last executing test programs: 2m49.918629314s ago: executing program 1 (id=185): syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e240400020000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 2m48.963240461s ago: executing program 1 (id=188): r0 = socket(0x10, 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async, rerun: 32) close(r0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) (async) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2071) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) r2 = epoll_create1(0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x555840, 0x1) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000001b}) (rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) (async) r6 = dup2(r3, r3) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x2013}) 2m47.937406204s ago: executing program 1 (id=193): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x80020849, 0x6, 0x1, 0x2, 0xffffff01}, 0x18, 0x100) syz_open_dev$usbfs(&(0x7f0000000040), 0x10000000001f9, 0x480940) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/sda/queue/discard_max_bytes\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/64, 0x40) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0xfffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x541000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000480)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r3, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r3, 0x2000000a}}, 0x10) close_range(r2, r2, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000640)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) syz_open_dev$vim2m(&(0x7f0000000680), 0x1, 0x2) syz_usb_connect$uac1(0x2, 0x9b, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x323b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x7, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x13}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x3], 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x5b5e38b9a07c55cd, 0xff, 0x7d, 0x81, {0x7, 0x25, 0x1, 0xc, 0xe, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x7, 0x20, "8c"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x4, 0x4, 0xc0, "a16f43", 'JO'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0x8, 0xff, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0xf6, 0xe9, {0x7, 0x25, 0x1, 0x4, 0x1, 0x7}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x2, 0x10, 0x9, 0x10, 0xaa}, 0x5a, &(0x7f0000000840)={0x5, 0xf, 0x5a, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "44160365f916e1303d396f492e88dcd5"}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "3164160bdfbbab6068ba2593d07921e4"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x21, 0xd, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e67ea302e8e00953d8ffc3dc6eb8df46"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x3, 0xd3, 0x3, 0x2f}]}, 0x5, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x446}}, {0x61, &(0x7f0000000900)=@string={0x61, 0x3, "23da5f85e6062cce76f9d2a92cf23fa9c68fb26c337d348c75df6a373d7fdbf394247f2190d531441a0e2138780f0b8a5261680c114a85fe1d4b3ac81044e5dcc26066ef7bcb0f351e8cb3b766d0bfaaf6b2a24e28f859ecf12a057b53b000"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4f, &(0x7f0000000a00)=ANY=[@ANYBLOB="4f037e0b84dd34515ab5c3270aab4e7ac667e242951ad07e1112fd3eebd77a246dc1eb283b47080944eb2c303025a15dc73b7ebede7086f2ba7755e6f54d8e8d76202290e66313b3efa65eaea28224"]}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./sys\x00', &(0x7f0000000b00)='sysfs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020}, 0x2020) 2m44.178440078s ago: executing program 1 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) (fail_nth: 10) 2m38.223880162s ago: executing program 1 (id=207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0xc) (async) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000980)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000009c0)={r3, r1}, 0xc) listen(r0, 0x5) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b704000000000000850000003f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r5, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) (async) sendto(r0, &(0x7f0000000700)="01", 0xffffffee, 0x0, 0x0, 0x0) 2m36.9361761s ago: executing program 1 (id=210): r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000300)=0x4) r1 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f00000007c0)={0x6, 0x3, 0x1, 0xa8, 'syz1\x00', 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000023, 0x0, 0x4}]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x40000000040301, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x3, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {0x0, 0x3000000}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x5d}}, 0xf0}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) chmod(&(0x7f0000000540)='./file0\x00', 0xba) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000008c0)) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000800), 0xc0800) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000840), &(0x7f0000000880)=0x28) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="04030b00c80000000000"], 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000ac0)={0xc0, 0x0, 0x10000}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r8, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x8, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7) mount(0x0, &(0x7f00000006c0)='./sys\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) 