe95\x7f\x00\xfd6#\x87\x8c\xf9\xa3\x041U\xb9\x14\xce\x9be\xd6W\xedt\xfe\xe1\xe3\x0f\xf0R\x9d\xc07JC\x85\x9f\x17\xf6\xcfH\xa6\x82\x8b\xed\x85\x10\xf5\x02\xa4n\xfe\xc0\xd4\xc8\xa4\xb8\xdfKwl\'k\xe8\x04\xed\xe7\xe2\x16\xa2\x0f\xa8\xb0AXH\xd0\'3\xafJ\x1d\xb7\x96\x10\x943,\x10\xae\xd5\xc6F8\xe4\x8f\xcc\x17\x93F2\xe6f@\x8c\x12\xccZ\x11\x03\xa0\xd6V\xf8\xc0Q\x99J\x9e\x0f\x02\rxT\r\x8d\xb8D\xe3G', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r6, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4008000) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@mcast1, 0x4a, r6}) sendto$inet6(r4, 0x0, 0x0, 0x4, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0xe0, 0x0}}, 0x1c) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) accept4(r7, 0x0, 0x0, 0x0) 5m56.598925703s ago: executing program 8 (id=2464): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7c0000001000030425bd70000000200000000300", @ANYRES32=0x0, @ANYBLOB="032e0000030000004c0012800e0001006970366772657461700000003800028014000700feffffc7b9000000000000000000000108000c0000000000060011004e24000008000c0007000000080015000e1f030008000d000008"], 0x7c}}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1c0210}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, 0xff, 0x0, 0x0, 0xff, 0x8, 0x1600}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc001) 5m56.174084413s ago: executing program 8 (id=2467): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r2, 0xc138fd0e, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, r3, 0x10ada85e65c25349, 0x70bd2d, 0x0, {{0x67}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x37}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c8}, 0x8004) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6}, 0x4) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000400)={&(0x7f0000000180)=[{0x0, 0x2, 0x1, 0x9}, {0xd407, 0xb, 0x101, 0x101}, {0x80000003, 0x8000000000000000, 0xfffffffffffffff7, 0x10000000007fff}, {0x2, 0x6e, 0x9, 0x100000001}], 0x4, 0x20, 0x8001, 0x6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m55.256831257s ago: executing program 8 (id=2469): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) sendto$inet6(r0, 0x0, 0x0, 0x24000010, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, 0x0, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000180)={0x8, {0x9, 0x10, 0x80, 0x2}}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x21, 0x0, {0x25, 0x80000035, 0x16, 0xfffffffc, 0x6, 0xfda, 0x6, 0xa4, 0xffffffffffffffff}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x5, 0x0) ioctl$HIDIOCGRAWINFO(r6, 0x80084803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 5m52.660818236s ago: executing program 8 (id=2474): r0 = syz_clone(0x4a800000, 0x0, 0xd, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, 0x0) r1 = getpid() prlimit64(r1, 0xd, &(0x7f0000000140)={0xff, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='\xf1\xbc\xed\f\r\x00\x00\x00\x14\xb3\x87\xf6', &(0x7f0000000180)='1234\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0xfffffff8, r5}, 0x38) syz_open_dev$loop(&(0x7f0000000280), 0x10001, 0xe400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) syz_clone(0x10108000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m37.343330173s ago: executing program 37 (id=2474): r0 = syz_clone(0x4a800000, 0x0, 0xd, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, 0x0) r1 = getpid() prlimit64(r1, 0xd, &(0x7f0000000140)={0xff, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='\xf1\xbc\xed\f\r\x00\x00\x00\x14\xb3\x87\xf6', &(0x7f0000000180)='1234\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0xfffffff8, r5}, 0x38) syz_open_dev$loop(&(0x7f0000000280), 0x10001, 0xe400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) syz_clone(0x10108000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m20.557334529s ago: executing program 7 (id=2526): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r0, 0x1) 5m18.238299765s ago: executing program 7 (id=2533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000340)='1\x00', 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) unshare(0x40200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x40400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x7) 5m17.092624066s ago: executing program 7 (id=2534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x4001a022, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x49}]}}}]}, 0x44}}, 0x0) 5m10.31283484s ago: executing program 7 (id=2544): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) lstat(&(0x7f0000003900)='./proc_mnt\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000003b40), 0x101000, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000001) r7 = syz_open_dev$vcsn(&(0x7f0000003b80), 0x1, 0x140) stat(&(0x7f0000003bc0)='./proc_mnt\x00', &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000004f40), 0x402400, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000004f80)={{0x1, 0x1, 0x18, r4, {0xff, 0x4}}, './proc_mnt\x00'}) sendmmsg$unix(r1, &(0x7f0000005140)=[{{&(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000000200)="c4b5972de89b9135e02bca6d798380fce16a9e9abf", 0x15}, {&(0x7f00000014c0)="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", 0xc00}, {&(0x7f00000024c0)="f68755a8bed764258fdb267ad2440276116929a2f50627936ddab93a1c63efd1c50cd4c9d04e7479bfc848e05fd4bd769ee1f86024773d9c1509d710f41033b7c300c393caca82351681baa8cd73add6d37c7a086f7ba6a900ff92171eee06a576683b8a00901444d95006aa1ae6968ef5dbff6d681ebdb45bd24cdcb0b53602a619916eaa07172306522cb753a5358b896c53f5d1c80e3ae7218dc6f45e281182b0a1b4a7231bc6ba866ef930e2cd0fc9cec31066482fe43b8728fb5320303c74e930115badd8d290dd271b8b3e759115c09bca4076b0a58753695d35bd4959846546736c571103cf5826bbbbcbb8db3df6bc4d7966c2fe146d07a730d84aa04622451b49761553e530e5e56b52288d515d89646fd53561835ad2cb41f216c7ac08658579d015b461a944af6317b2463213b392718ed15f6bdbbc541f5614a81db1fdccaed10baf589438708dd56e2465e5c8a4f3479240b1da694401f866d878619fa22730ac2872d86098d5edf53f27c2ae991de498243c9faadb5c76eb9f28082490f092867790ed0993d3f1a0aeee9a8ab9a6ce5fa61a9b5292a7299bfd238992ddbf7d7bcb4d73d17b508536ebd545c3169e59293cff0f5faac67627f18c9446081bb45eb355a7a115758e74b46de80e282dc57230777e47f35bd09eb7093f2563facf53fd710324f1875e0da17ff79e8d2ec8d6dfe99814deb383119ba5593369788995c59e8d2b935c9c24c4326c952423e209d7ed0e97fea5a337e388a7b36724d1ea875bd06c36fd9e47fa8be757b8f0c134b332f993324510113afbc6030300b6326b23ca01c1347552444e7ea031b322988c0a3bdba6f65c2b65acbb8d867c576c221cd7553b89036e7742a10495a94ec31a022b127cfbc4beba4cfc8c7fe7925e57ec848009af1aed8a81206849072e2f9c8067fefda307a964afb12e558329037627d444200555ff6f799d91025865277ccadf8aef69562aac5310cfc3a6b39d028d06ba7a915d041dcc8b01ae26d868ba85a28451caac901bcdff56b82f44e97883a4359a98905c27235c35f62c090a3b1fffc91850b0708f5221ac45b04a8f9166589145c08192da6a686a9ab1a76dd14cc7887eb48dd998ae637ef0d1fcb599b51429223d1a344ca32472f3ded47671dac42ea1f447f7cc60d15bc30f01c5030c59b44efdfdeb4f30b7137d69c2b547d82a7132997f159867949aeaa8c8767dbdf02047f81fe97dc33620fc5bb1b9f07ceea3962e9fcb1b80a7277e65be0325c346db7693ad0bf1ce008ffe0eb8f2ca33a9d9a060c4c20a3c7eed161a13de8731b8d78cd2122b0e4a7856219c1569b551911945186c2d78d01840b932058e99542b7760dd5f96526f02a9eda83ed7daa238e216f17dfd2d26f01cf241ad50f8a88e3557426b5b7fb658b8fd878feb0314d636ddc3338d7fb1b639f574a8d457aef07a1a9d869b46d515384a9fda868ea0c60358bbe8721f6eb171864e0f5bc378eddcfe0c29414781bc8babb6442d2d18fc0784f3dbd23e8cc9876dc331d2e775feb5b60001e877c4fe5f898ce6e1af9c203868d20e9990a963208b06ff8753d504becdcebd444805fcb8becdb29f638b55efc6ea30037225769e44cd453814c1e925a135759a5603d75f173f9972361f56782086a5e807b8d1038fb541241594356a0d15b2091189ddb0a039b29fe8c20c5ecee8fd78d8cad7fed2790938868da6cda34987e36f19d5ade907f61f90c567a873259c1ae34ffc8290800696c45e23429130de087e4d8f3a23217049d060a68bd95feccf0b30e4ae3b268b0513d858f63c32c3a2071c42b8925b9b249f3639e0e471c832ef56a4d9defe3ddd14955a4095b5c0063eab6f60985eb6c9e065fd3fa7ab9d440f46d875bbf09fbcb0d14e969f154f03f69ac2bfb376cd6cf2e63f16056670913b98704410d41b7748072e66f8e965e903f913fdd13374d0d41a5e82735ba855f2ab83ed8aba824c5478b5772ce11f7da796976a7c1944b713d8ef8a1ae82d41fb285e9b6f19059d7e90d4a5761d71f418becb4e6d526a89fd400567038d2b4b70a623c75869af2f5dd9e35357eed27a3b0eead45a8332fab475303dfb4214a26316405313a80b1be2d7a0dd3c21308ee8e4defa904972d0ca6e38c3a256f3e944fc3aa55436fff77a8938325deb8afb198387064a51904057a4f19d0ea85f3b73205dfceb97e93578cbae99bd43081aa2f20092811dd517804c77713212b2ed2c2fc762a145afaf716f9b548112071cfa68fed6fc4bdba3d086072b5ad3a2ceb4acd4b7345c4b241be26159b48b02b76650d0bbe3eb5baa180f0a8621e15b8457b46b9a4ce18e3749c2f75d8f9d9cefd7af362fa4cee7af6451803a6b08b35d0a701e052dadeb2c2c118ea58a1cd1a505f987e82755fbb4399fc83c7885b6029d7cde57556ddabd5e01ffd336c1d173516d5fe1940b0913bbb2c8a93d88f1449fb1ac2fa2a0bc47bb9d9ad17370dd6aa53a765893ac1a423a3950c164e1093746bae86eafd16e8864ffd846d8545f057322addbdf07d6e8ba87e7061a5b6363c5f182597f548917cdfd7194e6968ccf5548ce4704e1b77afbdf7321be5a5deb699e74911287b49a75a38e09a2101a303bbb69eb83118f7f0f18fb74b36ee1124ddf1639fc8751ee7b287c445d1d76aaebf7656712d080ea5b54c345ca7cbef20e0b29afb920c86f3f73509f3ce2e79a30c71403f902ab6f9d46019e082ce1ac35af24f21f448b9780b2e7204fbb0baaf8cc30d17bfb1add136c28930cfbad0c3e763e98bc43cd43bb6705c125dd6ebafcb17ab08bca3eaed8bc84732ede17c31ed45ae99c17575e8b702af48a5d0598db371b2948e657cf20aa28b4baa1b2d89204d6e571984a99d20edfc7dfd6d622f6120955c01a5a6bc86a67dcd304a0d0ab96e906448e3734c19dda3ff4edd69e72b0c5dcddb24e3e8cfe3b6cd7fa39efe6959be1ef0ffd99519bbdaf43efe845cf489805db85577e08ae66315f96fa5f2d7661be2282090a08474a595f3e69fb95d4e5618a8dc8a8926dc68bedbd59eaca49f350fefc06f9b50aee8188d29760e50e9eaacd8e3748bcb6e582b2eed014c9f72ab549a8b11ddf389b83b01049dc143485213dfae75b1e88dd42f3f28ac057cd84642ec72036c074c5dc1f0fb2145c0e31218318ede652c5ee27a28162c66e674bc6911a018770cf1a1310cbceee725504feb883c6bbaf0baa96fc3eba0f08f93c49d7341384e1ae50b3d18b46b8d21aedfd3b6c4c84389a4b574c96d8739fd46a5ec39ad8b96dc83d9d9ea477f13d0a787e114ea1f2e6894718c8e53176501fdf687c99f909dc27d0aeddb565df2a5cee2f8e0a5138d2a25d21914c272f00b7b648d7490dbc7ee0f43f86bf9b6d81db5140c5f86bc391f04e65b5c3a22eec172d64b514a595a60302ad21798cae329890f732b67601d8292caddbe6be01fe599fb1328128adeb4bc08793cd1f0bcf33e2adc7d828c035daac4ff1912296bc2a6d82a98fe963849acd3b606a9c75b8bc349734aeb27c8b83b99059dd01c12086beea414c872d59a3652a0a8a1b928d826b44c93c8a9fce716e2340f277039e97482343431b476e972bf95108e8b2dc38cbb844f11226f009415dae7f97842e10b2aa4109b007eb3e5b7034bb50d5251985f5280149b076f13b6c7cb56895c698f4159568ac2d63117ed175cd7e0dad6c48274ed4691ab404dc8a4f908df7e300415fc7d8a32346b1693cf7676e1d41090d776231b5d526e5bdc743269047046be196cffc2d2c606c3042528b6214deb1f40b1704523193e170daa75b697344ce7980072f4fc89d96d96f9cc42c8e49975f7a368a00315b527c1f1e8d2d4d8231f10530d0e330087f340c8e5a8cb86ba18bf81071377bd04b26baf9b95466beab0c33933aa7688779044263f03de6cfbe318b79799544e43e251819da9ee58ab738b4ec7b5969d769f41e3389ce8b3723b8851e2a9f39d04bd91fecdbc93f80609df97f6527d29ab6e6616c6194f493603136c22eef03cdda65fef19781be3d70e0160f2a89b98090044b384aa4daebca97ac995c245b380ea77b1030dd8606eab51f5c61584ac805b7ad1596486012d0fe7ccc135cdcbe9209b6d2d0db0df2ab67d1123aeb229e64825b6cba18ce517deaf2e571ef14b6a784f8288401b233bd1971a4110e2e5864904d8f0d3a93cf32fd088a5967226afab86abcc4f32c4500e036c443467f11509103dfb9fbae29d471b7fe9b93752156e5e9cf308879d09906410db506dd7fd3f84834866787ff4fa33ee9093c8091b326e02922f13c406f70630da2268190a4c6b8e539e66e186c65ff8d143c8e4484b9e5b055208bb6a5a56115078d24d49e873989885181fcb4f7d2a831e1b35654473f3e6e22b47a514b73824a5c48a6330570890d290f41a8b5a95399c9572beeb3453daf4d427233eedaf0b4a492f36407f983f9e3b9bfd2a3fa116e8849530a62662cad1a7770c47b3f857c1b481a1a023d7222a6012777a190d25beb6113d9d1ff11d450df664592805b919e53253479f9c6a791af1e7ce568450d2bc23334eee0dd1d041d941092c5e12d7daed4d436b0d22ae135355377426779196d64cf17d5296f01ff1a0a6a40b42bc8f4e1529937743144672ac4a41e455fe69abeefad9fa39df9ab5579cfab6e38d1d9176a23c3a455b03ad39feaa6ed0ed382d30cc4e4461287699f0a7296d07045440e789147403d0e8b2c429eb5d24c835e6ffb5880f3deef102d09e78a0c4f99682c5a97ab2f7c54f273acddc5ed178e4186cb4b1e4b27f2b3c7795ca224ac03a1c1200ce7cf0c3b85652ab90c058fee75decd83f4d44c39631a5dcb225f39412200396bcec8c0a2aed8a2fa3d6e7580e9238018f4d5f3e1e372088eb1bb5c156cf118240949b5af3ba9fef22bdc7fedd761cdb08a29a32e989ad49c41ca9e58f4c7eae10476267d17ee928d5ed93e0a3b40dd8a0881ae38d4e19d248a7d529bb7d2e72b848f423e527c05fd50b2a43f7e9c664bc1bb76e478254435482f538e3ffe4f3c3daddd31c8de53815904d55a3bd3cfd5df879882f63ab3d5aee9348de5d2650fa49e41c1b03d11c1703163e5679af3626077c9b6de243383ab6bd92a023167438d065a65ee5fd047d09449d02b1c533bc0cd20b89561e30feb6714981ee54c84305832960b202c78e9b7603b47257a05bd3df097f12b0b8bce1493b3c31365060d7c26ce3517122f735441ec97764878aa3cea751dff23167d87cabd261d28f0a101ff03228b27b2e14a84b3405aa55d62b897f7216f97d8e2e08112e03b69c634830d5ded6a3dceaeb053e8abff29510eb2919eeedb6ad113dbf4862455431bfc2b27af604c822ef7e669b4af90a3e63c58e021a4980f8558e150f765b3156011694d2503f50bad7b565b16c173ed2f1a5ab2fbc5d97018638781832f100a7fa70a69ceb849b2f63d2803a2f2b5ea3a39139f41dcbba851759bf958c7ba342bd792bc30e1a3c851c90b5174e8f1df06e72aff06bb682e7bb5096522e7954017df167d5b8b344c8afdfa3b966b2baa31cb43e09b351592c24859fca54ac0b6c246fa4b7bc434c9c15e1b97f122be6ce6faec6c36fb3efe9d3bc3edaa19f20ef3a82691dde9c9dde80394160c44f268473cc9f4b3ca9be7cad78e4e267560678d2d6ef41c5c4c29a4de72cef6f0adbf5d9b80bd70784a355f2de8f175e8e56bf819cf543f7690d6a73f885bdeaaa56e37f0f00c0a2168", 0x1000}, {&(0x7f00000034c0)="53fbd5a6c7b5ac2ff2081ccaa38b3a62d8cf275833639f8ab597e5bfd7914c7819ae4fddac55f1a540d8c9ea5767cef1a191bdc30c9a120055433eaf556e3d7390c4bb74dae06ec97b51f2bee1b8f80319db78f42d05f6e74d77355626d811801c999173382e1cb4c45bc8e40fe988808b64a1f6b66a209f789874963f0afb7432882069d03b4ecf0d0490d846d702f4ac3f64403d2317390fb029a0f8b7752c384599238902f9ed55525b96cb86cf", 0xaf}], 0x4, 0x0, 0x0, 0x8000}}, {{&(0x7f0000003600)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000003700)="8a32836523dd44734b17c11dc7aa9df68acd6611d95411402b0a8d165f34737a2a61d45468db325a056067487766c021a154284c10010e93b10036122b084650bd4935482377d47ad6530b74626e4ee04b80984d9eee05071e7469faaaf63f91cc694980807eac2e8b0390e924ed5b0ec3c5473cd997a77bae07840de43f236a5b8b57d7c38bae99609cc242dc7f09951566b95d2b7ddd135703b2ac1f1599cb1a112936", 0xa4}, {&(0x7f00000037c0)="4950763cafb946f84a318627b56ca118ee7cfa25063bc6e12e3b1d82aae845178a736419d2d92da2beca7e13f149cd947d9d97d853865ae34675b4075ae0e9dadb5e231e9518e0078bcf855cd328ef41ea40baff1633f87655567bfb690305c5d25b81", 0x63}], 0x2, &(0x7f00000039c0)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r3}}}], 0x38, 0x20000001}}, {{&(0x7f0000003a00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003a80)="f5a62c86a9d8e7324955b6c2d5f0b4610dc104789c667966fa34236a5047212b95b7a57bca9d190f2066b91f45ae80b5401dad4dc7c73d399d32192823867cb3baaa6587cb09", 0x46}], 0x1, &(0x7f0000003c80)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r3}}}, @rights={{0x30, 0x1, 0x1, [r2, r1, r2, r4, r5, r2, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x30, 0x1, 0x1, [r2, r2, r2, r1, r1, r7, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r3}}}], 0xd8, 0x10}}, {{&(0x7f0000003d80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="4111d2fcaf0745d774325a2c6f0a513c3f45b5d64e6e0cdfe8122188083d8c1b0a08a36e60c27a7c9f035978bc1ef4a20be0451797ce7b09005ab11e4a0651e0caa8f2d1e0d5a2ff04d8c9a6", 0x4c}], 0x2, &(0x7f0000004fc0)=[@rights={{0x24, 0x1, 0x1, [r5, r9, r2, r10, r6]}}], 0x28, 0x4015}}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000005000)="869ab9e469bc385131ba9e1fcc49e221755262cc5b761d8da35aa5ca849c96efcaf3af4bffb7d79ccd009f60e503e7805b8d2464117c73a8436f2e29bdd64411564a8e8e1fd6b8b29e7865ed8e88b424de4c3c93c43eac1c0b59ddef9973eb48938cefe7d0edbad08b937d63129252e749acdd892ebc0712cfb5b93a438ebd0daa4f1baa9f4bf38cb5bbe0787288f73f9ce51d05b5ce890fa69aaed6afd55d20eff9666e3427f5c174c248a682d9af718ba9442d1dc12e4e3b56efa2be09ff124f2c0330d4b9a14aeb714676fec1a250e004d94e3db784", 0xd7}], 0x1}}], 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r11, 0x0, 0x8) 5m9.377230053s ago: executing program 7 (id=2547): syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x612042) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, &(0x7f0000000080), 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x3, &(0x7f00000001c0)={0x8b8d, 0x9, 0xc, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x1ff, 0xffffffffffffffff, 0x410000000004, 0x0, 0xffffffff, 0x7, 0x0, 0x6f4, 0x2000000003, 0xfffffffffffffffe, 0x82a, 0x20000040000008, 0x4000081, 0xa, 0x0, 0x0, 0x9}) io_setup(0x2, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14140600000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x4e23, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33, 0x2, 0x0, 0x3501, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in=@loopback, 0x0, 0x2}}]}, 0x118}}, 0x0) 5m8.911667894s ago: executing program 7 (id=2548): pipe2$9p(&(0x7f00000000c0)={0x0, 0x0}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) tkill(0x0, 0x7) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d4f80900479bcfefef530302b3030303030303030313030302c00"]) 4m53.85223341s ago: executing program 38 (id=2548): pipe2$9p(&(0x7f00000000c0)={0x0, 0x0}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) tkill(0x0, 0x7) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d4f80900479bcfefef530302b3030303030303030313030302c00"]) 3m21.111054642s ago: executing program 9 (id=2756): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') io_uring_enter(r0, 0x2f59, 0x39a0, 0x12, &(0x7f0000000040)={[0x2]}, 0x8) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1f3) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m20.325563983s ago: executing program 9 (id=2757): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000002c0)=0xfffffeff) fallocate(r0, 0x20, 0x0, 0x4000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000491400072cbd7000fedbdf25080000e100000000"], 0x18}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006a00)={0x2020}, 0xbd) write(r0, &(0x7f0000000400), 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000080)=0x9, 0x4) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x317b, 0x400, 0x20003, 0x274}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000040)='3', 0x1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 3m19.433468915s ago: executing program 9 (id=2759): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000340)='1\x00', 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) unshare(0x40200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x40400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x7) 3m16.694421207s ago: executing program 9 (id=2763): r0 = socket$rds(0x15, 0x5, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x20000, 0x0, 0x9) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r2) add_key$keyring(&(0x7f0000000940), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000007c0)={'vlan0\x00', {0x2, 0x4e21, @empty=0xfdfdffff}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r4 = gettid() socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x8, 0xffffffff}) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) rt_sigtimedwait(&(0x7f0000000140)={[0xe]}, 0x0, 0x0, 0x8) tkill(r4, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x2, 0x3, 0x300, 0x0, &(0x7f0000000000)=0x8000000, 0x1000004) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x20, 0x40, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0xc, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x26, 0xf7, 0xe9, {0x8, 0x25, 0x1, 0x1, 0x27, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x0, 0x1, {0x8, 0x25, 0x1, 0x83, 0xc, 0xc}}}}}}}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="02ca5d24"]}]}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) 3m13.63862114s ago: executing program 9 (id=2768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x120}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8001, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x857f485c42ebb745, 0x0, 0x2a}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) 3m12.291991068s ago: executing program 9 (id=2770): pipe2$9p(&(0x7f0000000140)={0x0, 0x0}, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r2}) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0x0, 0x0, 0x8000}, 0x48044) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r3, 0x708, 0xb8f7) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0xa, 0x4) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x2, 0x42, 0x236}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414", 0x11) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000003380)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00'}) getdents64(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006bc0), 