2m21.858369563s ago: executing program 32 (id=210): r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000300)=0x4) r1 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f00000007c0)={0x6, 0x3, 0x1, 0xa8, 'syz1\x00', 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000023, 0x0, 0x4}]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x40000000040301, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x3, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {0x0, 0x3000000}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x5d}}, 0xf0}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) chmod(&(0x7f0000000540)='./file0\x00', 0xba) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000008c0)) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000800), 0xc0800) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000840), &(0x7f0000000880)=0x28) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="04030b00c80000000000"], 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000ac0)={0xc0, 0x0, 0x10000}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r8, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x8, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7) mount(0x0, &(0x7f00000006c0)='./sys\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) 2m9.087979786s ago: executing program 2 (id=256): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='3', 0x4e) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101081, 0x20) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) (async) write$P9_RSETATTR(r4, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xe0, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xb, 0xd, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0xe, 0xd4}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xa, 0x6, 0x5d, 0x20, 0x9}, 0x13, &(0x7f00000001c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x2, 0x101}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x447eff8e60bbe67f}}, {0x23, &(0x7f0000000240)=@string={0x23, 0x3, "d287e543a13c69a5108c03d81d2ecf2392bb9feb9879097930888bb6df2b523950"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x402}}]}) splice(r3, 0x0, r2, 0x0, 0xc, 0xa) timer_create(0x0, 0x0, &(0x7f00000005c0)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) 2m7.088364225s ago: executing program 0 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) write(0xffffffffffffffff, &(0x7f0000000300)='0fc5:1227', 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000740)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019ac0), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019b00)=0x410000002) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000019b40), 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000019b80)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000019c00)=0x0, &(0x7f0000019c40)=0x0, &(0x7f0000019c80)=0x0) r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000019cc0)={0x2e, 0xc, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019d40)=@new_dev={0x3, 0x104}}}, &(0x7f0000019d80)=0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r13, 0x0, 0x4) r14 = syz_open_dev$ublk_chdev(&(0x7f0000019dc0), r11, 0x2) syz_ublk_setup_queues(r14, r12, &(0x7f0000019e00)={0x0, 0x92d1, 0x80000, 0x80000002, 0x165}, &(0x7f0000019e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ec5, 0x8, 0x2, 0x2f8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7dd8, 0x80, 0x1, 0x80000264, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa92, 0x8, 0x0, 0x36f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8097fb, 0x400, 0x1, 0x38b}}], 0x4, &(0x7f000001a100)={0x2e, 0x18, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x0, 0x81c, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getdents(r1, &(0x7f0000000080)=""/37, 0x25) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m6.878616666s ago: executing program 2 (id=259): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0xc, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r2, &(0x7f00000003c0), &(0x7f0000000400)=""/109}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f00000004c0), &(0x7f0000000600)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x0, 0x0, 0x3, 0x1, 0x1, 0x2, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @ldst={0x3, 0x1, 0x6, 0x0, 0x1, 0x80, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0xfffffffffffffeec, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r3}, 0xc) mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000280)='cifs\x00', 0x1a00010, &(0x7f00000002c0)) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000100)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x1, 0x1, 0x2, 0x100}, "58555564ae77"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000480)={0x3}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000700)=0x2, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000740), &(0x7f0000000780)=0x4) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="000000000000000463656c6c00000002000000440000000600bfffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff) 2m5.66843355s ago: executing program 2 (id=261): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) userfaultfd(0x801) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000300)=ANY=[], 0x0) syz_io_uring_setup(0x867, &(0x7f00000005c0)={0x0, 0x9164, 0x10, 0x2, 0x358}, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x80000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x3a800000, 0x2000000, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd91, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x40000000, 0xad, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0xf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000080, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5c, 0x8, 0xff, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x10, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}}, 0x404800c) 2m4.652337328s ago: executing program 2 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) write(0xffffffffffffffff, &(0x7f0000000300)='0fc5:1227', 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000740)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019ac0), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019b00)=0x410000002) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000019b40), 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000019b80)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000019c00)=0x0, &(0x7f0000019c40)=0x0, &(0x7f0000019c80)=0x0) r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000019cc0)={0x2e, 0xc, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019d40)=@new_dev={0x3, 0x104}}}, &(0x7f0000019d80)=0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r13, 0x0, 0x4) r14 = syz_open_dev$ublk_chdev(&(0x7f0000019dc0), r11, 0x2) syz_ublk_setup_queues(r14, r12, &(0x7f0000019e00)={0x0, 0x92d1, 0x80000, 0x80000002, 0x165}, &(0x7f0000019e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ec5, 0x8, 0x2, 0x2f8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7dd8, 0x80, 0x1, 0x80000264, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa92, 0x8, 0x0, 0x36f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8097fb, 0x400, 0x1, 0x38b}}], 0x4, &(0x7f000001a100)={0x2e, 0x18, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x0, 0x81c, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getdents(r1, &(0x7f0000000080)=""/37, 0x25) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m2.604926274s ago: executing program 4 (id=264): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) faccessat2(0xffffffffffffff9c, 0x0, 0x7, 0x1100) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000500)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000680)}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f0000000240)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000480)={'veth0_to_team\x00', &(0x7f0000000580)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000640), 0x35c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="0200000001000300000000000400010000000000200006000000000020000300000000006ffa55f30baa99df0eea6219f847655079cb26455369c70d5aa658b6b138f987a7fe93836cd6eb9593107c3efb9be3911ecf0056be15da8e8b7c9562", @ANYRES32=r2, @ANYBLOB="88010da945edd33b82f34c405b6864d6db1dec1a4b260ec14430d287d4c87d99242b9f3be3bd55236240b290189707bdbf83f87051b5a803460b8081a533d412027041c15a35966410", @ANYRES64=r3], 0x24, 0x1) 1m59.723381576s ago: executing program 4 (id=268): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000400)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc10700000032d0ad7bc946813591bd8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) ioctl$FS_IOC_GETFLAGS(r3, 0x89e1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f68737200000000080003000300000014000380100003"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0) mkdir(&(0x7f0000000300)='./my_configfs\x00', 0xf9) mount(0x0, &(0x7f0000000340)='./my_configfs\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000001540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0x4018aee2, &(0x7f0000000040)={0x1, 0x0, [{0x40000000, 0xe, 0x0, 0x97, 0xda, 0x2, 0xffff}]}) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="a355cc02bd7551d1c869821d018780bb413d58529547868a30930ce1e07634dbeb", 0x21}, {&(0x7f00000000c0)="3aa1416938fecefc1709c3f5f4a162fed9785e5fd7a2478db364615032da87105a41e09138cc0542e009609bbfe098e81824a3f17b8b438183526043b704576a6fc9f933bcffc8efc09229548d481c0cacc8b7c7e6646a2b818e7fdd6e2aa95fa1f4cb9ede07f04ceed80431331874cb77bbf464402f6175cb9e331402146c1cc2c6b35d9dff5eeeaeb469620af2c3bd276a0a893e70f1262c376885c034b738729b9497b4f3fa3ce4172bcbcc0534912224834e", 0xb4}], 0x2, 0x1) mkdir(&(0x7f00000003c0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) 1m59.282181456s ago: executing program 0 (id=269): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000780), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x9, 0xa, 0x1, 0x6, 0x6}}, {0x4}}]}]}, 0x64}}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff) r3 = socket(0x10, 0x3, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000bc0)=0x6) r4 = syz_open_dev$sndmidi(&(0x7f0000000c00), 0x2, 0x141102) writev(r4, &(0x7f0000000c40)=[{&(0x7f0000000c80)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000cc0)={'bridge0\x00', &(0x7f0000000d00)=@ethtool_rxfh={0x2c, 0x0, 0x0, 0x0, 0x3}}) set_mempolicy(0x8006, &(0x7f0000000d40)=0xfff, 0x5) setns(0xc9, 0x0) setns(0xc9, 0x0) listen(r3, 0x4) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x400261f3, &(0x7f0000000d80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='3', 0x4e) semget$private(0x0, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'gre0\x00', r2, 0x80, 0x700, 0x6, 0x8, {{0x17, 0x4, 0x1, 0x2, 0x5c, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0x11, "587356e7f73e15288dade3a2286dcf"}, @timestamp_prespec={0x44, 0x2c, 0x6c, 0x3, 0x8, [{@empty, 