0x0, 0x20b0, 0x0) 2m54.451717069s ago: executing program 39 (id=2770): pipe2$9p(&(0x7f0000000140)={0x0, 0x0}, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r2}) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0x0, 0x0, 0x8000}, 0x48044) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r3, 0x708, 0xb8f7) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0xa, 0x4) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x2, 0x42, 0x236}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414", 0x11) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000003380)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00'}) getdents64(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006bc0), 0x0, 0x20b0, 0x0) 31.503509008s ago: executing program 3 (id=2944): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000001406fffe8000000000000000000000000000aafe8000000000000000000000000000aa4e234e22", @ANYRES32=0x2, @ANYRES32=0x1, @ANYBLOB="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"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r3, @ANYRES8=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a01010000ddffffffffff090e00060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c0004400000000000000007140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018000900f6efc2a1fdffffff02000000fe0000010000000008000500ac1414ff"], 0x24}}, 0x4000080) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf250a141000080000031700ffff140002000000000000f3ffffffffffffff0000001400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) poll(&(0x7f0000000040)=[{r8, 0x4192}], 0x1, 0x2) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000240)=@mmap={0x101, 0x0, 0x4, 0x400, 0x6, {0x0, 0xea60}, {0x5, 0xc, 0x0, 0x10, 0xd, 0xa, "f79b014e"}, 0x10000, 0x1, {}, 0xb}) socket$kcm(0x10, 0x7, 0x10) 26.341727333s ago: executing program 6 (id=2946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) write$proc_mixer(r2, &(0x7f0000000080)=[{'OGAIN', @void}, {'MONITOR', @void}], 0xe) (async) syz_usb_connect(0x3, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003d1a1310210414017211010203010902330001000000000904b400000202ff0005241c00010524007f000d240f"], 0x0) 26.116340142s ago: executing program 3 (id=2947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)='1\x00', 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) unshare(0x40200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x40400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x7) 24.144561164s ago: executing program 3 (id=2948): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc082, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x60942, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x54}}, 0x0) mount(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080)='virtiofs\x00', 0x2a78411, &(0x7f0000001980)='dax\x00\x00lwayc') r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800fcffffffa7000100ffffffff950000000000000000000099ef6e2ce4ed2e6d6f682f7c6638d9846cc32002bd75a49276e9d1b0de020a81c0024ed19f7ef21752687d39408829828d4dfcce9adc0eaa67fae4de8263c87ab1f7fa3a30b6081bd5723916cb936d7082020db12536d100e19724e45b546432e60f768a1d77e279c597c7ccfe67f488fe1a70a87a5e83e6b30884dacec89494aa2f03b80ab74908ab6be912abc8e0ecb7e79c529ae80d6fd6e7993c11237b303b6676af4661d371d909484b1bd596e7b8648cc04c177b4333f6b6b214cccfb12ddab4829533388280ea818c44ea984d5640dd6731f7c32e8abfe4e045e0a993ee60900b5d8b203db5d58c657ad604a551ee06a64e7c8cf504c54bd81792b640d59441b73ca1398d023657a8acc61850bd3b98fa558cf21af06153"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) 22.828877747s ago: executing program 6 (id=2949): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000000)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x0, 0x80000, {r0}}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) unshare(0x40400) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) unlink(&(0x7f0000000040)='./dev/mtdblock0\x00') close(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) 21.701294995s ago: executing program 6 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x26) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x9, 0x101080) getpid() fstat(r4, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'tX-wX\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 18.854740096s ago: executing program 6 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) (fail_nth: 3) 18.672532445s ago: executing program 3 (id=2952): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17.762080792s ago: executing program 3 (id=2953): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) 16.166983605s ago: executing program 3 (id=2954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) 15.588773329s ago: executing program 6 (id=2955): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x10, '\x00', &(0x7f0000000080)=0x1}) r1 = socket(0x29, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x2000, 0x25dfdbf6, {0xa, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000200)=0xd, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) 15.455460085s ago: executing program 6 (id=2956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='retrans\x00', 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) unshare(0x40200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x40400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x7) 990.636246ms ago: executing program 40 (id=2954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) 0s ago: executing program 41 (id=2956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='retrans\x00', 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) unshare(0x40200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x40400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x7) kernel console output (not intermixed with test programs): 928][T16251] ? rw_verify_area+0x250/0x4d0 [ 1241.989949][T16251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1241.989969][T16251] vfs_read+0x219/0xa90 [ 1241.989996][T16251] ? __pfx_vfs_read+0x10/0x10 [ 1241.990017][T16251] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1241.990045][T16251] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1241.990068][T16251] ? mutex_lock_nested+0x152/0x1d0 [ 1241.990088][T16251] ? fdget_pos+0x252/0x320 [ 1241.990112][T16251] ksys_read+0x156/0x270 [ 1241.990136][T16251] ? __pfx_ksys_read+0x10/0x10 [ 1241.990168][T16251] do_syscall_64+0x166/0x520 [ 1241.990184][T16251] ? trace_irq_disable+0x3b/0x140 [ 1241.990208][T16251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.990227][T16251] ? clear_bhb_loop+0x70/0xc0 [ 1241.990250][T16251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.990268][T16251] RIP: 0033:0x7fa9c39de98e [ 1241.990285][T16251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1241.990301][T16251] RSP: 002b:00007fa9c1c54fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1241.990322][T16251] RAX: ffffffffffffffda RBX: 00007fa9c1c556c0 RCX: 00007fa9c39de98e [ 1241.990337][T16251] RDX: 000000000000000f RSI: 00007fa9c1c550a0 RDI: 0000000000000004 [ 1241.990348][T16251] RBP: 00007fa9c1c55090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.990359][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.990370][T16251] R13: 00007fa9c3ca6128 R14: 00007fa9c3ca6090 R15: 00007ffcc8d26dc8 [ 1241.990397][T16251] [ 1242.768135][T14719] uclogic 0003:2179:0053.000A: failed retrieving string descriptor #100: -71 [ 1242.768198][T14719] uclogic 0003:2179:0053.000A: failed retrieving pen parameters: -71 [ 1242.768337][T14719] uclogic 0003:2179:0053.000A: pen probing failed: -71 [ 1242.768357][T14719] uclogic 0003:2179:0053.000A: failed probing parameters: -71 [ 1242.768459][T14719] uclogic 0003:2179:0053.000A: probe with driver uclogic failed with error -71 [ 1242.819653][T14719] usb 7-1: USB disconnect, device number 64 [ 1243.013173][T15546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.138891][T12209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.138995][T12209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.179621][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.179753][ T8055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.217206][T16257] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2687'. [ 1244.011699][T16269] slcan: can't register candev [ 1247.769317][T16334] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2697'. [ 1248.313320][T16344] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2700'. [ 1248.486252][ T4901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1248.610609][ T4901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1248.632864][ T4901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1248.658624][ T4901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1248.661109][T16331] gadgetfs: bound to dummy_udc driver [ 1248.669120][ T4901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1249.434512][ T993] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1249.435099][ C1] gadgetfs: connected [ 1249.441509][ T993] gadgetfs: disconnected [ 1249.600847][ C1] gadgetfs: connected [ 1249.602053][ T993] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1249.603535][ T993] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1249.603572][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.693963][ C1] gadgetfs: configuration #1 [ 1250.406033][T16331] gadgetfs: suspended from state 3 [ 1250.406377][T16331] gadgetfs: disconnected [ 1250.409026][ T993] usb 1-1: USB disconnect, device number 65 [ 1250.466317][T16368] FAULT_INJECTION: forcing a failure. [ 1250.466317][T16368] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.466354][T16368] CPU: 0 UID: 0 PID: 16368 Comm: syz.9.2698 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1250.466378][T16368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1250.466391][T16368] Call Trace: [ 1250.466400][T16368] [ 1250.466409][T16368] dump_stack_lvl+0xe8/0x150 [ 1250.466446][T16368] should_fail_ex+0x46b/0x600 [ 1250.466480][T16368] should_failslab+0xa8/0x100 [ 1250.466513][T16368] __kmalloc_cache_noprof+0xa1/0x680 [ 1250.466543][T16368] ? ceph_get_tree+0x1b7/0x1a40 [ 1250.466567][T16368] ? ceph_get_tree+0x1b7/0x1a40 [ 1250.466599][T16368] ceph_get_tree+0x1b7/0x1a40 [ 1250.466624][T16368] ? cap_capable+0x123/0x460 [ 1250.466648][T16368] ? safesetid_security_capable+0xa9/0x1a0 [ 1250.466681][T16368] vfs_get_tree+0x92/0x2a0 [ 1250.466709][T16368] vfs_cmd_create+0xa2/0x200 [ 1250.466741][T16368] __se_sys_fsconfig+0x6bf/0x810 [ 1250.466786][T16368] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1250.466818][T16368] ? rcu_is_watching+0x16/0xb0 [ 1250.466857][T16368] ? __x64_sys_fsconfig+0x20/0xc0 [ 1250.466888][T16368] do_syscall_64+0x166/0x520 [ 1250.466909][T16368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.466929][T16368] ? clear_bhb_loop+0x70/0xc0 [ 1250.466954][T16368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.466975][T16368] RIP: 0033:0x7fa9c3a1e159 [ 1250.466995][T16368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.467012][T16368] RSP: 002b:00007fa9c1c76028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1250.467035][T16368] RAX: ffffffffffffffda RBX: 00007fa9c3ca5fa0 RCX: 00007fa9c3a1e159 [ 1250.467050][T16368] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1250.467064][T16368] RBP: 00007fa9c3ab506b R08: 0000000000000000 R09: 0000000000000000 [ 1250.467078][T16368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.467092][T16368] R13: 00007fa9c3ca6038 R14: 00007fa9c3ca5fa0 R15: 00007ffcc8d26dc8 [ 1250.467127][T16368] [ 1250.874802][ T4901] Bluetooth: hci3: command tx timeout [ 1251.835645][T16392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2706'. [ 1251.835671][T16392] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2706'. [ 1251.926915][T16392] misc userio: Invalid payload size [ 1252.800525][T16404] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2709'. [ 1252.944271][ T4901] Bluetooth: hci3: command tx timeout [ 1254.158608][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 1254.158630][ T36] audit: type=1800 audit(1790005262.771:1993): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2710" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1254.439714][T16419] FAULT_INJECTION: forcing a failure. [ 1254.439714][T16419] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.439755][T16419] CPU: 0 UID: 0 PID: 16419 Comm: syz.6.2713 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1254.439784][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1254.439796][T16419] Call Trace: [ 1254.439807][T16419] [ 1254.439818][T16419] dump_stack_lvl+0xe8/0x150 [ 1254.439862][T16419] should_fail_ex+0x46b/0x600 [ 1254.439898][T16419] should_failslab+0xa8/0x100 [ 1254.439936][T16419] __kmalloc_cache_noprof+0xa1/0x680 [ 1254.439973][T16419] ? kobject_uevent_env+0x28c/0x9e0 [ 1254.440003][T16419] ? kobject_uevent_env+0x28c/0x9e0 [ 1254.440036][T16419] kobject_uevent_env+0x28c/0x9e0 [ 1254.440069][T16419] swnode_register+0x4f2/0x590 [ 1254.440222][T16419] fwnode_create_software_node+0x194/0x1f0 [ 1254.440253][T16419] device_create_managed_software_node+0xce/0x1f0 [ 1254.440285][T16419] iommufd_test+0x38a8/0x6370 [ 1254.440361][T16419] ? __lock_acquire+0x747/0x2de0 [ 1254.440393][T16419] ? __pfx_iommufd_test+0x10/0x10 [ 1254.440427][T16419] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1254.440456][T16419] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1254.440483][T16419] ? lock_acquire+0x115/0x350 [ 1254.440539][T16419] iommufd_fops_ioctl+0x468/0x600 [ 1254.440615][T16419] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1254.440652][T16419] ? __fget_files+0x2a/0x420 [ 1254.440679][T16419] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1254.440703][T16419] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1254.440727][T16419] __se_sys_ioctl+0xff/0x170 [ 1254.440753][T16419] do_syscall_64+0x166/0x520 [ 1254.440774][T16419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.440797][T16419] ? clear_bhb_loop+0x70/0xc0 [ 1254.440821][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.440841][T16419] RIP: 0033:0x7f5cc8b3e159 [ 1254.440862][T16419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.440885][T16419] RSP: 002b:00007f5cc6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1254.440915][T16419] RAX: ffffffffffffffda RBX: 00007f5cc8dc5fa0 RCX: 00007f5cc8b3e159 [ 1254.440935][T16419] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 1254.440955][T16419] RBP: 00007f5cc8bd506b R08: 0000000000000000 R09: 0000000000000000 [ 1254.440971][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.440984][T16419] R13: 00007f5cc8dc6038 R14: 00007f5cc8dc5fa0 R15: 00007ffc9ed72328 [ 1254.441017][T16419] [ 1254.737156][T16419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1255.029934][ T4901] Bluetooth: hci3: command tx timeout [ 1256.194163][ T5876] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1256.270843][T15791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1256.329421][T15791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1256.393372][ T5876] usb 10-1: not running at top speed; connect to a high speed hub [ 1256.393415][ T5876] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1256.395372][ T5876] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1256.395405][ T5876] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1256.421737][ T5876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.421767][ T5876] usb 10-1: Product: syz [ 1256.421781][ T5876] usb 10-1: Manufacturer: syz [ 1256.421878][ T5876] usb 10-1: SerialNumber: syz [ 1256.466212][ T5876] oti6858 10-1:1.0: oti6858 converter detected [ 1256.487779][T15791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1256.592306][ T5876] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 1256.720366][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.723766][T15791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1256.741828][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.797701][T16443] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 1257.005570][T15791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1257.113834][ T4901] Bluetooth: hci3: command tx timeout [ 1257.229954][ T4901] Bluetooth: hci2: ISO packet too small [ 1257.994519][T15791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1259.016008][T15791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1259.080412][ T5876] usb 10-1: USB disconnect, device number 15 [ 1259.185341][T15791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1259.367184][ T5876] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1259.406631][ T5876] oti6858 10-1:1.0: device disconnected [ 1259.520085][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2723'. [ 1260.594163][ T993] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1260.765368][ T993] usb 4-1: Using ep0 maxpacket: 8 [ 1260.768183][ T993] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1260.771466][ T993] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1260.771495][ T993] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1260.771514][ T993] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1260.771534][ T993] usb 4-1: config 250 has no interface number 0 [ 1260.771600][ T993] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1260.771625][ T993] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1260.771649][ T993] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1260.771670][ T993] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1260.771693][ T993] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1260.771719][ T993] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1260.774127][ T993] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1260.774156][ T993] usb 4-1: Product: syz [ 1260.774171][ T993] usb 4-1: SerialNumber: syz [ 1260.833589][ T993] hub 4-1:250.228: bad descriptor, ignoring hub [ 1260.833629][ T993] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1262.050885][ T4901] Bluetooth: hci2: ISO packet too small [ 1263.056075][ T993] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1263.159788][T16527] FAULT_INJECTION: forcing a failure. [ 1263.159788][T16527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.159819][T16527] CPU: 0 UID: 0 PID: 16527 Comm: syz.6.2731 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1263.159837][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1263.159846][T16527] Call Trace: [ 1263.159852][T16527] [ 1263.159859][T16527] dump_stack_lvl+0xe8/0x150 [ 1263.159889][T16527] should_fail_ex+0x46b/0x600 [ 1263.159912][T16527] _copy_from_user+0x2d/0xb0 [ 1263.159933][T16527] comedi_unlocked_ioctl+0x603/0x1af0 [ 1263.160113][T16527] ? kasan_quarantine_put+0xbb/0x1f0 [ 1263.160135][T16527] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1263.160169][T16527] ? do_vfs_ioctl+0x1184/0x1550 [ 1263.160191][T16527] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1263.160212][T16527] ? __pfx_smack_log+0x10/0x10 [ 1263.160238][T16527] ? smk_tskacc+0x2fb/0x370 [ 1263.160258][T16527] ? smack_file_ioctl+0x265/0x370 [ 1263.160276][T16527] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1263.160300][T16527] ? __fget_files+0x2a/0x420 [ 1263.160314][T16527] ? __fget_files+0x3a8/0x420 [ 1263.160326][T16527] ? __fget_files+0x2a/0x420 [ 1263.160343][T16527] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1263.160360][T16527] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1263.160379][T16527] __se_sys_ioctl+0xff/0x170 [ 1263.160400][T16527] do_syscall_64+0x166/0x520 [ 1263.160414][T16527] ? trace_irq_disable+0x3b/0x140 [ 1263.160432][T16527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.160447][T16527] ? clear_bhb_loop+0x70/0xc0 [ 1263.160466][T16527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.160481][T16527] RIP: 0033:0x7f5cc8b3e159 [ 1263.160497][T16527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.160510][T16527] RSP: 002b:00007f5cc6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.160528][T16527] RAX: ffffffffffffffda RBX: 00007f5cc8dc5fa0 RCX: 00007f5cc8b3e159 [ 1263.160540][T16527] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1263.160550][T16527] RBP: 00007f5cc6d96090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.160560][T16527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.160569][T16527] R13: 00007f5cc8dc6038 R14: 00007f5cc8dc5fa0 R15: 00007ffc9ed72328 [ 1263.160594][T16527] [ 1263.744425][ T8057] bridge_slave_1: left allmulticast mode [ 1263.744463][ T8057] bridge_slave_1: left promiscuous mode [ 1263.744720][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.846135][ T8057] bridge_slave_0: left allmulticast mode [ 1263.846192][ T8057] bridge_slave_0: left promiscuous mode [ 1263.846393][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.730566][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1264.762830][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1264.802578][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1264.803681][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1264.841072][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1265.065173][ T8057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.125266][ T8057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.172290][ T8057] bond0 (unregistering): Released all slaves [ 1265.920797][T14719] usb 4-1: USB disconnect, device number 16 [ 1265.926523][T16345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.926642][T16345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.926842][T16345] bridge_slave_0: entered allmulticast mode [ 1265.945576][T16345] bridge_slave_0: entered promiscuous mode [ 1266.027330][T16345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.027833][T16345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.030795][T16345] bridge_slave_1: entered allmulticast mode [ 1266.120122][T14719] usblp0: removed [ 1266.137870][T16345] bridge_slave_1: entered promiscuous mode [ 1266.343053][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2735'. [ 1266.668527][T16345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.701761][T16345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.895124][ T4901] Bluetooth: hci1: command tx timeout [ 1267.604253][ T5710] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1267.724628][ T8057] hsr_slave_0: left promiscuous mode [ 1267.744702][T14806] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 1267.745044][ T8057] hsr_slave_1: left promiscuous mode [ 1267.746127][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.776725][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1267.776793][ T5710] usb 4-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 1267.783008][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.783025][ T5710] usb 4-1: Product: syz [ 1267.783033][ T5710] usb 4-1: Manufacturer: syz [ 1267.783040][ T5710] usb 4-1: SerialNumber: syz [ 1267.837539][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.915115][T14806] usb 7-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 1267.916425][T14806] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1267.916449][T14806] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1267.916506][T14806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.105836][T16569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.111161][T16569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.192259][T16569] FAULT_INJECTION: forcing a failure. [ 1268.192259][T16569] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.192299][T16569] CPU: 0 UID: 0 PID: 16569 Comm: syz.3.2739 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1268.192324][T16569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1268.192337][T16569] Call Trace: [ 1268.192347][T16569] [ 1268.192356][T16569] dump_stack_lvl+0xe8/0x150 [ 1268.192392][T16569] should_fail_ex+0x46b/0x600 [ 1268.192425][T16569] should_failslab+0xa8/0x100 [ 1268.192459][T16569] __kmalloc_noprof+0xfb/0x790 [ 1268.192488][T16569] ? __memcg_list_lru_alloc+0x211/0x830 [ 1268.192507][T16569] ? __memcg_list_lru_alloc+0x211/0x830 [ 1268.192534][T16569] __memcg_list_lru_alloc+0x211/0x830 [ 1268.192560][T16569] ? xa_load+0x60/0x210 [ 1268.192587][T16569] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 1268.192626][T16569] __memcg_slab_post_alloc_hook+0x407/0xde0 [ 1268.192658][T16569] ? __memcg_slab_post_alloc_hook+0x24b/0xde0 [ 1268.192698][T16569] ? hugetlbfs_alloc_inode+0xef/0x130 [ 1268.192761][T16569] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 1268.192788][T16569] ? hugetlbfs_alloc_inode+0xef/0x130 [ 1268.192811][T16569] ? hugetlbfs_alloc_inode+0xef/0x130 [ 1268.192843][T16569] hugetlbfs_alloc_inode+0xef/0x130 [ 1268.192869][T16569] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1268.192892][T16569] alloc_inode+0x6a/0x1b0 [ 1268.192914][T16569] new_inode+0x1f/0x170 [ 1268.192939][T16569] hugetlbfs_fill_super+0x51d/0x940 [ 1268.192970][T16569] ? __pfx_hugetlbfs_fill_super+0x10/0x10 [ 1268.192995][T16569] get_tree_nodev+0xbb/0x150 [ 1268.193030][T16569] vfs_get_tree+0x92/0x2a0 [ 1268.193059][T16569] vfs_cmd_create+0xa2/0x200 [ 1268.193093][T16569] __se_sys_fsconfig+0x6bf/0x810 [ 1268.193129][T16569] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1268.193161][T16569] ? rcu_is_watching+0x16/0xb0 [ 1268.193219][T16569] ? __x64_sys_fsconfig+0x20/0xc0 [ 1268.193252][T16569] do_syscall_64+0x166/0x520 [ 1268.193272][T16569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.193293][T16569] ? clear_bhb_loop+0x70/0xc0 [ 1268.193320][T16569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.193340][T16569] RIP: 0033:0x7fbb8773e159 [ 1268.193360][T16569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.193379][T16569] RSP: 002b:00007fbb85975028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1268.193402][T16569] RAX: ffffffffffffffda RBX: 00007fbb879c6090 RCX: 00007fbb8773e159 [ 1268.193419][T16569] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000b [ 1268.193432][T16569] RBP: 00007fbb877d506b R08: 0000000000000000 R09: 0000000000000000 [ 1268.193447][T16569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1268.193460][T16569] R13: 00007fbb879c6128 R14: 00007fbb879c6090 R15: 00007ffeab1f0208 [ 1268.193495][T16569] [ 1268.641416][ T36] audit: type=1800 audit(1790005277.491:1994): pid=16570 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2739" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 1268.911203][T16572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.911834][T16572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.944870][ T4901] Bluetooth: hci1: command tx timeout [ 1269.135098][T14806] pegasus 7-1:1.0: probe with driver pegasus failed with error -121 [ 1269.245494][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 1269.309197][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 1269.642396][T16345] team0: Port device team_slave_0 added [ 1269.707093][T16345] team0: Port device team_slave_1 added [ 1269.854438][T14806] usb 7-1: USB disconnect, device number 65 [ 1269.986934][T16345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.986953][T16345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.988205][T16345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.003107][T16345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.003124][T16345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.003152][T16345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.051806][ T4901] Bluetooth: hci1: command tx timeout [ 1272.194809][T14719] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1272.345621][T14719] usb 10-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1272.347224][T14719] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1272.347257][T14719] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.347294][T14719] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.377358][ T5710] usb 4-1: USB disconnect, device number 17 [ 1272.408380][T14719] usb 10-1: config 0 descriptor?? [ 1272.455078][T16345] hsr_slave_0: entered promiscuous mode [ 1272.558552][T16345] hsr_slave_1: entered promiscuous mode [ 1272.571331][T16345] debugfs: 'hsr0' already exists in 'hsr' [ 1272.571781][T16345] Cannot create hsr debugfs directory [ 1272.881939][T14719] usbhid 10-1:0.0: can't add hid device: -71 [ 1272.882016][T14719] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1272.934780][T14719] usb 10-1: USB disconnect, device number 16 [ 1273.665408][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1274.065507][ T5590] Bluetooth: hci1: command tx timeout [ 1274.324967][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2746'. [ 1276.261663][ T5876] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1276.426729][ T5876] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1276.428987][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.505160][ T5876] usb 10-1: config 0 descriptor?? [ 1276.525406][ T5876] cp210x 10-1:0.0: cp210x converter detected [ 1276.736193][ T5876] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1276.736214][ T5876] cp210x 10-1:0.0: querying part number failed [ 1276.793132][T16633] FAULT_INJECTION: forcing a failure. [ 1276.793132][T16633] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.793172][T16633] CPU: 1 UID: 0 PID: 16633 Comm: syz.3.2748 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1276.793197][T16633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1276.793208][T16633] Call Trace: [ 1276.793217][T16633] [ 1276.793227][T16633] dump_stack_lvl+0xe8/0x150 [ 1276.793291][T16633] should_fail_ex+0x46b/0x600 [ 1276.793322][T16633] ? __d_alloc+0x37/0x6f0 [ 1276.793346][T16633] should_failslab+0xa8/0x100 [ 1276.793378][T16633] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1276.793405][T16633] ? __d_alloc+0x37/0x6f0 [ 1276.793433][T16633] __d_alloc+0x37/0x6f0 [ 1276.793462][T16633] d_alloc_pseudo+0x21/0xc0 [ 1276.793488][T16633] alloc_path_pseudo+0x107/0x220 [ 1276.793522][T16633] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1276.793551][T16633] ? reacquire_held_locks+0x117/0x1a0 [ 1276.793580][T16633] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1276.793615][T16633] alloc_file_pseudo+0xa8/0x1e0 [ 1276.793648][T16633] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1276.793692][T16633] anon_inode_getfile+0xc5/0x1a0 [ 1276.793728][T16633] do_epoll_create+0x2fc/0x440 [ 1276.793759][T16633] __x64_sys_epoll_create1+0x37/0x40 [ 1276.793784][T16633] do_syscall_64+0x166/0x520 [ 1276.793802][T16633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.793823][T16633] ? clear_bhb_loop+0x70/0xc0 [ 1276.793848][T16633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.793868][T16633] RIP: 0033:0x7fbb8773e159 [ 1276.793889][T16633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.793907][T16633] RSP: 002b:00007fbb85996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 1276.793930][T16633] RAX: ffffffffffffffda RBX: 00007fbb879c5fa0 RCX: 00007fbb8773e159 [ 1276.793946][T16633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1276.793959][T16633] RBP: 00007fbb877d506b R08: 0000000000000000 R09: 0000000000000000 [ 1276.793973][T16633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.793986][T16633] R13: 00007fbb879c6038 R14: 00007fbb879c5fa0 R15: 00007ffeab1f0208 [ 1276.794019][T16633] [ 1276.807774][ T5876] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1279.539551][ T5876] usb 10-1: USB disconnect, device number 17 [ 1279.612030][ T9] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1279.702545][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1279.711943][ T5876] cp210x 10-1:0.0: device disconnected [ 1279.758250][ T9] usb 7-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1279.760023][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1279.760058][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.760095][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.824008][ T9] usb 7-1: config 0 descriptor?? [ 1280.269018][ T9] hid_parser_main: 295 callbacks suppressed [ 1280.269045][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.269077][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.269104][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.269130][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.269156][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.269182][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.269209][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.269235][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.269261][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.269288][ T9] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 1280.408115][ T9] wacom 0003:056A:5012.000B: item fetching failed at offset 482/483 [ 1280.408698][ T9] wacom 0003:056A:5012.000B: parse failed [ 1280.408801][ T9] wacom 0003:056A:5012.000B: probe with driver wacom failed with error -22 [ 1280.492737][ T9] usb 7-1: USB disconnect, device number 66 [ 1280.676719][T16662] gadgetfs: bound to dummy_udc driver [ 1281.133634][T16666] FAULT_INJECTION: forcing a failure. [ 1281.133634][T16666] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.133671][T16666] CPU: 0 UID: 0 PID: 16666 Comm: syz.9.2757 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1281.133705][T16666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1281.133718][T16666] Call Trace: [ 1281.133727][T16666] [ 1281.133737][T16666] dump_stack_lvl+0xe8/0x150 [ 1281.133774][T16666] should_fail_ex+0x46b/0x600 [ 1281.133808][T16666] should_failslab+0xa8/0x100 [ 1281.133845][T16666] __kmalloc_cache_noprof+0xa1/0x680 [ 1281.133873][T16666] ? do_epoll_create+0x75/0x440 [ 1281.133899][T16666] ? do_epoll_create+0x75/0x440 [ 1281.133930][T16666] do_epoll_create+0x75/0x440 [ 1281.133960][T16666] __x64_sys_epoll_create1+0x37/0x40 [ 1281.133980][T16666] do_syscall_64+0x166/0x520 [ 1281.133997][T16666] ? trace_irq_disable+0x3b/0x140 [ 1281.134018][T16666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.134035][T16666] ? clear_bhb_loop+0x70/0xc0 [ 1281.134055][T16666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.134073][T16666] RIP: 0033:0x7fa9c3a1e159 [ 1281.134091][T16666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.134108][T16666] RSP: 002b:00007fa9c1c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 1281.134129][T16666] RAX: ffffffffffffffda RBX: 00007fa9c3ca5fa0 RCX: 00007fa9c3a1e159 [ 1281.134143][T16666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1281.134154][T16666] RBP: 00007fa9c3ab506b R08: 0000000000000000 R09: 0000000000000000 [ 1281.134168][T16666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.134181][T16666] R13: 00007fa9c3ca6038 R14: 00007fa9c3ca5fa0 R15: 00007ffcc8d26dc8 [ 1281.134210][T16666] [ 1284.465649][T16694] 9p: Bad value for 'rfdno' [ 1284.591697][T16690] gadgetfs: bound to dummy_udc driver [ 1284.874425][T14842] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1284.874689][ C1] gadgetfs: connected [ 1284.874918][T14842] gadgetfs: disconnected [ 1285.105788][T11786] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1285.179131][ C1] gadgetfs: connected [ 1285.180526][T14842] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1285.183429][T14842] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1285.183470][T14842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.276869][T11786] usb 10-1: not running at top speed; connect to a high speed hub [ 1285.276914][T11786] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1285.279241][T11786] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1285.279274][T11786] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1285.343829][T11786] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.343858][T11786] usb 10-1: Product: syz [ 1285.343873][T11786] usb 10-1: Manufacturer: syz [ 1285.343888][T11786] usb 10-1: SerialNumber: syz [ 1285.386277][ C1] gadgetfs: configuration #1 [ 1285.387171][T16690] gadgetfs: suspended from state 3 [ 1285.415481][T11786] oti6858 10-1:1.0: oti6858 converter detected [ 1285.416808][T16690] gadgetfs: disconnected [ 1285.472701][T14842] usb 1-1: USB disconnect, device number 66 [ 1285.501268][T11786] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 1285.732595][T16701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.755274][T16696] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 1285.757565][T16701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.412099][T16701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.412616][T16701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.590765][T16711] gadgetfs: bound to dummy_udc driver [ 1286.675793][T16537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.675871][T16537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.676020][T16537] bridge_slave_0: entered allmulticast mode [ 1286.682900][T16537] bridge_slave_0: entered promiscuous mode [ 1286.691496][T16720] random: crng reseeded on system resumption [ 1287.376108][ T5876] usb 10-1: USB disconnect, device number 18 [ 1287.394218][ T5876] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1287.410064][ T5876] oti6858 10-1:1.0: device disconnected [ 1288.156170][T16537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.156296][T16537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.156611][T16537] bridge_slave_1: entered allmulticast mode [ 1288.169920][T16537] bridge_slave_1: entered promiscuous mode [ 1288.194466][T16727] tipc: Enabling of bearer rejected, failed to enable media [ 1288.531588][T16537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.600614][T16747] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2769'. [ 1288.950308][T16537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.988990][T16537] team0: Port device team_slave_0 added [ 1291.365032][T16537] team0: Port device team_slave_1 added [ 1293.150934][T16537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.150948][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.150962][T16537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.226879][T16537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.226915][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.226942][T16537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.339468][T16537] hsr_slave_0: entered promiscuous mode [ 1296.343013][T16537] hsr_slave_1: entered promiscuous mode [ 1296.356087][T16537] debugfs: 'hsr0' already exists in 'hsr' [ 1296.356121][T16537] Cannot create hsr debugfs directory [ 1296.356368][T16775] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1296.815383][ T5606] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1296.973713][ T5606] usb 7-1: not running at top speed; connect to a high speed hub [ 1296.973743][ T5606] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1296.976896][ T5606] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1296.976930][ T5606] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1296.988837][ T5606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.988866][ T5606] usb 7-1: Product: syz [ 1296.988880][ T5606] usb 7-1: Manufacturer: syz [ 1296.988895][ T5606] usb 7-1: SerialNumber: syz [ 1297.046327][ T5606] oti6858 7-1:1.0: oti6858 converter detected [ 1297.075227][ T5606] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 1297.305809][T16795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.342559][T16795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.352226][T16791] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 1298.003008][T16799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.032070][T16799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.913238][T14842] usb 7-1: USB disconnect, device number 67 [ 1300.061792][T14842] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1300.073680][T14842] oti6858 7-1:1.0: device disconnected [ 1300.152114][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.152221][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.872921][T16818] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2779'. [ 1301.970477][T16345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1302.019480][T16345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1302.404926][ T8057] bridge_slave_1: left allmulticast mode [ 1302.404967][ T8057] bridge_slave_1: left promiscuous mode [ 1302.405161][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.590257][ T8057] bridge_slave_0: left allmulticast mode [ 1302.590300][ T8057] bridge_slave_0: left promiscuous mode [ 1302.590561][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.131917][ T8057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.360261][ T4901] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1307.438963][ T4901] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1307.444192][ T4901] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1307.465160][ T4901] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1307.472878][ T4901] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1307.698345][ T8057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.823776][ T8057] bond0 (unregistering): Released all slaves [ 1307.900267][T16345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1308.002466][T16345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1308.493907][ T4901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1308.569692][ T4901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1308.604205][ T4901] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1308.622216][ T4901] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1308.622917][ T4901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1309.782667][ T5590] Bluetooth: hci6: command tx timeout [ 1310.948900][ T5590] Bluetooth: hci7: command tx timeout [ 1311.856884][ T5590] Bluetooth: hci6: command tx timeout [ 1313.035113][ T5590] Bluetooth: hci7: command tx timeout [ 1313.057767][ T8057] hsr_slave_0: left promiscuous mode [ 1313.122327][ T8057] hsr_slave_1: left promiscuous mode [ 1313.126280][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.165724][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.791253][T16900] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2788'. [ 1313.905911][ T5590] Bluetooth: hci6: command tx timeout [ 1315.533442][ T5590] Bluetooth: hci7: command tx timeout [ 1315.984610][ T5590] Bluetooth: hci6: command tx timeout [ 1317.592982][ T5590] Bluetooth: hci7: command tx timeout [ 1317.863122][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 1317.928033][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 1320.398874][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1323.752605][ T5590] Bluetooth: hci2: command 0x0406 tx timeout [ 1323.770593][T16932] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1324.058487][T16952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2798'. [ 1324.379837][T16932] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1324.839513][T16932] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1325.160152][T16932] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1325.161305][T16932] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1325.302285][T16932] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1325.361354][T16932] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1325.632796][T16932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1325.632930][T16932] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1325.836207][ T5590] Bluetooth: hci2: command 0x0406 tx timeout [ 1325.921564][T16932] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1326.248060][T16932] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1326.251028][T16932] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1326.479028][T16932] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1326.702253][T16932] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1326.702408][T16932] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1326.908311][T16932] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1327.184830][ T5590] Bluetooth: hci4: command 0x0406 tx timeout [ 1327.346994][ T5590] Bluetooth: hci5: command 0x0406 tx timeout [ 1327.542661][ T4901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1327.684354][ T4901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1327.708637][ T4901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1327.736237][ T4901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1327.736937][ T4901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1327.909094][ T5590] Bluetooth: hci2: command 0x0406 tx timeout [ 1328.278824][T16974] gadgetfs: bound to dummy_udc driver [ 1328.334679][ T4901] Bluetooth: hci6: command 0x0c1a tx timeout [ 1328.515112][ T5606] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1328.515413][ C0] gadgetfs: connected [ 1328.531001][ T5606] gadgetfs: disconnected [ 1328.704214][ T4901] Bluetooth: hci7: command 0x0c1a tx timeout [ 1329.264684][ T4901] Bluetooth: hci4: command 0x0406 tx timeout [ 1330.747748][ T5590] Bluetooth: hci5: command 0x0406 tx timeout [ 1330.747790][ T5590] Bluetooth: hci6: command 0x0c1a tx timeout [ 1330.747794][ T4901] Bluetooth: hci3: command tx timeout [ 1330.784228][T15801] Bluetooth: hci7: command 0x0c1a tx timeout [ 1331.493598][T17004] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2802'. [ 1332.785295][ T4901] Bluetooth: hci3: command tx timeout [ 1332.785332][ T4901] Bluetooth: hci6: command 0x0c1a tx timeout [ 1332.868901][ T5590] Bluetooth: hci7: command 0x0c1a tx timeout [ 1333.347565][T17012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1333.614233][ T5876] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1333.777197][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1333.777953][ T5876] usb 4-1: not running at top speed; connect to a high speed hub [ 1333.777992][ T5876] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 1333.818659][ T5876] usb 4-1: config 8 has an invalid interface number: 43 but max is 0 [ 1333.818677][ T5876] usb 4-1: config 8 has no interface number 0 [ 1333.818704][ T5876] usb 4-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 1333.818721][ T5876] usb 4-1: config 8 interface 43 has no altsetting 0 [ 1333.860386][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.860415][ T5876] usb 4-1: Product: syz [ 1333.860430][ T5876] usb 4-1: Manufacturer: syz [ 1333.860445][ T5876] usb 4-1: SerialNumber: syz [ 1334.697771][ T5876] ums-alauda 4-1:8.43: USB Mass Storage device detected [ 1334.880276][ T5590] Bluetooth: hci3: command tx timeout [ 1334.897652][T14842] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 1335.003504][ T5876] scsi host1: usb-storage 4-1:8.43 [ 1335.097368][T14842] usb 7-1: not running at top speed; connect to a high speed hub [ 1335.097411][T14842] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1335.098844][T14842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1335.098877][T14842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1335.103620][T14842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.103716][T14842] usb 7-1: Product: syz [ 1335.103731][T14842] usb 7-1: Manufacturer: syz [ 1335.103745][T14842] usb 7-1: SerialNumber: syz [ 1335.254516][T14842] oti6858 7-1:1.0: oti6858 converter detected [ 1335.302314][T14842] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 1335.346712][ T5876] usb 4-1: USB disconnect, device number 18 [ 1335.577146][T17023] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 1335.599329][T17030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.627129][T17030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.688624][T17031] FAULT_INJECTION: forcing a failure. [ 1335.688624][T17031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.688659][T17031] CPU: 0 UID: 0 PID: 17031 Comm: syz.3.2806 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1335.688682][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1335.688693][T17031] Call Trace: [ 1335.688702][T17031] [ 1335.688711][T17031] dump_stack_lvl+0xe8/0x150 [ 1335.688747][T17031] should_fail_ex+0x46b/0x600 [ 1335.688777][T17031] _copy_from_iter+0x1d3/0x1660 [ 1335.688812][T17031] ? __pfx__copy_from_iter+0x10/0x10 [ 1335.688835][T17031] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 1335.688863][T17031] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1335.688888][T17031] ? skb_put+0x112/0x210 [ 1335.688912][T17031] hci_sock_sendmsg+0x42a/0xf50 [ 1335.688939][T17031] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1335.688968][T17031] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1335.688985][T17031] sock_sendmsg_nosec+0x13a/0x180 [ 1335.689010][T17031] sock_write_iter+0x2e4/0x3f0 [ 1335.689034][T17031] ? __pfx_sock_write_iter+0x10/0x10 [ 1335.689063][T17031] ? bpf_lsm_file_permission+0x9/0x20 [ 1335.689093][T17031] ? security_file_permission+0x75/0x260 [ 1335.689121][T17031] vfs_write+0x61e/0xbb0 [ 1335.689152][T17031] ? __pfx_vfs_write+0x10/0x10 [ 1335.689183][T17031] ? __fget_files+0x2a/0x420 [ 1335.689211][T17031] ksys_write+0x156/0x270 [ 1335.689235][T17031] ? __pfx_ksys_write+0x10/0x10 [ 1335.689267][T17031] do_syscall_64+0x166/0x520 [ 1335.689286][T17031] ? trace_irq_disable+0x3b/0x140 [ 1335.689308][T17031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.689328][T17031] ? clear_bhb_loop+0x70/0xc0 [ 1335.689350][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.689368][T17031] RIP: 0033:0x7fbb8773e159 [ 1335.689386][T17031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.689402][T17031] RSP: 002b:00007fbb85996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1335.689422][T17031] RAX: ffffffffffffffda RBX: 00007fbb879c5fa0 RCX: 00007fbb8773e159 [ 1335.689437][T17031] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 1335.689449][T17031] RBP: 00007fbb85996090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.689461][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.689473][T17031] R13: 00007fbb879c6038 R14: 00007fbb879c5fa0 R15: 00007ffeab1f0208 [ 1335.689503][T17031] [ 1336.502402][T17023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.502775][T17023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.947607][ T5590] Bluetooth: hci3: command tx timeout [ 1337.073072][ T5606] usb 7-1: USB disconnect, device number 68 [ 1337.129180][T16837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.129301][T16837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.129932][T16837] bridge_slave_0: entered allmulticast mode [ 1337.143875][T16837] bridge_slave_0: entered promiscuous mode [ 1337.279445][ T5606] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1337.281975][ T5606] oti6858 7-1:1.0: device disconnected [ 1337.409082][T17051] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2810'. [ 1337.556462][T16837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.556667][T16837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.556881][T16837] bridge_slave_1: entered allmulticast mode [ 1337.608328][T16837] bridge_slave_1: entered promiscuous mode [ 1337.625631][T16846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.625753][T16846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.625956][T16846] bridge_slave_0: entered allmulticast mode [ 1337.629291][T16846] bridge_slave_0: entered promiscuous mode [ 1337.830398][T17055] FAULT_INJECTION: forcing a failure. [ 1337.830398][T17055] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.830436][T17055] CPU: 1 UID: 0 PID: 17055 Comm: syz.6.2811 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1337.830461][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1337.830475][T17055] Call Trace: [ 1337.830484][T17055] [ 1337.830493][T17055] dump_stack_lvl+0xe8/0x150 [ 1337.830530][T17055] should_fail_ex+0x46b/0x600 [ 1337.830564][T17055] should_failslab+0xa8/0x100 [ 1337.830602][T17055] __kmalloc_cache_noprof+0xa1/0x680 [ 1337.830632][T17055] ? do_epoll_create+0x75/0x440 [ 1337.830660][T17055] ? do_epoll_create+0x75/0x440 [ 1337.830695][T17055] do_epoll_create+0x75/0x440 [ 1337.830725][T17055] __x64_sys_epoll_create1+0x37/0x40 [ 1337.830758][T17055] do_syscall_64+0x166/0x520 [ 1337.830778][T17055] ? trace_irq_disable+0x3b/0x140 [ 1337.830804][T17055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.830826][T17055] ? clear_bhb_loop+0x70/0xc0 [ 1337.830851][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.830873][T17055] RIP: 0033:0x7f5cc8b3e159 [ 1337.830892][T17055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.830910][T17055] RSP: 002b:00007f5cc6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 1337.830933][T17055] RAX: ffffffffffffffda RBX: 00007f5cc8dc5fa0 RCX: 00007f5cc8b3e159 [ 1337.830949][T17055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.830963][T17055] RBP: 00007f5cc8bd506b R08: 0000000000000000 R09: 0000000000000000 [ 1337.830977][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1337.830990][T17055] R13: 00007f5cc8dc6038 R14: 00007f5cc8dc5fa0 R15: 00007ffc9ed72328 [ 1337.831023][T17055] [ 1338.200369][T16846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.200575][T16846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.200838][T16846] bridge_slave_1: entered allmulticast mode [ 1338.203838][T16846] bridge_slave_1: entered promiscuous mode [ 1338.500512][T17059] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2812'. [ 1339.312696][T17063] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2813'. [ 1339.541193][T17066] gadgetfs: bound to dummy_udc driver [ 1339.738730][T16837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.774830][ T5606] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1339.775090][ C0] gadgetfs: connected [ 1339.775347][ T5606] gadgetfs: disconnected [ 1339.828934][T16837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.833701][T16846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.924850][ C0] gadgetfs: connected [ 1339.926748][ T5606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1339.927156][ T5606] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1339.927194][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.009644][ C0] gadgetfs: configuration #1 [ 1340.148093][T16846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.338972][T16837] team0: Port device team_slave_0 added [ 1340.357632][T17068] gadgetfs: suspended from state 3 [ 1340.358295][T17068] gadgetfs: disconnected [ 1340.359083][ T5710] usb 1-1: USB disconnect, device number 69 [ 1340.461656][T17075] FAULT_INJECTION: forcing a failure. [ 1340.461656][T17075] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.461681][T17075] CPU: 0 UID: 0 PID: 17075 Comm: syz.6.2816 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1340.461694][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1340.461701][T17075] Call Trace: [ 1340.461706][T17075] [ 1340.461712][T17075] dump_stack_lvl+0xe8/0x150 [ 1340.461732][T17075] should_fail_ex+0x46b/0x600 [ 1340.461750][T17075] should_failslab+0xa8/0x100 [ 1340.461768][T17075] __kmalloc_cache_noprof+0xa1/0x680 [ 1340.461783][T17075] ? nvmf_dev_write+0x246/0x2da0 [ 1340.461905][T17075] ? nvmf_dev_write+0x246/0x2da0 [ 1340.461927][T17075] ? nvmf_dev_write+0x151/0x2da0 [ 1340.461948][T17075] nvmf_dev_write+0x246/0x2da0 [ 1340.461963][T17075] ? is_bpf_text_address+0x292/0x2b0 [ 1340.461981][T17075] ? is_bpf_text_address+0x26/0x2b0 [ 1340.461998][T17075] ? kernel_text_address+0xa5/0xe0 [ 1340.462011][T17075] ? __kernel_text_address+0xd/0x30 [ 1340.462023][T17075] ? unwind_get_return_address+0x4d/0x90 [ 1340.462037][T17075] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1340.462053][T17075] ? __lock_acquire+0x747/0x2de0 [ 1340.462071][T17075] ? __pfx_nvmf_dev_write+0x10/0x10 [ 1340.462085][T17075] ? kstrtoull+0x137/0x1d0 [ 1340.462099][T17075] ? kstrtouint+0x6e/0xe0 [ 1340.462114][T17075] ? __lock_acquire+0x747/0x2de0 [ 1340.462130][T17075] ? __lock_acquire+0x747/0x2de0 [ 1340.462148][T17075] ? bpf_lsm_file_permission+0x9/0x20 [ 1340.462159][T17075] ? security_file_permission+0x75/0x260 [ 1340.462174][T17075] ? rw_verify_area+0x209/0x4d0 [ 1340.462187][T17075] ? __pfx_nvmf_dev_write+0x10/0x10 [ 1340.462199][T17075] vfs_write+0x29f/0xbb0 [ 1340.462215][T17075] ? __pfx_vfs_write+0x10/0x10 [ 1340.462227][T17075] ? __fget_files+0x2a/0x420 [ 1340.462240][T17075] ? __fget_files+0x2a/0x420 [ 1340.462250][T17075] ? __fget_files+0x3a8/0x420 [ 1340.462260][T17075] ? __fget_files+0x2a/0x420 [ 1340.462275][T17075] ksys_write+0x156/0x270 [ 1340.462288][T17075] ? __pfx_ksys_write+0x10/0x10 [ 1340.462306][T17075] do_syscall_64+0x166/0x520 [ 1340.462317][T17075] ? trace_irq_disable+0x3b/0x140 [ 1340.462329][T17075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.462340][T17075] ? clear_bhb_loop+0x70/0xc0 [ 1340.462353][T17075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.462363][T17075] RIP: 0033:0x7f5cc8b3e159 [ 1340.462375][T17075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.462383][T17075] RSP: 002b:00007f5cc6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1340.462396][T17075] RAX: ffffffffffffffda RBX: 00007f5cc8dc5fa0 RCX: 00007f5cc8b3e159 [ 1340.462405][T17075] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003 [ 1340.462412][T17075] RBP: 00007f5cc6d96090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.462418][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.462425][T17075] R13: 00007f5cc8dc6038 R14: 00007f5cc8dc5fa0 R15: 00007ffc9ed72328 [ 1340.462442][T17075] [ 1340.480755][T16837] team0: Port device team_slave_1 added [ 1340.486003][T16846] team0: Port device team_slave_0 added [ 1340.600458][T16846] team0: Port device team_slave_1 added [ 1341.006641][T16837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.006660][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.006687][T16837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.204408][ T8057] bridge_slave_1: left allmulticast mode [ 1341.204447][ T8057] bridge_slave_1: left promiscuous mode [ 1341.209634][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.356189][ T8057] bridge_slave_0: left allmulticast mode [ 1341.356228][ T8057] bridge_slave_0: left promiscuous mode [ 1341.356517][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.277405][T17094] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2821'. [ 1343.028080][ T8057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.096956][ T8057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.147449][ T8057] bond0 (unregistering): Released all slaves [ 1343.215778][T16837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.215798][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.215826][T16837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.282143][T16846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.282160][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.282187][T16846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.634751][T16846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.634813][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.634883][T16846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.056968][T16837] hsr_slave_0: entered promiscuous mode [ 1345.058444][T16837] hsr_slave_1: entered promiscuous mode [ 1345.059414][T16837] debugfs: 'hsr0' already exists in 'hsr' [ 1345.059439][T16837] Cannot create hsr debugfs directory [ 1345.170465][T16846] hsr_slave_0: entered promiscuous mode [ 1345.172078][T16846] hsr_slave_1: entered promiscuous mode [ 1345.173073][T16846] debugfs: 'hsr0' already exists in 'hsr' [ 1345.173112][T16846] Cannot create hsr debugfs directory [ 1347.571869][T17130] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2830'. [ 1349.645613][ T8057] hsr_slave_0: left promiscuous mode [ 1349.720780][ T8057] hsr_slave_1: left promiscuous mode [ 1349.722195][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.789076][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.430806][ T5590] Bluetooth: hci2: ISO packet too small [ 1351.605789][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 1353.086117][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 1353.612800][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1354.227073][T17185] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2838'. [ 1356.193071][T16958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.193264][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.193437][T16958] bridge_slave_0: entered allmulticast mode [ 1356.220826][T16958] bridge_slave_0: entered promiscuous mode [ 1356.254864][T16958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.255021][T16958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.255206][T16958] bridge_slave_1: entered allmulticast mode [ 1356.257926][T16958] bridge_slave_1: entered promiscuous mode [ 1356.813718][T16958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.095341][T16958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.644332][ T5710] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1357.824630][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 1357.825697][ T5710] usb 4-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=14.32 [ 1357.829978][ T5710] usb 4-1: config index 0 descriptor too short (expected 61458, got 18) [ 1357.830005][ T5710] usb 4-1: config 5 has an invalid interface number: 40 but max is 0 [ 1357.830027][ T5710] usb 4-1: config 5 has no interface number 0 [ 1357.830059][ T5710] usb 4-1: config 5 interface 40 has no altsetting 0 [ 1357.833490][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.833516][ T5710] usb 4-1: Product: syz [ 1357.833530][ T5710] usb 4-1: Manufacturer: syz [ 1357.833545][ T5710] usb 4-1: SerialNumber: syz [ 1359.337632][T17221] sch_tbf: peakrate 188 is lower than or equals to rate 4644974590640938312 ! [ 1359.384784][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1359.465784][T16958] team0: Port device team_slave_0 added [ 1359.477411][T16958] team0: Port device team_slave_1 added [ 