0x7}, {@rand_addr=0x64010105, 0x100}, {@private=0xa010101, 0x41}, {@empty, 0x7}, {@rand_addr=0x64010102, 0x8}]}, @ra={0x94, 0x4}]}}}}}) sendto$inet6(r0, &(0x7f00000008c0)="455bb91c62b3a61f0e2a4f3929d864664b8a3b395b43498ce5e9e822ab624dac39fe85ad26ae2e681900b4be1baa4b4918b4aa190494e53cbf1dd5528391da92439ca34ba3dd558623b554481e8f49c9a0fe12672d6f262b0ff425e74c9eb1709dc791ad067271975d2cea9dff20f63a15c15c227217cc69b51cc7149770dc6d7ce0aa39b680427fa849655d06f68bd3cce203fa094a007d96eed19b0f7f0da5cc5ab7f24ac95504c3d8abbccaa41e41332b421911e7c6311654289c30aace38996f5362c21e7c2d59c32a210bb80900e7f6ce774ed09a4768", 0xd9, 0x8000, &(0x7f00000009c0)={0xa, 0x4e22, 0xa07, @private0={0xfc, 0x0, '\x00', 0xf}, 0x3}, 0x1c) 1m54.762045741s ago: executing program 4 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000270000/0x4000)=nil, 0x4000, 0x1, 0x80010, r2, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4102, 0x1006) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20700, 0x20100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x88d0, 0x8101}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x488c1}, @IFLA_GROUP={0x8, 0x1b, 0x80000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) rt_sigqueueinfo(0x0, 0x28, &(0x7f0000000080)={0x39, 0x1ff, 0x1c1}) 1m54.419716057s ago: executing program 0 (id=272): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x80020849, 0x6, 0x1, 0x2, 0xffffff01}, 0x18, 0x100) syz_open_dev$usbfs(&(0x7f0000000040), 0x10000000001f9, 0x480940) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/sda/queue/discard_max_bytes\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/64, 0x40) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0xfffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x541000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000480)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r3, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r3, 0x2000000a}}, 0x10) close_range(r2, r2, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000640)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) syz_open_dev$vim2m(&(0x7f0000000680), 0x1, 0x2) syz_usb_connect$uac1(0x2, 0x9b, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x323b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x7, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x13}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x3], 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x5b5e38b9a07c55cd, 0xff, 0x7d, 0x81, {0x7, 0x25, 0x1, 0xc, 0xe, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x7, 0x20, "8c"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x4, 0x4, 0xc0, "a16f43", 'JO'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0x8, 0xff, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0xf6, 0xe9, {0x7, 0x25, 0x1, 0x4, 0x1, 0x7}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x2, 0x10, 0x9, 0x10, 0xaa}, 0x5a, &(0x7f0000000840)={0x5, 0xf, 0x5a, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "44160365f916e1303d396f492e88dcd5"}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "3164160bdfbbab6068ba2593d07921e4"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x21, 0xd, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e67ea302e8e00953d8ffc3dc6eb8df46"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x3, 0xd3, 0x3, 0x2f}]}, 0x5, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x446}}, {0x61, &(0x7f0000000900)=@string={0x61, 0x3, "23da5f85e6062cce76f9d2a92cf23fa9c68fb26c337d348c75df6a373d7fdbf394247f2190d531441a0e2138780f0b8a5261680c114a85fe1d4b3ac81044e5dcc26066ef7bcb0f351e8cb3b766d0bfaaf6b2a24e28f859ecf12a057b53b000"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4f, &(0x7f0000000a00)=ANY=[@ANYBLOB="4f037e0b84dd34515ab5c3270aab4e7ac667e242951ad07e1112fd3eebd77a246dc1eb283b47080944eb2c303025a15dc73b7ebede7086f2ba7755e6f54d8e8d76202290e66313b3efa65eaea28224"]}]}) mount(0x0, &(0x7f0000000ac0)='./sys\x00', &(0x7f0000000b00)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/module/acpi/parameters/debug_level\x00', 0x82, 0x0) read$FUSE(r5, &(0x7f0000000b80)={0x2020}, 0x2020) 1m52.768011166s ago: executing program 2 (id=274): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x6, 0xfffffffa, {}, {0xee00}, 0x9, 0x7af0}) setreuid(r0, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='add /', 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = getpid() setpriority(0x0, r2, 0x7) 1m52.504665454s ago: executing program 4 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x4004800) 1m52.169805618s ago: executing program 2 (id=276): syz_usb_connect(0x0, 0x36, &(0x7f0000019a00)=ANY=[@ANYBLOB="1201000200000040f20c50620000010203010902240001010080fa090400000208065000090501020002010000090582020002000000246cea7d90e87e49c27d0689426f6c4488cae4af6b28dabca1b3eb3d78ab1d3e9216992bb0e76af63a5ec7eaf3f12ea1b9f50c50117773efdb9cb4818d299fe06d618d4190a834b1ff5ca7178fc220d5d70307c2fdf65486548791e2cb8e307a0afc76b6fc9f1873742fb6293a04cee6a4548c34dd9d3fbfbb45521af892595e51d0b8bd34f844a7d4bceac69390de1b2a23"], 0x0) syz_usb_connect$uac3(0x0, 0x186, &(0x7f0000019280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x19b5, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x3, 0x1, 0x10, 0x80, 0x3, {0x8, 0xb, 0x2, 0x2, 0x1, 0x1, 0x30, 0xfa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x68, 0x40}, [@feature_unit={0x11, 0x24, 0x7, 0x1, 0x5, [0xe, 0xd, 0x19]}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x300, 0x2, 0x1, 0x4, 0x7, 0x5, 0x3, 0x2685}, @extension_unit={0x1d, 0x24, 0xa, 0x2, 0x3, [0x3, 0x0, 0x2, 0x0, 0x2, 0x0]}, @feature_unit={0x11, 0x24, 0x7, 0x2, 0x2, [0xd, 0xf, 0x3]}, @selector_unit={0xc, 0x24, 0xc, 0x5, 0x7, "66c8455745a87e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x2, 0x1c, "64aee6ce"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x6, 0xec, "3c6e8a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x87af, 0x81, 0x9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x3, "50ad7acbfe72f99634"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x6, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x2, 0xfd, {0xa, 0x25, 0x25, 0x9, 0x7, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x3}, @as_header={0x17, 0x24, 0x1, 0x2, 0x100, 0x67, 0x1002, 0xa, 0x6, 0x9, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x6, 0x3, 0xe}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x1166, 0x9, "732aefe931b1f451"}, @as_header={0x17, 0x24, 0x1, 0x7, 0x5, 0x4, 0x1001, 0x1, 0xa, 0x200, 0x9}, @as_header={0x17, 0x24, 0x1, 0x2, 0x3ff, 0x2, 0x1001, 0x9, 0x4, 0x8, 0xda}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x38, 0x2, {0xa, 0x25, 0x25, 0x5, 0xf7, 0x6}}}}}}}}]}}, &(0x7f0000019940)={0xa, &(0x7f0000019440)={0xa, 0x6, 0x200, 0xf7, 0x4a, 0x4e, 0xff, 0x7}, 0x60, &(0x7f0000019e40)=ANY=[@ANYBLOB="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"], 0xa, [{0x4, &(0x7f0000019500)=@lang_id={0x4, 0x3, 0x809}}, {0x30, &(0x7f00000000c0)=@string={0x30, 0x3, "d515d3819d3a91416c6020385f7820abf93bceec4cfa5bfd37160d41f213bf03d83e099ca8f24c0cfb46121297e3"}}, {0x4, &(0x7f0000019580)=@lang_id={0x4, 0x3, 0x402}}, {0x3a, &(0x7f0000019d00)=ANY=[@ANYBLOB="3a03747b0338af7fd6729c40d87e62785f0a79b79fd91078d8722107fd8aaf4c8b7266ceeee7f8ec945424cadfd6a2de5ca9215c4af2d37cb0677b304ef7ed"]}, {0x4, &(0x7f0000019480)=@lang_id={0x4, 0x3, 0x426}}, {0x71, &(0x7f0000019680)=@string={0x71, 0x3, "ca41e3307567549c472b89dc6bf28188a060d49735f2c2663c0792f827933b1e83d05f0fcfacaae450d1049571c7b2d0f7ac5223651301c44d8ec556d844542212402fb7bfd2da03b8be519542a0649a59dc54d310e701ffe147d0f1756d85ec2047bf354460fae03055bbcd9798e9"}}, {0x4, &(0x7f0000019700)=@lang_id={0x4, 0x3, 0x40c}}, {0xa8, &(0x7f0000019780)=ANY=[@ANYBLOB="a8032201171a17fb793ad72d7fddb564547f453799b150b88f05f406736969163287c8ece28a504fdba68c29aae7cf5e30ff94512464dbc511c43331fcd2ae476e8e4f3e6c33063f6e99005836ecbc6aa71d4b3e70431b8d2a38f5b4a4afba6cd7f907d3493be5fc5680bf88ea6d4bba540d080d4d18017cf820757d3a3ec5bd58243a8382e5a6d7f6e0a99382a320aa101b40df15b7301d3b24d09edafaa3322bc703911f1880fe"]}, {0x66, &(0x7f0000019840)=@string={0x66, 0x3, "862c16a62df26d8e245eb293c93d1c15ada73a10778a3dfb6db78dc41f4e043c3e908905742569a31cfe983151f07981d046d57ffc23b8f7a1021fee8a44d0b71568dd13278f3ccd96144785481f74dc6ee6580f2fcc67ac92a94e8fd2f147544a400ec4"}}, {0x44, &(0x7f00000198c0)=ANY=[@ANYBLOB="440376ea9820b160de7506a6fdedbd3f86a303cf2447f72e7ed92077e6879f1877b6cf475d4bb60f892811dd28201753eabea702b73fb44612491584739757aa8ee03c7f"]}]}) r0 = socket(0x40000000015, 0x5, 0x0) socket(0x15, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000019bc0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000019c00)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000019c40)={0x0, @bt={0xf0, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000240)=""/102398, &(0x7f0000019240)=0x18ffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000019540)='./file0\x00', 0x42, 0x85) mount$9p_fd(0x0, &(0x7f00000195c0)='./file0\x00', &(0x7f0000019640), 0x12100ca, &(0x7f0000019740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000ffb8040202400001020301090224000101810006090400fa010701020109050102ff03804301090506040000000000"], &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x38, 0x0, 0x3, 0xff, 0x9}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="d636050f040000"], 0x3, [{0x6c, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x1c09}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44b}}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141080, 0x0) timer_delete(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) pipe2(0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000019dc0)={0x2, &(0x7f0000019e00)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) splice(r5, &(0x7f00000194c0)=0x10, 0xffffffffffffffff, 0x0, 0x807, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000019d80)={0x213cb68ad5d41f74, 0xffffffffffffffff, 0x1}) timer_create(0x2, &(0x7f0000019b00)={0x0, 0x21}, &(0x7f0000019b40)=0x0) timer_settime(r8, 0x1, &(0x7f0000019b80)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) 1m51.949558706s ago: executing program 4 (id=277): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000200)={0x2001, 0x0, 0x1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x2040000, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {0x0, 0x6}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) bind$tipc(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 1m51.592268956s ago: executing program 0 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) write(r0, &(0x7f0000000000)='270', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x2004c000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r2 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000002c0)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0x20040051) setgroups(0x41b7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0xecf86c37d53049cc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='lz4hc', 