1359.600096][T16958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.600116][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.600143][T16958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.610048][T16958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.610066][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.610090][T16958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.848627][T17226] FAULT_INJECTION: forcing a failure. [ 1359.848627][T17226] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.848660][T17226] CPU: 0 UID: 0 PID: 17226 Comm: syz.6.2845 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1359.848681][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1359.848693][T17226] Call Trace: [ 1359.848701][T17226] [ 1359.848710][T17226] dump_stack_lvl+0xe8/0x150 [ 1359.848740][T17226] should_fail_ex+0x46b/0x600 [ 1359.848767][T17226] should_failslab+0xa8/0x100 [ 1359.848796][T17226] __kmalloc_noprof+0xfb/0x790 [ 1359.848820][T17226] ? video_usercopy+0x1b1/0x1430 [ 1359.848951][T17226] ? video_usercopy+0x1b1/0x1430 [ 1359.848979][T17226] video_usercopy+0x1b1/0x1430 [ 1359.849004][T17226] ? smk_tskacc+0x2fb/0x370 [ 1359.849028][T17226] ? __pfx___video_do_ioctl+0x10/0x10 [ 1359.849053][T17226] ? __pfx_video_usercopy+0x10/0x10 [ 1359.849074][T17226] ? smack_file_ioctl+0x2c4/0x370 [ 1359.849110][T17226] ? __fget_files+0x2a/0x420 [ 1359.849128][T17226] ? __fget_files+0x3a8/0x420 [ 1359.849149][T17226] v4l2_ioctl+0x190/0x1e0 [ 1359.849172][T17226] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1359.849193][T17226] __se_sys_ioctl+0xff/0x170 [ 1359.849218][T17226] do_syscall_64+0x166/0x520 [ 1359.849236][T17226] ? trace_irq_disable+0x3b/0x140 [ 1359.849258][T17226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.849276][T17226] ? clear_bhb_loop+0x70/0xc0 [ 1359.849298][T17226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.849316][T17226] RIP: 0033:0x7f5cc8b3e159 [ 1359.849334][T17226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.849350][T17226] RSP: 002b:00007f5cc6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.849370][T17226] RAX: ffffffffffffffda RBX: 00007f5cc8dc5fa0 RCX: 00007f5cc8b3e159 [ 1359.849385][T17226] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1359.849397][T17226] RBP: 00007f5cc6d96090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.849413][T17226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.849433][T17226] R13: 00007f5cc8dc6038 R14: 00007f5cc8dc5fa0 R15: 00007ffc9ed72328 [ 1359.849463][T17226] [ 1360.543160][T17236] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2847'. [ 1361.163425][ T5710] rtsx_usb 4-1:5.40: probe with driver rtsx_usb failed with error -22 [ 1361.170586][ T5710] usb 4-1: USB disconnect, device number 19 [ 1361.351349][T16958] hsr_slave_0: entered promiscuous mode [ 1361.352787][T16958] hsr_slave_1: entered promiscuous mode [ 1361.353904][T16958] debugfs: 'hsr0' already exists in 'hsr' [ 1361.353930][T16958] Cannot create hsr debugfs directory [ 1361.589670][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.589741][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.181408][ T8057] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.286312][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1364.205109][ T10] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 1364.374994][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1364.376509][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1364.376541][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.376581][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.428189][ T10] usb 7-1: config 0 descriptor?? [ 1364.566493][ T8057] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.885804][ T10] hid_parser_main: 435 callbacks suppressed [ 1364.885832][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.885861][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.885885][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.885910][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.885935][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.885959][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.885981][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.886005][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.886030][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.886056][ T10] wacom 0003:056A:5012.000C: unknown main item tag 0x0 [ 1364.903323][T17280] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1364.985377][ T10] wacom 0003:056A:5012.000C: item fetching failed at offset 482/483 [ 1364.986107][ T10] wacom 0003:056A:5012.000C: parse failed [ 1364.986215][ T10] wacom 0003:056A:5012.000C: probe with driver wacom failed with error -22 [ 1365.061006][ T10] usb 7-1: USB disconnect, device number 70 [ 1365.744446][T17294] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2856'. [ 1366.300908][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1367.242524][T15801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1367.310053][T15801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1367.327081][T15801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1367.356391][T15801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1367.362218][T15801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1367.798258][ T8057] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.938015][T17320] ALSA: mixer_oss: invalid OSS volume '' [ 1369.224237][T15801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1369.284428][T15801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1369.293273][T15801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1369.334675][T15801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1369.337163][T15801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1370.093458][ T5590] Bluetooth: hci1: command tx timeout [ 1371.391411][ T8057] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.914753][ T5590] Bluetooth: hci4: command tx timeout [ 1372.144816][ T5590] Bluetooth: hci1: command tx timeout [ 1373.986366][ T5590] Bluetooth: hci4: command tx timeout [ 1374.224305][ T5590] Bluetooth: hci1: command tx timeout [ 1375.024207][ T5590] Bluetooth: hci2: command 0x0406 tx timeout [ 1375.070084][T17362] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1375.611827][T17362] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1375.612924][T17362] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1375.613118][T17362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1375.613225][T17362] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1375.965513][T17362] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1376.045077][ T8057] bridge_slave_1: left allmulticast mode [ 1376.045113][ T8057] bridge_slave_1: left promiscuous mode [ 1376.045395][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.064276][ T5590] Bluetooth: hci4: command tx timeout [ 1376.065257][T17362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1376.065404][T17362] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1376.171316][T17362] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1376.206395][ T8057] bridge_slave_0: left allmulticast mode [ 1376.206433][ T8057] bridge_slave_0: left promiscuous mode [ 1376.206719][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.269238][T17362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1376.281503][T17362] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1376.388410][T17362] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1376.514836][ T8057] bridge_slave_1: left allmulticast mode [ 1376.514874][ T8057] bridge_slave_1: left promiscuous mode [ 1376.515120][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.678217][ T8057] bridge_slave_0: left allmulticast mode [ 1376.678255][ T8057] bridge_slave_0: left promiscuous mode [ 1376.678493][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.114796][T15801] Bluetooth: hci5: command 0x0406 tx timeout [ 1377.163874][T15801] Bluetooth: hci2: ISO packet too small [ 1377.865561][T15801] Bluetooth: hci3: command 0x0c1a tx timeout [ 1377.865835][T15801] Bluetooth: hci7: command 0x0c1a tx timeout [ 1378.221674][ T5590] Bluetooth: hci1: command 0x0c1a tx timeout [ 1378.324323][ T5590] Bluetooth: hci4: command 0x0c1a tx timeout [ 1379.774526][ T5876] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1379.896220][T11786] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 1379.904212][ T5590] Bluetooth: hci3: command 0x0c1a tx timeout [ 1379.968778][ T5876] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1379.968837][ T5876] usb 4-1: no configurations [ 1379.968851][ T5876] usb 4-1: can't read configurations, error -22 [ 1380.057175][T11786] usb 7-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1380.058654][T11786] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1380.058687][T11786] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.058725][T11786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.106618][T11786] usb 7-1: config 0 descriptor?? [ 1380.255862][ T5590] Bluetooth: hci1: command 0x0c1a tx timeout [ 1380.398536][ T5590] Bluetooth: hci4: command 0x0c1a tx timeout [ 1380.525967][T11786] hid_parser_main: 435 callbacks suppressed [ 1380.525991][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.526023][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.526051][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.526078][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.526103][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.526128][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.526154][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.526181][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.526208][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.526234][T11786] wacom 0003:056A:5012.000D: unknown main item tag 0x0 [ 1380.530844][T11786] wacom 0003:056A:5012.000D: item fetching failed at offset 482/483 [ 1380.531295][T11786] wacom 0003:056A:5012.000D: parse failed [ 1380.531357][T11786] wacom 0003:056A:5012.000D: probe with driver wacom failed with error -22 [ 1380.720493][T11786] usb 7-1: USB disconnect, device number 71 [ 1380.805764][ T8057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.865286][ T8057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.899157][ T8057] bond0 (unregistering): Released all slaves [ 1381.074220][ T5876] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1381.154772][ T8057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.235402][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1381.237273][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1381.237310][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.241838][ T5876] usb 4-1: config 0 descriptor?? [ 1381.317926][T17464] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1381.350399][ T8057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.429896][ T8057] bond0 (unregistering): Released all slaves [ 1381.985603][ T5590] Bluetooth: hci3: command 0x0c1a tx timeout [ 1382.305709][ T5590] Bluetooth: hci1: command 0x0c1a tx timeout [ 1382.464227][ T5590] Bluetooth: hci4: command 0x0c1a tx timeout [ 1384.729937][T17466] ceph: No mds server is up or the cluster is laggy [ 1384.752855][T17464] ceph: No mds server is up or the cluster is laggy [ 1387.086177][T15801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1387.203689][T15801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1387.286031][T15801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1387.315319][T15801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1387.351614][T15801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1387.777891][T14842] usb 4-1: USB disconnect, device number 21 [ 1389.677537][ T5590] Bluetooth: hci6: command tx timeout [ 1391.746057][ T5590] Bluetooth: hci6: command tx timeout [ 1392.619807][T17551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2873'. [ 1392.722740][T17311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.722855][T17311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.723071][T17311] bridge_slave_0: entered allmulticast mode [ 1392.842280][T17311] bridge_slave_0: entered promiscuous mode [ 1393.009109][T17311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.009238][T17311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.009451][T17311] bridge_slave_1: entered allmulticast mode [ 1393.062363][T17311] bridge_slave_1: entered promiscuous mode [ 1393.233932][T17565] FAULT_INJECTION: forcing a failure. [ 1393.233932][T17565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.233967][T17565] CPU: 0 UID: 0 PID: 17565 Comm: syz.3.2876 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1393.233989][T17565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1393.234001][T17565] Call Trace: [ 1393.234009][T17565] [ 1393.234022][T17565] dump_stack_lvl+0xe8/0x150 [ 1393.234053][T17565] should_fail_ex+0x46b/0x600 [ 1393.234084][T17565] _copy_from_user+0x2d/0xb0 [ 1393.234110][T17565] dvb_usercopy+0x15c/0x2e0 [ 1393.234268][T17565] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 1393.234318][T17565] ? __pfx_dvb_usercopy+0x10/0x10 [ 1393.234352][T17565] ? __fget_files+0x2a/0x420 [ 1393.234372][T17565] ? __fget_files+0x3a8/0x420 [ 1393.234390][T17565] ? __fget_files+0x2a/0x420 [ 1393.234411][T17565] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 1393.234431][T17565] dvb_frontend_ioctl+0x5c/0x80 [ 1393.234452][T17565] __se_sys_ioctl+0xff/0x170 [ 1393.234487][T17565] do_syscall_64+0x166/0x520 [ 1393.234505][T17565] ? trace_irq_disable+0x3b/0x140 [ 1393.234527][T17565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.234546][T17565] ? clear_bhb_loop+0x70/0xc0 [ 1393.234571][T17565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.234589][T17565] RIP: 0033:0x7fbb8773e159 [ 1393.234609][T17565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.234631][T17565] RSP: 002b:00007fbb85996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1393.234653][T17565] RAX: ffffffffffffffda RBX: 00007fbb879c5fa0 RCX: 00007fbb8773e159 [ 1393.234667][T17565] RDX: 0000200000000000 RSI: 0000000080106f53 RDI: 0000000000000003 [ 1393.234679][T17565] RBP: 00007fbb85996090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.234724][T17565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.234735][T17565] R13: 00007fbb879c6038 R14: 00007fbb879c5fa0 R15: 00007ffeab1f0208 [ 1393.234761][T17565] [ 1394.672867][ T5590] Bluetooth: hci6: command tx timeout [ 1394.901871][T17333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.901943][T17333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.903316][T17333] bridge_slave_0: entered allmulticast mode [ 1394.986037][T17333] bridge_slave_0: entered promiscuous mode [ 1395.170548][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.171539][T17333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.171650][T17333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.171857][T17333] bridge_slave_1: entered allmulticast mode [ 1395.291680][T17333] bridge_slave_1: entered promiscuous mode [ 1395.398224][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.535727][T17585] netlink: 'syz.3.2879': attribute type 4 has an invalid length. [ 1396.535743][T17585] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2879'. [ 1396.794403][ T5590] Bluetooth: hci6: command tx timeout [ 1397.506391][T17333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.509996][T17311] team0: Port device team_slave_0 added [ 1397.532533][T17333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.039887][T17564] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1398.040218][T17564] block device autoloading is deprecated and will be removed. [ 1399.444317][ T8057] hsr_slave_0: left promiscuous mode [ 1400.766866][ T8057] hsr_slave_1: left promiscuous mode [ 1400.768226][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1400.768252][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.830521][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.830620][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.894861][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1401.045587][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1401.048413][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1401.048433][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.048455][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.052408][ T10] usb 4-1: config 0 descriptor?? [ 1401.070893][ T8057] hsr_slave_0: left promiscuous mode [ 1401.130319][ T8057] hsr_slave_1: left promiscuous mode [ 1401.131614][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.175874][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.390273][ T8057] veth1_macvtap: left promiscuous mode [ 1401.390378][ T8057] veth0_macvtap: left promiscuous mode [ 1401.390601][ T8057] veth1_vlan: left promiscuous mode [ 1401.390786][ T8057] veth0_vlan: left promiscuous mode [ 1401.483137][ T10] hid_parser_main: 911 callbacks suppressed [ 1401.483165][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.483196][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.483223][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.483250][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.483277][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.483302][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.483328][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.483354][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.483381][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.483407][ T10] wacom 0003:056A:5012.000F: unknown main item tag 0x0 [ 1401.500284][ T10] wacom 0003:056A:5012.000F: item fetching failed at offset 482/483 [ 1401.500993][ T10] wacom 0003:056A:5012.000F: parse failed [ 1401.501095][ T10] wacom 0003:056A:5012.000F: probe with driver wacom failed with error -22 [ 1401.673543][ T10] usb 4-1: USB disconnect, device number 22 [ 1403.015177][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 1403.101923][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 1404.806079][ T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1404.976248][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1404.977760][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1404.977794][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.977841][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.988675][ T10] usb 4-1: config 0 descriptor?? [ 1405.502139][ T10] wacom 0003:056A:5012.0010: item fetching failed at offset 482/483 [ 1405.506072][ T10] wacom 0003:056A:5012.0010: parse failed [ 1405.506162][ T10] wacom 0003:056A:5012.0010: probe with driver wacom failed with error -22 [ 1405.636297][ T10] usb 4-1: USB disconnect, device number 23 [ 1405.785454][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 1405.803127][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2886'. [ 1405.803154][T17667] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1405.803176][T17667] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1405.847881][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 1406.097245][T17311] team0: Port device team_slave_1 added [ 1406.435318][T17333] team0: Port device team_slave_0 added [ 1406.453554][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.453571][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.453596][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.466033][T17333] team0: Port device team_slave_1 added [ 1406.511814][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.511831][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.511850][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.919983][T17672] bridge2: entered promiscuous mode [ 1406.920003][T17672] bridge2: entered allmulticast mode [ 1406.942768][T17333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.942785][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.942827][T17333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.060698][T17333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.060715][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.060741][T17333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.502079][T17311] hsr_slave_0: entered promiscuous mode [ 1407.503261][T17311] hsr_slave_1: entered promiscuous mode [ 1408.843138][T17311] debugfs: 'hsr0' already exists in 'hsr' [ 1408.843168][T17311] Cannot create hsr debugfs directory [ 1409.084847][ T10] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1409.229913][T17333] hsr_slave_0: entered promiscuous mode [ 1409.230781][T17333] hsr_slave_1: entered promiscuous mode [ 1409.231306][T17333] debugfs: 'hsr0' already exists in 'hsr' [ 1409.231330][T17333] Cannot create hsr debugfs directory [ 