0x5) 1m49.999161576s ago: executing program 0 (id=279): openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x8, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mount$nfs(&(0x7f0000000040)='/dev/cuse\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810000, &(0x7f0000000100)={[{'fd/3\x00'}, {':*\\\\){\'i'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '^(\'\\'}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x719, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) 1m49.760055133s ago: executing program 4 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000380), 0x50) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000680), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0xa, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x401, 0x7, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x40000000, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x5, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0x100000d, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x1c, 0x7, 0x5, 0x12, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x9287, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0xf8, 0x100, 0x10008d0, 0x9, 0x5, 0x1007ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0xfffffffd, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x1b8d, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0x8, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce6, 0x6, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0x0, 0x2, 0x7fff, 0x2, 0x14c, 0x800060a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x6e4e9bcf, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000b40)=[{}, {r1}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000b80)={0xb, @sliced={0x2, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0xa, 0x7, 0x200, 0x0, 0xc29, 0xd069, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0xd443, 0x3, 0x81, 0x5, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x7, 0xf52, 0x4, 0xaae, 0x8, 0x85], 0x9}}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='foo1 bar1 0', 0xb) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000003c0)=0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x104c00, 0x3e) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000a000000800004801300010062726f61933664636173742d6c696e"], 0x94}}, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000280)={'adq12b\x00', [0x100000, 0x0, 0x22f, 0x7, 0x80000000, 0x5c, 0xfffffffc, 0x4, 0x0, 0x3, 0x4, 0x8, 0x2, 0x2, 0x9bf463a4, 0x2, 0x7fff, 0x3, 0x800, 0x2, 0x3, 0x1, 0x4, 0xff, 0x9, 0x3, 0x35, 0x6, 0xfffffff8, 0x10, 0x4, 0x70c]}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x43) write(r4, &(0x7f0000000000)='100', 0x3) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd10x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r3, &(0x7f0000000400)='7', 0x1) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, 0x0) fanotify_init(0x18, 0x101000) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000440)=@in6={0x21, 0xb, 0x2, 0x1c, {0xa, 0x4e24, 0xc49, @empty, 0x5}}, 0x24) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@getsadinfo={0x2d8, 0x23, 0x20, 0x70bd28, 0x25dfdbfd, 0x0, [@iptfs_drop_time={0x8, 0x24, 0x80000000}, @lifetime_val={0x24, 0x9, {0x5, 0x101, 0x4, 0x800008}}, @algo_crypt={0x136, 0x2, {{'lrw(xts(cast6))\x00'}, 0x770, "a194e2141605ee8214cfc31d3fc9ea1f4fa1f099fc77798043ef7b29a3f081c99664131d1b60cc6499c5492ffadd56079085c271024cca321e35ffa45fcb12b57b7fc06e5db1d967723fa3531e89415f63ca2206d51964435e4471f00eb411947ffb40f2e5d6f21cc2a975b7a65302fbddcc4b0ed61e17a7b90f6f59589a9b9a9e89eabb7862e8ca16af775097e2d10ebb33602019bcc89c898a8ee0605f543e2f9878b1268d0cfb7fa5a05688168c1ccb4f8099cdae1ec26ec383dd2019641e18ed08af04f367d2da78f1e64d70cd65476b83efadf5052f11f35a9b1c3888b29f4bf15cc92498779196b9f5c666"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @algo_comp={0x71, 0x3, {{'lzs\x00'}, 0x148, "7a2d399a4c28dfc6ee59c671ec3c783b176a085752fde550c9c14dd129c27449d950e4b6ae5d41a9e5"}}, @sa={0xe4, 0x6, {{@in=@private=0xa010101, @in=@local, 0x4e21, 0x1, 0x4e21, 0x0, 0xa, 0xe0, 0x100, 0x1d, 0x0, r2}, {@in6=@loopback, 0x4d3, 0xff}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x5, 0x0, 0xfff, 0x0, 0xffffffff, 0x6, 0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x10000, 0x1ff, 0x7fffffffffffffff}, {0x100, 0x4, 0x10000}, 0x70bd2c, 0x350a, 0xa, 0x4, 0x9, 0x74}}]}, 0xfffffffffffffd51}}, 0x0) 1m43.03252889s ago: executing program 0 (id=284): r0 = syz_open_dev$cec(&(0x7f0000000800), 0x0, 0xa0a02) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000009c0)={"a0453822", 0x0, 0x6, 0x2, 0xbe, 0x8, "3377f877c734c40400", "01d61500", "020100", "d9f2d351", ["c3869ed5e174fb493207ec01", "0080000000000000001000", "000000000000000000c40800", "0016fab26600f5ffffff8100"]}) getxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_access\x00', &(0x7f00000005c0)=""/47, 0x2f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000e40)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000e80)=0x400000001, 0x4) connect$inet6(r1, &(0x7f0000000ec0)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) ioctl$int_out(r1, 0x0, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000f00)={0x0, 0x21, 0x800000000004}, &(0x7f0000000f40)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000ffffff800000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000300)=""/222}, 0x78) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac140001"], 0x4a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000600)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000008c0)={0x20, 0x7, 0x9b, "4488357d67f93d177b4a9765fb500482c0fcf6a261da5662198b6ec86942c3c98bf15dcb860282ec7349c136d5a9a2795aa743bee9f6c7cd1baba4131712c290c500e1c78c07aecbc3588b49b2b2177bb11fa6ea2be5d88e8ac6548aeb73ce690269b57c4754d7001b3d7c41e1a72b1bb3ef2d6f524a65d519e72de007e62ec17183c80ad7ae994810b8a543da53a5275b21c48f3012626efd894a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000980)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000fc0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m40.087644599s ago: executing program 3 (id=285): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x6, 0xfffffffa, {}, {0xee00}, 0x9, 0x7af0}) setreuid(r0, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='add /', 0x5) r2 = getpid() setpriority(0x0, r2, 0x7) 1m39.946568422s ago: executing program 3 (id=286): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000280)={'virt_wifi0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) close(r2) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x4) acct(&(0x7f0000000240)='./file0\x00') write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0xff70) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a07020700000029bd70006e8fadcd05001a00ac1414bb0000000000000000000000fe80000000000000000000000000000c260004de"], 0x38}}, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sec\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)=' /n\\X_domain\n', 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 1m38.290036716s ago: executing program 3 (id=287): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x80020849, 0x6, 0x1, 0x2, 0xffffff01}, 0x18, 0x100) syz_open_dev$usbfs(&(0x7f0000000040), 0x10000000001f9, 0x480940) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/sda/queue/discard_max_bytes\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/64, 0x40) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0xfffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x541000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000480)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r3, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r3, 0x2000000a}}, 0x10) close_range(r2, r2, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000640)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) syz_open_dev$vim2m(&(0x7f0000000680), 0x1, 0x2) syz_usb_connect$uac1(0x2, 0x9b, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x323b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x7, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x13}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x3], 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x5b5e38b9a07c55cd, 0xff, 0x7d, 0x81, {0x7, 0x25, 0x1, 0xc, 0xe, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x7, 0x20, "8c"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x4, 0x4, 0xc0, "a16f43", 'JO'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0x8, 0xff, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0xf6, 0xe9, {0x7, 0x25, 0x1, 0x4, 0x1, 0x7}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x2, 0x10, 0x9, 0x10, 0xaa}, 0x5a, &(0x7f0000000840)={0x5, 0xf, 0x5a, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "44160365f916e1303d396f492e88dcd5"}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "3164160bdfbbab6068ba2593d07921e4"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x21, 0xd, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e67ea302e8e00953d8ffc3dc6eb8df46"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x3, 0xd3, 0x3, 0x2f}]}, 0x5, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x446}}, {0x61, &(0x7f0000000900)=@string={0x61, 0x3, "23da5f85e6062cce76f9d2a92cf23fa9c68fb26c337d348c75df6a373d7fdbf394247f2190d531441a0e2138780f0b8a5261680c114a85fe1d4b3ac81044e5dcc26066ef7bcb0f351e8cb3b766d0bfaaf6b2a24e28f859ecf12a057b53b000"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4f, &(0x7f0000000a00)=ANY=[@ANYBLOB="4f037e0b84dd34515ab5c3270aab4e7ac667e242951ad07e1112fd3eebd77a246dc1eb283b47080944eb2c303025a15dc73b7ebede7086f2ba7755e6f54d8e8d76202290e66313b3efa65eaea28224"]}]}) mount(0x0, &(0x7f0000000ac0)='./sys\x00', &(0x7f0000000b00)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/module/acpi/parameters/debug_level\x00', 0x82, 0x0) read$FUSE(r5, &(0x7f0000000b80)={0x2020}, 0x2020) 1m36.799901917s ago: executing program 33 (id=276): syz_usb_connect(0x0, 0x36, &(0x7f0000019a00)=ANY=[@ANYBLOB="1201000200000040f20c50620000010203010902240001010080fa090400000208065000090501020002010000090582020002000000246cea7d90e87e49c27d0689426f6c4488cae4af6b28dabca1b3eb3d78ab1d3e9216992bb0e76af63a5ec7eaf3f12ea1b9f50c50117773efdb9cb4818d299fe06d618d4190a834b1ff5ca7178fc220d5d70307c2fdf65486548791e2cb8e307a0afc76b6fc9f1873742fb6293a04cee6a4548c34dd9d3fbfbb45521af892595e51d0b8bd34f844a7d4bceac69390de1b2a23"], 0x0) syz_usb_connect$uac3(0x0, 0x186, &(0x7f0000019280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x19b5, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x3, 0x1, 0x10, 0x80, 0x3, {0x8, 0xb, 0x2, 0x2, 0x1, 0x1, 0x30, 0xfa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x68, 0x40}, [@feature_unit={0x11, 0x24, 0x7, 0x1, 0x5, [0xe, 0xd, 0x19]}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x300, 0x2, 0x1, 0x4, 0x7, 0x5, 0x3, 0x2685}, @extension_unit={0x1d, 0x24, 0xa, 0x2, 0x3, [0x3, 0x0, 0x2, 0x0, 0x2, 