1409.235793][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1409.237414][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1409.237443][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.237479][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.305711][ T10] usb 7-1: config 0 descriptor?? [ 1409.720571][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1409.720687][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1409.725935][ T10] usb 7-1: USB disconnect, device number 72 [ 1409.949386][T17691] nvme_fabrics: missing parameter 'traddr=%s' [ 1410.869922][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1412.143958][T17510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.144307][T17510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.192086][T17510] bridge_slave_0: entered allmulticast mode [ 1412.207392][T17510] bridge_slave_0: entered promiscuous mode [ 1412.255433][T17734] FAULT_INJECTION: forcing a failure. [ 1412.255433][T17734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.255458][T17734] CPU: 1 UID: 0 PID: 17734 Comm: syz.6.2894 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1412.255470][T17734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1412.255477][T17734] Call Trace: [ 1412.255482][T17734] [ 1412.255487][T17734] dump_stack_lvl+0xe8/0x150 [ 1412.255508][T17734] should_fail_ex+0x46b/0x600 [ 1412.255534][T17734] _copy_from_user+0x2d/0xb0 [ 1412.255550][T17734] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 1412.255566][T17734] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1412.255581][T17734] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1412.255604][T17734] ? __pfx_ksys_write+0x10/0x10 [ 1412.255624][T17734] do_syscall_64+0x166/0x520 [ 1412.255633][T17734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.255644][T17734] ? clear_bhb_loop+0x70/0xc0 [ 1412.255657][T17734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.255667][T17734] RIP: 0033:0x7f5cc8b3e159 [ 1412.255678][T17734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.255687][T17734] RSP: 002b:00007f5cc6d95ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1412.255700][T17734] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f5cc8b3e159 [ 1412.255708][T17734] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000e26 [ 1412.255715][T17734] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 1412.255722][T17734] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 1412.255732][T17734] R13: 0000200000000890 R14: 00007f5cc6d95fd8 R15: 0000000000000000 [ 1412.255748][T17734] [ 1412.272388][T17510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.277873][T17510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.278096][T17510] bridge_slave_1: entered allmulticast mode [ 1412.290170][T17510] bridge_slave_1: entered promiscuous mode [ 1412.579336][T17741] FAULT_INJECTION: forcing a failure. [ 1412.579336][T17741] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.579375][T17741] CPU: 0 UID: 0 PID: 17741 Comm: syz.6.2898 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1412.579397][T17741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1412.579410][T17741] Call Trace: [ 1412.579419][T17741] [ 1412.579428][T17741] dump_stack_lvl+0xe8/0x150 [ 1412.579464][T17741] should_fail_ex+0x46b/0x600 [ 1412.579497][T17741] should_failslab+0xa8/0x100 [ 1412.579531][T17741] __kmalloc_cache_noprof+0xa1/0x680 [ 1412.579560][T17741] ? do_epoll_create+0x75/0x440 [ 1412.579598][T17741] ? do_epoll_create+0x75/0x440 [ 1412.579634][T17741] do_epoll_create+0x75/0x440 [ 1412.579664][T17741] __x64_sys_epoll_create1+0x37/0x40 [ 1412.579690][T17741] do_syscall_64+0x166/0x520 [ 1412.579708][T17741] ? trace_irq_disable+0x3b/0x140 [ 1412.579734][T17741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.579755][T17741] ? clear_bhb_loop+0x70/0xc0 [ 1412.579781][T17741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.579802][T17741] RIP: 0033:0x7f5cc8b3e159 [ 1412.579821][T17741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.579840][T17741] RSP: 002b:00007f5cc6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 1412.579863][T17741] RAX: ffffffffffffffda RBX: 00007f5cc8dc5fa0 RCX: 00007f5cc8b3e159 [ 1412.579878][T17741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1412.579892][T17741] RBP: 00007f5cc8bd506b R08: 0000000000000000 R09: 0000000000000000 [ 1412.579906][T17741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1412.579919][T17741] R13: 00007f5cc8dc6038 R14: 00007f5cc8dc5fa0 R15: 00007ffc9ed72328 [ 1412.579951][T17741] [ 1412.672161][T17510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.750740][T17510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1413.359371][T17510] team0: Port device team_slave_0 added [ 1413.427065][T17510] team0: Port device team_slave_1 added [ 1413.615751][ T5590] Bluetooth: hci5: ISO packet too small [ 1416.466503][T17510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.466523][T17510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.466551][T17510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.498218][T17510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.498236][T17510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.498263][T17510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.767986][T17510] hsr_slave_0: entered promiscuous mode [ 1416.769559][T17510] hsr_slave_1: entered promiscuous mode [ 1416.771018][T17510] debugfs: 'hsr0' already exists in 'hsr' [ 1416.771042][T17510] Cannot create hsr debugfs directory [ 1419.678043][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1419.808478][T17796] FAULT_INJECTION: forcing a failure. [ 1419.808478][T17796] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.808516][T17796] CPU: 0 UID: 0 PID: 17796 Comm: syz.6.2910 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1419.808541][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1419.808554][T17796] Call Trace: [ 1419.808563][T17796] [ 1419.808571][T17796] dump_stack_lvl+0xe8/0x150 [ 1419.808607][T17796] should_fail_ex+0x46b/0x600 [ 1419.808636][T17796] ? __d_alloc+0x37/0x6f0 [ 1419.808660][T17796] should_failslab+0xa8/0x100 [ 1419.808692][T17796] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1419.808720][T17796] ? __d_alloc+0x37/0x6f0 [ 1419.808748][T17796] __d_alloc+0x37/0x6f0 [ 1419.808776][T17796] d_alloc_pseudo+0x21/0xc0 [ 1419.808801][T17796] alloc_path_pseudo+0x107/0x220 [ 1419.808846][T17796] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1419.808875][T17796] ? reacquire_held_locks+0x117/0x1a0 [ 1419.808903][T17796] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1419.808936][T17796] alloc_file_pseudo+0xa8/0x1e0 [ 1419.808970][T17796] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1419.809010][T17796] anon_inode_getfile+0xc5/0x1a0 [ 1419.809046][T17796] do_epoll_create+0x2fc/0x440 [ 1419.809075][T17796] __x64_sys_epoll_create1+0x37/0x40 [ 1419.809100][T17796] do_syscall_64+0x166/0x520 [ 1419.809118][T17796] ? trace_irq_disable+0x3b/0x140 [ 1419.809143][T17796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.809163][T17796] ? clear_bhb_loop+0x70/0xc0 [ 1419.809188][T17796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.809208][T17796] RIP: 0033:0x7f5cc8b3e159 [ 1419.809228][T17796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.809245][T17796] RSP: 002b:00007f5cc6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 1419.809267][T17796] RAX: ffffffffffffffda RBX: 00007f5cc8dc5fa0 RCX: 00007f5cc8b3e159 [ 1419.809282][T17796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1419.809293][T17796] RBP: 00007f5cc8bd506b R08: 0000000000000000 R09: 0000000000000000 [ 1419.809306][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1419.809317][T17796] R13: 00007f5cc8dc6038 R14: 00007f5cc8dc5fa0 R15: 00007ffc9ed72328 [ 1419.809348][T17796] [ 1420.379098][T17311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1420.525562][T17311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1420.751503][ T5590] Bluetooth: hci2: ISO packet too small [ 1421.476739][T17311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1421.578379][T17311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1421.723644][T17311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1423.037939][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.038008][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.092608][T17311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1423.761953][T17311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1423.811517][T17311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1425.012560][T17851] FAULT_INJECTION: forcing a failure. [ 1425.012560][T17851] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.012595][T17851] CPU: 0 UID: 0 PID: 17851 Comm: syz.6.2919 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1425.012620][T17851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1425.012632][T17851] Call Trace: [ 1425.012641][T17851] [ 1425.012651][T17851] dump_stack_lvl+0xe8/0x150 [ 1425.012689][T17851] should_fail_ex+0x46b/0x600 [ 1425.012720][T17851] should_failslab+0xa8/0x100 [ 1425.012753][T17851] __kmalloc_cache_noprof+0xa1/0x680 [ 1425.012782][T17851] ? do_epoll_create+0x75/0x440 [ 1425.012808][T17851] ? do_epoll_create+0x75/0x440 [ 1425.012840][T17851] do_epoll_create+0x75/0x440 [ 1425.012869][T17851] __x64_sys_epoll_create1+0x37/0x40 [ 1425.012892][T17851] do_syscall_64+0x166/0x520 [ 1425.012910][T17851] ? trace_irq_disable+0x3b/0x140 [ 1425.012936][T17851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.012957][T17851] ? clear_bhb_loop+0x70/0xc0 [ 1425.012981][T17851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.013002][T17851] RIP: 0033:0x7f5cc8b3e159 [ 1425.013020][T17851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.013038][T17851] RSP: 002b:00007f5cc6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 1425.013060][T17851] RAX: ffffffffffffffda RBX: 00007f5cc8dc5fa0 RCX: 00007f5cc8b3e159 [ 1425.013076][T17851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1425.013088][T17851] RBP: 00007f5cc8bd506b R08: 0000000000000000 R09: 0000000000000000 [ 1425.013101][T17851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.013114][T17851] R13: 00007f5cc8dc6038 R14: 00007f5cc8dc5fa0 R15: 00007ffc9ed72328 [ 1425.013145][T17851] [ 1425.359155][T17333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1425.506404][T17333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1425.737530][ T5590] Bluetooth: hci5: ISO packet too small [ 1426.449444][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1426.493930][T17333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1426.533961][T17333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1426.569878][T17333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1426.662000][T17333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1427.125317][T17333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1427.167475][T17333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1427.284295][T14806] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 1427.952246][T15801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1428.003020][T15801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1428.015125][T15801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1428.017063][T15801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1428.046206][T15801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1429.146178][ T5590] Bluetooth: hci5: ISO packet too small [ 1429.856338][ T8057] bridge_slave_1: left allmulticast mode [ 1429.856376][ T8057] bridge_slave_1: left promiscuous mode [ 1429.856652][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.115952][ T8057] bridge_slave_0: left allmulticast mode [ 1430.115989][ T8057] bridge_slave_0: left promiscuous mode [ 1430.116272][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.515694][ T5590] Bluetooth: hci3: command tx timeout [ 1431.645772][ T993] kernel read not supported for file /cpu/0/msr (pid: 993 comm: kworker/1:2) [ 1431.870197][ T8057] bridge_slave_1: left allmulticast mode [ 1431.870234][ T8057] bridge_slave_1: left promiscuous mode [ 1431.870484][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.016862][ T8057] bridge_slave_0: left allmulticast mode [ 1432.016900][ T8057] bridge_slave_0: left promiscuous mode [ 1432.017143][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.193285][T15801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1432.236749][T15801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1432.238443][T15801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1432.239503][T15801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1432.282854][T15801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1432.509107][ T8057] bridge_slave_1: left allmulticast mode [ 1432.509166][ T8057] bridge_slave_1: left promiscuous mode [ 1432.509401][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.642407][T17931] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1432.647998][ T8057] bridge_slave_0: left allmulticast mode [ 1432.648029][ T8057] bridge_slave_0: left promiscuous mode [ 1432.648242][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.035089][ T8057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.136973][ T8057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.197301][ T8057] bond0 (unregistering): Released all slaves [ 1433.464872][ T8057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.527230][ T8057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.566089][ T8057] bond0 (unregistering): Released all slaves [ 1433.645501][T15801] Bluetooth: hci3: command tx timeout [ 1433.796239][ T8057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.856279][ T8057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.896285][ T8057] bond0 (unregistering): Released all slaves [ 1434.579388][T15801] Bluetooth: hci1: command tx timeout [ 1435.032425][T17928] syzkaller0: entered promiscuous mode [ 1435.032442][T17928] syzkaller0: entered allmulticast mode [ 1435.669736][T15801] Bluetooth: hci3: command tx timeout [ 1437.177955][T15801] Bluetooth: hci2: ISO packet too small [ 1437.178020][T15801] Bluetooth: hci1: command tx timeout [ 1437.750937][T15801] Bluetooth: hci3: command tx timeout [ 1440.518295][ T5590] Bluetooth: hci1: command tx timeout [ 1440.825985][T14719] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 1440.985527][T14719] usb 7-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1440.993448][T14719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1440.993480][T14719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.993516][T14719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.999372][T14719] usb 7-1: config 0 descriptor?? [ 1441.440219][T14719] usbhid 7-1:0.0: can't add hid device: -71 [ 1441.440334][T14719] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1441.519527][T14719] usb 7-1: USB disconnect, device number 74 [ 1442.182482][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1442.547540][ T5590] Bluetooth: hci1: command tx timeout [ 1444.884814][ T8057] hsr_slave_0: left promiscuous mode [ 1444.924828][ T8057] hsr_slave_1: left promiscuous mode [ 1444.925727][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.975572][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.014625][ T5606] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1445.124239][ T8057] hsr_slave_0: left promiscuous mode [ 1445.144555][ T8057] hsr_slave_1: left promiscuous mode [ 1445.145571][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.166923][ T5606] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1445.168065][ T5606] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1445.168085][ T5606] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1445.169696][ T5606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1445.169720][ T5606] usb 7-1: Product: syz [ 1445.169734][ T5606] usb 7-1: Manufacturer: syz [ 1445.228782][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.229745][ T5606] mos7840 7-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1445.434602][ T8057] hsr_slave_0: left promiscuous mode [ 1445.476526][ T8057] hsr_slave_1: left promiscuous mode [ 1445.477850][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.516021][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.626710][ T5606] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5 [ 1446.006202][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 1446.046372][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 1446.535678][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 1446.575209][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 1447.065069][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 1447.126696][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 1447.305645][T15801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1447.379922][T15801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1447.397743][T15801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1447.399696][T15801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1447.412821][T15801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1447.800197][ T5606] usb 7-1: USB disconnect, device number 75 [ 1447.835087][ T5606] mos7840 7-1:1.0: device disconnected [ 1449.744175][ T5590] Bluetooth: hci4: command tx timeout [ 1449.896298][ T993] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1450.144906][ T993] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1450.151620][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.190477][ T993] usb 4-1: config 0 descriptor?? [ 1450.222048][ T993] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1451.136000][T18054] FAULT_INJECTION: forcing a failure. [ 1451.136000][T18054] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.139986][T18054] CPU: 0 UID: 0 PID: 18054 Comm: syz.6.2943 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1451.140014][T18054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1451.140026][T18054] Call Trace: [ 1451.140035][T18054] [ 1451.140044][T18054] dump_stack_lvl+0xe8/0x150 [ 1451.140088][T18054] should_fail_ex+0x46b/0x600 [ 1451.140120][T18054] should_failslab+0xa8/0x100 [ 1451.140145][T18054] __kvmalloc_node_noprof+0x176/0x890 [ 1451.140168][T18054] ? proc_sys_call_handler+0x3d1/0x830 [ 1451.140188][T18054] ? proc_sys_call_handler+0x3d1/0x830 [ 1451.140215][T18054] proc_sys_call_handler+0x3d1/0x830 [ 1451.140246][T18054] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1451.140274][T18054] vfs_write+0x61e/0xbb0 [ 1451.140297][T18054] ? __pfx_vfs_write+0x10/0x10 [ 1451.140315][T18054] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1451.140342][T18054] ? mutex_lock_nested+0x152/0x1d0 [ 1451.140360][T18054] ? fdget_pos+0x252/0x320 [ 1451.140389][T18054] ksys_write+0x156/0x270 [ 1451.140413][T18054] ? __pfx_ksys_write+0x10/0x10 [ 1451.140445][T18054] do_syscall_64+0x166/0x520 [ 1451.140462][T18054] ? trace_irq_disable+0x3b/0x140 [ 1451.140484][T18054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.140498][T18054] ? clear_bhb_loop+0x70/0xc0 [ 1451.140515][T18054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.140529][T18054] RIP: 0033:0x7f5cc8b3e159 [ 1451.140544][T18054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.140558][T18054] RSP: 002b:00007f5cc6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1451.140574][T18054] RAX: ffffffffffffffda RBX: 00007f5cc8dc5fa0 RCX: 00007f5cc8b3e159 [ 1451.140585][T18054] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 1451.140594][T18054] RBP: 00007f5cc6d96090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.140603][T18054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.140612][T18054] R13: 00007f5cc8dc6038 R14: 00007f5cc8dc5fa0 R15: 00007ffc9ed72328 [ 1451.140635][T18054] [ 1451.893451][ T5590] Bluetooth: hci4: command tx timeout [ 1453.984399][ T5590] Bluetooth: hci4: command tx timeout [ 1454.862561][ T993] usb 4-1: USB disconnect, device number 24 [ 1456.834666][ T5606] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1456.873308][ T5590] Bluetooth: hci4: command tx timeout [ 1457.064831][ T5606] usb 7-1: Using ep0 maxpacket: 16 [ 1457.065688][ T5606] usb 7-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 1457.066885][ T5606] usb 7-1: config 0 has an invalid interface number: 180 but max is 0 [ 1457.066910][ T5606] usb 7-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 1457.066931][ T5606] usb 7-1: config 0 has no interface number 0 [ 1457.069367][ T5606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.069392][ T5606] usb 7-1: Product: syz [ 1457.069407][ T5606] usb 7-1: Manufacturer: syz [ 1457.069421][ T5606] usb 7-1: SerialNumber: syz [ 1457.075662][ T5606] usb 7-1: config 0 descriptor?? [ 1457.114972][ T5606] rndis_host 7-1:0.180: skipping garbage [ 1457.114995][ T5606] rndis_host 7-1:0.180: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1457.178173][T17885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.178289][T17885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.178469][T17885] bridge_slave_0: entered allmulticast mode [ 1457.181281][T17885] bridge_slave_0: entered promiscuous mode [ 1457.225493][T17885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.225614][T17885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.225932][T17885] bridge_slave_1: entered allmulticast mode [ 1457.230081][T17885] bridge_slave_1: entered promiscuous mode [ 1457.389499][ T5606] usb 7-1: USB disconnect, device number 76 [ 1457.691192][T17885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.716972][T17885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.957262][T17885] team0: Port device team_slave_0 added [ 1458.018662][T17885] team0: Port device team_slave_1 added [ 1458.513263][T18094] jffs2: notice: (18094) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1458.584565][ T36] audit: type=1326 audit(1790005467.401:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18092 comm="syz.6.2949" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cc8b3e159 code=0x0 [ 1458.815725][T17885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.815744][T17885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.815770][T17885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.906555][T17885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.906574][T17885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.906599][T17885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.047219][T18098] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1459.238721][T17923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.238856][T17923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.239128][T17923] bridge_slave_0: entered allmulticast mode [ 1459.241879][T17923] bridge_slave_0: entered promiscuous mode [ 1459.280932][T17923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.281164][T17923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.281357][T17923] bridge_slave_1: entered allmulticast mode [ 1459.285185][T17923] bridge_slave_1: entered promiscuous mode [ 1459.334730][T11786] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1459.551039][T11786] usb 4-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 1459.552290][T11786] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.552311][T11786] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1459.552325][T11786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1459.552347][T11786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.586752][T11786] usb 4-1: config 0 descriptor?? [ 1459.680274][T17885] hsr_slave_0: entered promiscuous mode [ 1459.681809][T17885] hsr_slave_1: entered promiscuous mode [ 1459.690301][T17885] debugfs: 'hsr0' already exists in 'hsr' [ 1459.690330][T17885] Cannot create hsr debugfs directory [ 1459.744294][T17923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1459.893828][T17923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.089697][T18115] netlink: 'syz.3.2948': attribute type 3 has an invalid length. [ 1460.089721][T18115] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2948'. [ 1460.205870][T18103] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1460.301278][T11786] hid_parser_main: 880 callbacks suppressed [ 1460.301305][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.301336][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.301363][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.301388][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.301415][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.301441][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.301467][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.301491][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.301518][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.301556][T11786] logitech-hidpp-device 0003:046D:C082.0011: unknown main item tag 0x0 [ 1460.703640][T11786] logitech-hidpp-device 0003:046D:C082.0011: hidraw0: USB HID v0.00 Device [HID 046d:c082] on usb-dummy_hcd.3-1/input0 [ 1461.830838][T11786] usb 4-1: USB disconnect, device number 25 [ 1462.340843][T17923] team0: Port device team_slave_0 added [ 1462.405309][T17923] team0: Port device team_slave_1 added [ 1462.540880][T18125] fido_id[18125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1462.648646][T17923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.648664][T17923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.648689][T17923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.727688][T17923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.727701][T17923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.727716][T17923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.851329][T17923] hsr_slave_0: entered promiscuous mode [ 1463.852422][T17923] hsr_slave_1: entered promiscuous mode [ 1463.856690][T17923] debugfs: 'hsr0' already exists in 'hsr' [ 1463.856718][T17923] Cannot create hsr debugfs directory [ 1465.039013][T18025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.039145][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.039361][T18025] bridge_slave_0: entered allmulticast mode [ 1465.052095][T18025] bridge_slave_0: entered promiscuous mode [ 1465.089637][T18151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2954'. [ 1470.918443][T18025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.918571][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.918797][T18025] bridge_slave_1: entered allmulticast mode [ 1470.955699][T18025] bridge_slave_1: entered promiscuous mode [ 1480.458553][T15801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1480.521648][T15801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1480.523780][T15801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1480.543512][T15801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1480.557215][T15801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1481.479393][ T5590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1481.577057][ T5590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1481.609178][ T5590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1481.610974][ T5590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1481.612205][ T5590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1482.785061][T15801] Bluetooth: hci6: command tx timeout [ 1483.825169][T15801] Bluetooth: hci7: command tx timeout [ 1484.636843][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.636913][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.865100][T15801] Bluetooth: hci6: command tx timeout [ 1485.906426][T15801] Bluetooth: hci7: command tx timeout [ 1486.944996][T15801] Bluetooth: hci6: command tx timeout [ 1487.293816][ T5590] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1487.362905][ T5590] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1487.375585][ T5590] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1487.423383][ T5590] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1487.425897][ T5590] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1487.986574][ T5590] Bluetooth: hci7: command tx timeout [ 1489.024892][ T5590] Bluetooth: hci6: command tx timeout [ 1489.587617][ T5590] Bluetooth: hci8: command tx timeout [ 1490.065204][ T5590] Bluetooth: hci7: command tx timeout [ 1491.117445][T15801] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1491.199707][T15801] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1491.228160][T15801] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1491.229986][T15801] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1491.269210][T15801] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1491.664947][ T5590] Bluetooth: hci8: command tx timeout [ 1493.505014][ T5590] Bluetooth: hci9: command tx timeout [ 1493.745489][ T5590] Bluetooth: hci8: command tx timeout [ 1495.587511][ T5590] Bluetooth: hci9: command tx timeout [ 1495.825154][ T5590] Bluetooth: hci8: command tx timeout [ 1497.665332][ T5590] Bluetooth: hci9: command tx timeout [ 1499.744984][ T5590] Bluetooth: hci9: command tx timeout [ 1508.190230][T15801] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1508.293772][T15801] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1508.330327][T15801] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1508.336325][T15801] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1508.337120][T15801] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1510.625114][ T5590] Bluetooth: hci10: command tx timeout [ 1512.704979][ T5590] Bluetooth: hci10: command tx timeout [ 1514.785048][ T5590] Bluetooth: hci10: command tx timeout [ 1516.865033][ T5590] Bluetooth: hci10: command tx timeout [ 1541.198798][T15801] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1541.257833][T15801] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1541.305615][T15801] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1541.323293][T15801] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1541.326582][T15801] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1542.195462][T15801] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1542.248175][T15801] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1542.250596][T15801] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1542.261085][T15801] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1542.273395][T15801] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1543.585523][ T5590] Bluetooth: hci11: command tx timeout [ 1544.544982][ T5590] Bluetooth: hci12: command tx timeout [ 1545.665172][ T5590] Bluetooth: hci11: command tx timeout [ 1546.626696][ T5590] Bluetooth: hci12: command tx timeout [ 1546.856118][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.856162][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.745120][ T5590] Bluetooth: hci11: command tx timeout [ 1548.561817][T15801] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1548.641207][T15801] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1548.643192][T15801] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1548.672828][T15801] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1548.710443][T15801] Bluetooth: hci12: command tx timeout [ 1548.712060][T15801] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1549.825009][ T5590] Bluetooth: hci11: command tx timeout [ 1550.784937][ T5590] Bluetooth: hci12: command tx timeout [ 1550.865085][ T5590] Bluetooth: hci13: command tx timeout [ 1551.775820][ T4901] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1551.862520][ T4901] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1551.871189][ T4901] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1551.906951][ T4901] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1551.920195][ T4901] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1552.947703][ T5590] Bluetooth: hci13: command tx timeout [ 1554.145534][ T5590] Bluetooth: hci14: command tx timeout [ 1554.718083][ T5590] Bluetooth: hci3: command 0x0406 tx timeout [ 1555.024854][ T5590] Bluetooth: hci13: command tx timeout [ 1556.225321][ T5590] Bluetooth: hci14: command tx timeout [ 1557.106120][ T5590] Bluetooth: hci13: command tx timeout [ 1558.305108][ T5590] Bluetooth: hci14: command tx timeout [ 1560.385127][ T5590] Bluetooth: hci14: command tx timeout [ 1569.459172][T15801] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1569.530220][T15801] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1569.536657][T15801] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1569.541503][T15801] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1569.550088][T15801] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1573.599826][T18247] Bluetooth: hci4: command 0x0406 tx timeout [ 1601.256295][T18241] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1601.355359][T18241] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1601.358262][T18241] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1601.363917][T18241] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1601.365587][T18241] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1602.342091][T18259] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1602.427206][T18259] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1602.449557][T18259] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1602.452513][T18259] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1602.469312][T18259] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1604.385106][T18247] Bluetooth: hci7: command 0x0406 tx timeout [ 1604.465198][T18247] Bluetooth: hci6: command 0x0406 tx timeout [ 1608.054913][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.054984][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.902683][T18262] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1610.013421][T18262] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1610.020855][T18262] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1610.131015][T18262] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1610.150011][T18262] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1612.464397][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1613.443411][T18272] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1613.533411][T18272] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1613.548325][T18272] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1613.549747][T18272] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1613.552240][T18272] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1614.545354][T18272] Bluetooth: hci8: command 0x0406 tx timeout [ 1614.545766][T18272] Bluetooth: hci9: command 0x0406 tx timeout [ 1622.065466][ T37] INFO: task kworker/0:7:5799 blocked for more than 143 seconds. [ 1622.065495][ T37] Not tainted syzkaller #0 [ 1622.065514][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1622.065525][ T37] task:kworker/0:7 state:D stack:15784 pid:5799 tgid:5799 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1622.065570][ T37] Workqueue: events switchdev_deferred_process_work [ 1622.065687][ T37] Call Trace: [ 1622.065695][ T37] [ 1622.065716][ T37] __schedule+0x16d9/0x5700 [ 1622.065776][ T37] ? __pfx___schedule+0x10/0x10 [ 1622.065822][ T37] rt_mutex_schedule+0x76/0xf0 [ 1622.065850][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 1622.065889][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 1622.065914][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 1622.065938][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1622.065988][ T37] ? switchdev_deferred_process_work+0xe/0x20 [ 1622.066005][ T37] mutex_lock_nested+0x168/0x1d0 [ 1622.066027][ T37] ? rcu_is_watching+0x16/0xb0 [ 1622.066055][ T37] ? process_scheduled_works+0x97a/0x1630 [ 1622.066082][ T37] switchdev_deferred_process_work+0xe/0x20 [ 1622.066101][ T37] process_scheduled_works+0xc3d/0x1630 [ 1622.066159][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1622.066190][ T37] ? assign_work+0x3cf/0x5d0 [ 1622.066220][ T37] worker_thread+0xa47/0xfb0 [ 1622.066260][ T37] ? __kthread_parkme+0x71/0x1f0 [ 1622.066296][ T37] kthread+0x38b/0x470 [ 1622.066317][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1622.066340][ T37] ? __pfx_kthread+0x10/0x10 [ 1622.066362][ T37] ret_from_fork+0x514/0xb70 [ 1622.066385][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.066410][ T37] ? __switch_to+0xc89/0x1420 [ 1622.066444][ T37] ? __pfx_kthread+0x10/0x10 [ 1622.066466][ T37] ret_from_fork_asm+0x1a/0x30 [ 1622.066510][ T37] [ 1622.066536][ T37] INFO: task kworker/u8:2:12205 blocked for more than 143 seconds. [ 1622.066551][ T37] Not tainted syzkaller #0 [ 1622.066561][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1622.066571][ T37] task:kworker/u8:2 state:D stack:20920 pid:12205 tgid:12205 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1622.066617][ T37] Workqueue: events_unbound linkwatch_event [ 1622.066694][ T37] Call Trace: [ 1622.066701][ T37] [ 1622.066714][ T37] __schedule+0x16d9/0x5700 [ 1622.066769][ T37] ? __pfx___schedule+0x10/0x10 [ 1622.066811][ T37] rt_mutex_schedule+0x76/0xf0 [ 1622.066834][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 1622.066902][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 1622.066928][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 1622.066952][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1622.066996][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1622.067029][ T37] ? linkwatch_event+0xe/0x60 [ 1622.067049][ T37] mutex_lock_nested+0x168/0x1d0 [ 1622.067070][ T37] ? linkwatch_event+0xe/0x60 [ 1622.067092][ T37] ? process_scheduled_works+0x97a/0x1630 [ 1622.067118][ T37] linkwatch_event+0xe/0x60 [ 1622.067138][ T37] process_scheduled_works+0xc3d/0x1630 [ 1622.067195][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1622.067227][ T37] ? assign_work+0x3cf/0x5d0 [ 1622.067257][ T37] worker_thread+0xa47/0xfb0 [ 1622.067311][ T37] kthread+0x38b/0x470 [ 1622.067331][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1622.067355][ T37] ? __pfx_kthread+0x10/0x10 [ 1622.067376][ T37] ret_from_fork+0x514/0xb70 [ 1622.067399][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.067418][ T37] ? __switch_to+0xc89/0x1420 [ 1622.067447][ T37] ? __pfx_kthread+0x10/0x10 [ 1622.067468][ T37] ret_from_fork_asm+0x1a/0x30 [ 1622.067509][ T37] [ 1622.067550][ T37] INFO: task syz-executor:17923 blocked for more than 143 seconds. [ 1622.067565][ T37] Not tainted syzkaller #0 [ 1622.067575][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1622.067584][ T37] task:syz-executor state:D stack:22584 pid:17923 tgid:17923 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1622.067629][ T37] Call Trace: [ 1622.067637][ T37] [ 1622.067649][ T37] __schedule+0x16d9/0x5700 [ 1622.067678][ T37] ? kernel_text_address+0xa5/0xe0 [ 1622.067723][ T37] ? __pfx___schedule+0x10/0x10 [ 1622.067764][ T37] rt_mutex_schedule+0x76/0xf0 [ 1622.067787][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 1622.067825][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 1622.067855][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 1622.067879][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1622.067921][ T37] ? rtnl_newlink+0xc10/0x1c30 [ 1622.067986][ T37] ? rtnl_newlink+0xc10/0x1c30 [ 1622.068010][ T37] mutex_lock_nested+0x168/0x1d0 [ 1622.068032][ T37] ? rtnl_nets_add+0x16c/0x300 [ 1622.068055][ T37] rtnl_newlink+0xc10/0x1c30 [ 1622.068094][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1622.068122][ T37] ? __lock_acquire+0x747/0x2de0 [ 1622.068156][ T37] ? __lock_acquire+0x747/0x2de0 [ 1622.068236][ T37] ? __kernel_text_address+0xd/0x30 [ 1622.068257][ T37] ? unwind_get_return_address+0x4d/0x90 [ 1622.068280][ T37] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1622.068304][ T37] ? arch_stack_walk+0xfb/0x150 [ 1622.068338][ T37] ? lock_acquire+0x115/0x350 [ 1622.068377][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1622.068402][ T37] rtnetlink_rcv_msg+0x802/0xc00 [ 1622.068428][ T37] ? kmem_cache_alloc_node_noprof+0x3fc/0x660 [ 1622.068458][ T37] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1622.068485][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1622.068519][ T37] ? __lock_acquire+0x747/0x2de0 [ 1622.068556][ T37] netlink_rcv_skb+0x226/0x4a0 [ 1622.068583][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1622.068612][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1622.068648][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1622.068687][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1622.068715][ T37] netlink_unicast+0x7f5/0x990 [ 1622.068748][ T37] netlink_sendmsg+0x813/0xb40 [ 1622.068780][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.068805][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1622.068845][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.068866][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 1622.068895][ T37] __sys_sendto+0x41e/0x5d0 [ 1622.068933][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 1622.068958][ T37] ? lockdep_hardirqs_on+0x7b/0x110 [ 1622.068997][ T37] ? fput_close_sync+0x11f/0x240 [ 1622.069015][ T37] ? kmem_cache_free+0x539/0x6d0 [ 1622.069052][ T37] ? rcu_is_watching+0x16/0xb0 [ 1622.069085][ T37] __x64_sys_sendto+0xde/0x100 [ 1622.069115][ T37] do_syscall_64+0x166/0x520 [ 1622.069134][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.069154][ T37] ? clear_bhb_loop+0x70/0xc0 [ 1622.069178][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.069198][ T37] RIP: 0033:0x7fbd1d37e98e [ 1622.069217][ T37] RSP: 002b:00007ffe2feaea78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1622.069237][ T37] RAX: ffffffffffffffda RBX: 000055556cb79500 RCX: 00007fbd1d37e98e [ 1622.069252][ T37] RDX: 000000000000008c RSI: 00007fbd1e174670 RDI: 0000000000000003 [ 1622.069265][ T37] RBP: 0000000000000001 R08: 00007ffe2feaeaf4 R09: 000000000000000c [ 1622.069278][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1622.069291][ T37] R13: 0000000000000000 R14: 00007fbd1e174670 R15: 0000000000000000 [ 1622.069322][ T37] [ 1622.069333][ T37] INFO: task syz-executor:18025 blocked for more than 143 seconds. [ 1622.069346][ T37] Not tainted syzkaller #0 [ 1622.069356][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1622.069366][ T37] task:syz-executor state:D stack:22928 pid:18025 tgid:18025 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1622.069409][ T37] Call Trace: [ 1622.069416][ T37] [ 1622.069428][ T37] __schedule+0x16d9/0x5700 [ 1622.069457][ T37] ? kernel_text_address+0xa5/0xe0 [ 1622.069508][ T37] ? __pfx___schedule+0x10/0x10 [ 1622.069549][ T37] rt_mutex_schedule+0x76/0xf0 [ 1622.069572][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 1622.069610][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 1622.069634][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 1622.069658][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1622.069699][ T37] ? rtnl_newlink+0xc10/0x1c30 [ 1622.069731][ T37] ? rtnl_newlink+0xc10/0x1c30 [ 1622.069755][ T37] mutex_lock_nested+0x168/0x1d0 [ 1622.069776][ T37] ? rtnl_nets_add+0x16c/0x300 [ 1622.069799][ T37] rtnl_newlink+0xc10/0x1c30 [ 1622.069837][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1622.069864][ T37] ? __lock_acquire+0x747/0x2de0 [ 1622.069894][ T37] ? __lock_acquire+0x747/0x2de0 [ 1622.069973][ T37] ? __kernel_text_address+0xd/0x30 [ 1622.069994][ T37] ? unwind_get_return_address+0x4d/0x90 [ 1622.070016][ T37] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1622.070038][ T37] ? arch_stack_walk+0xfb/0x150 [ 1622.070071][ T37] ? lock_acquire+0x115/0x350 [ 1622.070110][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1622.070135][ T37] rtnetlink_rcv_msg+0x802/0xc00 [ 1622.070159][ T37] ? kmem_cache_alloc_node_noprof+0x3fc/0x660 [ 1622.070186][ T37] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1622.070212][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1622.070240][ T37] ? __lock_acquire+0x747/0x2de0 [ 1622.070276][ T37] netlink_rcv_skb+0x226/0x4a0 [ 1622.070300][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1622.070328][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1622.070381][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1622.070403][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1622.070431][ T37] netlink_unicast+0x7f5/0x990 [ 1622.070463][ T37] netlink_sendmsg+0x813/0xb40 [ 1622.070496][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.070526][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1622.070561][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.070582][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 1622.070609][ T37] __sys_sendto+0x41e/0x5d0 [ 1622.070641][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 1622.070666][ T37] ? lockdep_hardirqs_on+0x7b/0x110 [ 1622.070704][ T37] ? fput_close_sync+0x11f/0x240 [ 1622.070722][ T37] ? kmem_cache_free+0x539/0x6d0 [ 1622.070758][ T37] ? rcu_is_watching+0x16/0xb0 [ 1622.070790][ T37] __x64_sys_sendto+0xde/0x100 [ 1622.070821][ T37] do_syscall_64+0x166/0x520 [ 1622.070839][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.070858][ T37] ? clear_bhb_loop+0x70/0xc0 [ 1622.070881][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.070900][ T37] RIP: 0033:0x7f1bec7ee98e [ 1622.070916][ T37] RSP: 002b:00007ffd41540b98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1622.070935][ T37] RAX: ffffffffffffffda RBX: 0000555589e40500 RCX: 00007f1bec7ee98e [ 1622.070950][ T37] RDX: 0000000000000088 RSI: 00007f1bed5e4670 RDI: 0000000000000003 [ 1622.070962][ T37] RBP: 0000000000000001 R08: 00007ffd41540c14 R09: 000000000000000c [ 1622.070975][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1622.070987][ T37] R13: 0000000000000000 R14: 00007f1bed5e4670 R15: 0000000000000000 [ 1622.071014][ T37] [ 1622.071059][ T37] [ 1622.071059][ T37] Showing all locks held in the system: [ 1622.071074][ T37] locks held by ktimers/1/29: 5, last CPU#1: [ 1622.071165][ T37] #0: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1622.071293][ T37] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1622.071344][ T37] #2: ffff8880b87285f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7d/0x2e0 [ 1622.071396][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1622.071444][ T37] #4: ffff8880b8728558 (hrtimer_bases.lock){-...}-{2:2}, at: advance_sched+0x9f1/0xc90 [ 1622.071531][ T37] locks held by khungtaskd/37: 1, last CPU#0: [ 1622.071553][ T37] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1622.071625][ T37] locks held by kworker/u8:13/3378: 3, on CPU#0: [ 1622.071640][ T37] #0: ffff888031d3c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.071695][ T37] #1: ffffc9000ed5fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.071747][ T37] #2: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1622.071838][ T37] locks held by kworker/u9:1/4901: 6, on CPU#0: [ 1622.071853][ T37] #0: ffff888068095938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.071906][ T37] #1: ffffc90010f6fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.071957][ T37] #2: ffff8880a9430f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1622.072073][ T37] #3: ffff8880a94300b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1622.072126][ T37] #4: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1622.072179][ T37] #5: ffff88802a72cb70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 1622.072266][ T37] locks held by getty/5341: 2, on CPU#1: [ 1622.072280][ T37] #0: ffff888028eb20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1622.072367][ T37] #1: ffffc900044b62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1622.072452][ T37] locks held by kworker/u9:2/5590: 4, on CPU#0: [ 1622.072467][ T37] #0: ffff88802b6db138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.072529][ T37] #1: ffffc900058ffc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.072580][ T37] #2: ffff88805b34c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1622.072628][ T37] #3: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1622.072679][ T37] locks held by kworker/0:7/5799: 3, on CPU#0: [ 1622.072693][ T37] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.072743][ T37] #1: ffffc9000608fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.072792][ T37] #2: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1622.072840][ T37] locks held by kworker/u8:23/8057: 6, on CPU#0: [ 1622.072855][ T37] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.072906][ T37] #1: ffffc90006637c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.072955][ T37] #2: ffffffff8f5c67a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1622.073065][ T37] #3: ffff888033c5b160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1622.073149][ T37] #4: ffff888029106310 (&devlink->lock_key#20){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1622.073204][ T37] #5: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1622.073319][ T37] locks held by kworker/u8:2/12205: 3, on CPU#0: [ 1622.073334][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.073384][ T37] #1: ffffc90006837c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.073435][ T37] #2: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1622.073485][ T37] locks held by kworker/u9:3/15801: 5, on CPU#0: [ 1622.073499][ T37] #0: ffff888067bf8938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.073555][ T37] #1: ffffc900075a7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.073606][ T37] #2: ffff8880a0c5cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1622.073653][ T37] #3: ffff8880a0c5c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1622.073704][ T37] #4: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1622.073759][ T37] locks held by syz-executor/17885: 7, on CPU#0: [ 1622.073773][ T37] #0: ffff8880350fa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1622.073827][ T37] #1: ffff88802fdb6c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1622.073881][ T37] #2: ffff888029605d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1622.073936][ T37] #3: ffffffff8ee45478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1622.075076][ T37] #4: ffff88807f37c160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1622.075171][ T37] #5: ffff888011e98310 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1622.075223][ T37] #6: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1622.075274][ T37] locks held by syz-executor/17923: 2, on CPU#0: [ 1622.075289][ T37] #0: ffffffff8ed34808 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1622.075337][ T37] #1: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1622.075394][ T37] locks held by syz-executor/18025: 2, on CPU#0: [ 1622.075407][ T37] #0: ffffffff8ed34808 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1622.075460][ T37] #1: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1622.075521][ T37] locks held by syz-executor/18175: 1, on CPU#0: [ 1622.075535][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.075585][ T37] locks held by syz-executor/18182: 1, on CPU#0: [ 1622.075598][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.075643][ T37] locks held by dhcpcd/18186: 1, on CPU#0: [ 1622.075656][ T37] #0: ffff88803351f578 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1622.075714][ T37] locks held by dhcpcd/18187: 1, on CPU#0: [ 1622.075728][ T37] #0: ffff88803351c638 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1622.075785][ T37] locks held by dhcpcd/18188: 1, on CPU#0: [ 1622.075798][ T37] #0: ffff88805eae1038 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1622.075852][ T37] locks held by dhcpcd/18189: 1, on CPU#0: [ 1622.075866][ T37] #0: ffff88805eae53b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1622.075920][ T37] locks held by dhcpcd/18190: 1, on CPU#0: [ 1622.075934][ T37] #0: ffff88803f4c1db8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1622.075988][ T37] locks held by dhcpcd/18191: 1, on CPU#0: [ 1622.076001][ T37] #0: ffff88805eaa7578 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1622.076054][ T37] locks held by dhcpcd/18192: 1, on CPU#0: [ 1622.076068][ T37] #0: ffff88805eaa6eb8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1622.076121][ T37] locks held by syz-executor/18194: 1, on CPU#0: [ 1622.076134][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.076179][ T37] locks held by syz-executor/18202: 1, on CPU#0: [ 1622.076200][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.076246][ T37] locks held by syz-executor/18209: 1, on CPU#0: [ 1622.076260][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.076304][ T37] locks held by syz-executor/18216: 1, on CPU#0: [ 1622.076318][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.076362][ T37] locks held by syz-executor/18223: 1, on CPU#0: [ 1622.076376][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.076421][ T37] locks held by syz-executor/18228: 1, on CPU#0: [ 1622.076435][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.076480][ T37] locks held by syz-executor/18235: 1, on CPU#0: [ 1622.076494][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.076579][ T37] locks held by syz-executor/18240: 1, on CPU#0: [ 1622.076594][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.076659][ T37] locks held by kworker/u9:0/18241: 4, on CPU#0: [ 1622.076674][ T37] #0: ffff888035563938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.076730][ T37] #1: ffffc90005fafc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.076780][ T37] #2: ffff88806e4c00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1622.076834][ T37] #3: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1622.076882][ T37] locks held by kworker/u9:4/18247: 4, on CPU#0: [ 1622.076896][ T37] #0: ffff88805fc38138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.076950][ T37] #1: ffffc90005f6fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.077010][ T37] #2: ffff88818772c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1622.077057][ T37] #3: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1622.077106][ T37] locks held by syz-executor/18249: 1, on CPU#0: [ 1622.077120][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.077165][ T37] locks held by kworker/u9:5/18252: 5, on CPU#0: [ 1622.077180][ T37] #0: ffff888068340138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.077229][ T37] #1: ffffc90005effc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.077279][ T37] #2: ffff888085cb0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1622.077327][ T37] #3: ffff888085cb00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1622.077379][ T37] #4: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1622.077431][ T37] locks held by syz-executor/18257: 1, on CPU#0: [ 1622.077445][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.077490][ T37] locks held by kworker/u9:6/18258: 5, on CPU#0: [ 1622.077516][ T37] #0: ffff8880382fa938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.077566][ T37] #1: ffffc90005a4fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.077616][ T37] #2: ffff8880851b8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1622.077663][ T37] #3: ffff8880851b80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1622.077715][ T37] #4: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1622.077766][ T37] locks held by kworker/u9:7/18259: 4, on CPU#0: [ 1622.077780][ T37] #0: ffff888067fe3138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.077838][ T37] #1: ffffc900059ffc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.077886][ T37] #2: ffff88806e4c80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1622.077934][ T37] #3: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1622.077982][ T37] locks held by kworker/u9:8/18261: 5, on CPU#0: [ 1622.077996][ T37] #0: ffff888026d08138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.078045][ T37] #1: ffffc900059dfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.078095][ T37] #2: ffff88805f704f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1622.078141][ T37] #3: ffff88805f7040b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1622.078192][ T37] #4: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1622.078242][ T37] locks held by kworker/u9:9/18262: 5, on CPU#0: [ 1622.078256][ T37] #0: ffff88803a386138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.078306][ T37] #1: ffffc900059afc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.078356][ T37] #2: ffff8880a06fcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1622.078403][ T37] #3: ffff8880a06fc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1622.078455][ T37] #4: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1622.078512][ T37] locks held by syz-executor/18266: 1, on CPU#0: [ 1622.078526][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.078571][ T37] locks held by kworker/u9:10/18271: 4, on CPU#0: [ 1622.078585][ T37] #0: ffff888036b1a938 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.078640][ T37] #1: ffffc90005f5fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1622.078690][ T37] #2: ffff8880551280b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1622.078737][ T37] #3: ffffffff8f7585d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1622.078787][ T37] locks held by syz-executor/18274: 1, on CPU#0: [ 1622.078801][ T37] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1622.078848][ T37] [ 1622.078853][ T37] ============================================= [ 1622.078853][ T37] [ 1622.078864][ T37] NMI backtrace for cpu 0 [ 1622.078879][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1622.078900][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1622.078910][ T37] Call Trace: [ 1622.078919][ T37] [ 1622.078928][ T37] dump_stack_lvl+0xe8/0x150 [ 1622.078956][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1622.079025][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1622.079047][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1622.079073][ T37] sys_info+0x135/0x170 [ 1622.079093][ T37] watchdog+0xfd7/0x1030 [ 1622.079124][ T37] ? watchdog+0x1c7/0x1030 [ 1622.079153][ T37] kthread+0x38b/0x470 [ 1622.079173][ T37] ? __pfx_watchdog+0x10/0x10 [ 1622.079193][ T37] ? __pfx_kthread+0x10/0x10 [ 1622.079214][ T37] ret_from_fork+0x514/0xb70 [ 1622.079236][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.079255][ T37] ? __switch_to+0xc89/0x1420 [ 1622.079282][ T37] ? __pfx_kthread+0x10/0x10 [ 1622.079303][ T37] ret_from_fork_asm+0x1a/0x30 [ 1622.079336][ T37] [ 1622.079344][ T37] Sending NMI from CPU 0 to CPUs 1: [ 1622.079380][ C1] NMI backtrace for cpu 1 [ 1622.079396][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1622.079420][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1622.079432][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x39/0xb0 [ 1622.079461][ C1] Code: 10 65 48 8b 15 f8 c6 de 10 41 89 d1 41 81 e1 00 00 00 ff 41 b8 00 01 00 00 44 23 81 fc 0b 00 00 45 09 c1 74 1e 45 85 c0 74 6b <81> fa ff ff ff 0f 77 63 81 e2 00 00 00 0f 75 5b 83 b9 24 17 00 00 [ 1622.079479][ C1] RSP: 0018:ffffc90000a3fa80 EFLAGS: 00000206 [ 1622.079496][ C1] RAX: ffffffff89630abe RBX: 0000000000000001 RCX: ffff88801d2c3e80 [ 1622.079511][ C1] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1622.079525][ C1] RBP: ffff8880b2fa6400 R08: 0000000000000100 R09: 0000000000000100 [ 1622.079539][ C1] R10: dffffc0000000000 R11: fffffbfff1f64310 R12: dffffc0000000000 [ 1622.079554][ C1] R13: ffff88806836d000 R14: ffff88806836d380 R15: ffff88803a0fc036 [ 1622.079570][ C1] FS: 0000000000000000(0000) GS:ffff888125cc8000(0000) knlGS:0000000000000000 [ 1622.079587][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1622.079602][ C1] CR2: 00007f5cc8b272c0 CR3: 0000000054f2e000 CR4: 00000000003526f0 [ 1622.079620][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1622.079634][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1622.079648][ C1] Call Trace: [ 1622.079655][ C1] [ 1622.079663][ C1] taprio_set_budgets+0xbe/0x3a0 [ 1622.079696][ C1] advance_sched+0x979/0xc90 [ 1622.079729][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1622.079755][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 1622.079788][ C1] hrtimer_run_softirq+0x1e1/0x2e0 [ 1622.079813][ C1] handle_softirqs+0x1da/0x6d0 [ 1622.079846][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1622.079873][ C1] run_ktimerd+0x6a/0x100 [ 1622.079902][ C1] smpboot_thread_fn+0x565/0xa70 [ 1622.079931][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1622.079965][ C1] kthread+0x38b/0x470 [ 1622.079985][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1622.080018][ C1] ? __pfx_kthread+0x10/0x10 [ 1622.080038][ C1] ret_from_fork+0x514/0xb70 [ 1622.080059][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.080078][ C1] ? __switch_to+0xc89/0x1420 [ 1622.080107][ C1] ? __pfx_kthread+0x10/0x10 [ 1622.080127][ C1] ret_from_fork_asm+0x1a/0x30 [ 1622.080155][ C1] [ 1622.080384][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1625.513368][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1625.523264][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1625.533493][ T37] Call Trace: [ 1625.536776][ T37] [ 1625.539710][ T37] vpanic+0x56d/0xa60 [ 1625.543703][ T37] ? __pfx_vpanic+0x10/0x10 [ 1625.548210][ T37] ? console_srcu_read_unlock+0x3a/0x60 [ 1625.553780][ T37] panic+0xc5/0xd0 [ 1625.557850][ T37] ? __pfx_panic+0x10/0x10 [ 1625.562269][ T37] ? wq_watchdog_touch+0xf9/0x160 [ 1625.567301][ T37] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1625.573470][ T37] watchdog+0x1030/0x1030 [ 1625.577815][ T37] ? watchdog+0x1c7/0x1030 [ 1625.582248][ T37] kthread+0x38b/0x470 [ 1625.586321][ T37] ? __pfx_watchdog+0x10/0x10 [ 1625.591021][ T37] ? __pfx_kthread+0x10/0x10 [ 1625.595623][ T37] ret_from_fork+0x514/0xb70 [ 1625.600243][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1625.605374][ T37] ? __switch_to+0xc89/0x1420 [ 1625.610091][ T37] ? __pfx_kthread+0x10/0x10 [ 1625.614692][ T37] ret_from_fork_asm+0x1a/0x30 [ 1625.619484][ T37] [ 1625.622755][ T37] Kernel Offset: disabled [ 1625.627077][ T37] Rebooting in 86400 seconds..