0x0]}, @feature_unit={0x11, 0x24, 0x7, 0x2, 0x2, [0xd, 0xf, 0x3]}, @selector_unit={0xc, 0x24, 0xc, 0x5, 0x7, "66c8455745a87e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x2, 0x1c, "64aee6ce"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x6, 0xec, "3c6e8a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x87af, 0x81, 0x9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x3, "50ad7acbfe72f99634"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x6, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x2, 0xfd, {0xa, 0x25, 0x25, 0x9, 0x7, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x3}, @as_header={0x17, 0x24, 0x1, 0x2, 0x100, 0x67, 0x1002, 0xa, 0x6, 0x9, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x6, 0x3, 0xe}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x1166, 0x9, "732aefe931b1f451"}, @as_header={0x17, 0x24, 0x1, 0x7, 0x5, 0x4, 0x1001, 0x1, 0xa, 0x200, 0x9}, @as_header={0x17, 0x24, 0x1, 0x2, 0x3ff, 0x2, 0x1001, 0x9, 0x4, 0x8, 0xda}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x38, 0x2, {0xa, 0x25, 0x25, 0x5, 0xf7, 0x6}}}}}}}}]}}, &(0x7f0000019940)={0xa, &(0x7f0000019440)={0xa, 0x6, 0x200, 0xf7, 0x4a, 0x4e, 0xff, 0x7}, 0x60, &(0x7f0000019e40)=ANY=[@ANYBLOB="050f6000050710020083050020100a0825f7ffff00001000c0000000303f0000c00000003000000000c00000071002044000c00b100102d70056017f000522e719a62a85e533374ac363d16273824f7d14befcb1f67da0fdd6d5ab61503f29949ccc3471dacf72fd0e9547313982ab07506ab5fc7c355f0a7ec349b719f06c4f2ba6754394a3fc79c6b75f83e697b126fcae7b35790962ebf99c49af74c40fe0bb656e8b814e55ea2de42c223af66cedead65b3982badbdd8fb6fa1395605a33416ff5650455dedeefeb28d1001aba16dc3780276082f4d89bd0c56cdbb9ed7c91fae2e58d6a3ca0754e310709f594cb5e6ab8eae32bbd7d829ff899952735d89361f6af7ed5f09e06a18688d3bb25f47d3c9075d66c6b048158309c66a96f3bcd9e9e26987b220f8ff84d4043f0c51404827369c81186f04ba5cad2e22c816793f348728ad7402e39d9615cc0db061c5ee7f9620a4d29adff39c7359210c2fe4aaece45b3d70c3878faa4b42268377003d3ed6de980fc87f48e92ce8abb652e40"], 0xa, [{0x4, &(0x7f0000019500)=@lang_id={0x4, 0x3, 0x809}}, {0x30, &(0x7f00000000c0)=@string={0x30, 0x3, "d515d3819d3a91416c6020385f7820abf93bceec4cfa5bfd37160d41f213bf03d83e099ca8f24c0cfb46121297e3"}}, {0x4, &(0x7f0000019580)=@lang_id={0x4, 0x3, 0x402}}, {0x3a, &(0x7f0000019d00)=ANY=[@ANYBLOB="3a03747b0338af7fd6729c40d87e62785f0a79b79fd91078d8722107fd8aaf4c8b7266ceeee7f8ec945424cadfd6a2de5ca9215c4af2d37cb0677b304ef7ed"]}, {0x4, &(0x7f0000019480)=@lang_id={0x4, 0x3, 0x426}}, {0x71, &(0x7f0000019680)=@string={0x71, 0x3, "ca41e3307567549c472b89dc6bf28188a060d49735f2c2663c0792f827933b1e83d05f0fcfacaae450d1049571c7b2d0f7ac5223651301c44d8ec556d844542212402fb7bfd2da03b8be519542a0649a59dc54d310e701ffe147d0f1756d85ec2047bf354460fae03055bbcd9798e9"}}, {0x4, &(0x7f0000019700)=@lang_id={0x4, 0x3, 0x40c}}, {0xa8, &(0x7f0000019780)=ANY=[@ANYBLOB="a8032201171a17fb793ad72d7fddb564547f453799b150b88f05f406736969163287c8ece28a504fdba68c29aae7cf5e30ff94512464dbc511c43331fcd2ae476e8e4f3e6c33063f6e99005836ecbc6aa71d4b3e70431b8d2a38f5b4a4afba6cd7f907d3493be5fc5680bf88ea6d4bba540d080d4d18017cf820757d3a3ec5bd58243a8382e5a6d7f6e0a99382a320aa101b40df15b7301d3b24d09edafaa3322bc703911f1880fe"]}, {0x66, &(0x7f0000019840)=@string={0x66, 0x3, "862c16a62df26d8e245eb293c93d1c15ada73a10778a3dfb6db78dc41f4e043c3e908905742569a31cfe983151f07981d046d57ffc23b8f7a1021fee8a44d0b71568dd13278f3ccd96144785481f74dc6ee6580f2fcc67ac92a94e8fd2f147544a400ec4"}}, {0x44, &(0x7f00000198c0)=ANY=[@ANYBLOB="440376ea9820b160de7506a6fdedbd3f86a303cf2447f72e7ed92077e6879f1877b6cf475d4bb60f892811dd28201753eabea702b73fb44612491584739757aa8ee03c7f"]}]}) r0 = socket(0x40000000015, 0x5, 0x0) socket(0x15, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000019bc0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000019c00)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000019c40)={0x0, @bt={0xf0, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000240)=""/102398, &(0x7f0000019240)=0x18ffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000019540)='./file0\x00', 0x42, 0x85) mount$9p_fd(0x0, &(0x7f00000195c0)='./file0\x00', &(0x7f0000019640), 0x12100ca, &(0x7f0000019740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000ffb8040202400001020301090224000101810006090400fa010701020109050102ff03804301090506040000000000"], &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x38, 0x0, 0x3, 0xff, 0x9}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="d636050f040000"], 0x3, [{0x6c, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x1c09}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44b}}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141080, 0x0) timer_delete(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) pipe2(0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000019dc0)={0x2, &(0x7f0000019e00)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) splice(r5, &(0x7f00000194c0)=0x10, 0xffffffffffffffff, 0x0, 0x807, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000019d80)={0x213cb68ad5d41f74, 0xffffffffffffffff, 0x1}) timer_create(0x2, &(0x7f0000019b00)={0x0, 0x21}, &(0x7f0000019b40)=0x0) timer_settime(r8, 0x1, &(0x7f0000019b80)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) 1m36.537097572s ago: executing program 3 (id=289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000a0000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcd, &(0x7f0000000340)=""/205, 0x41100}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000540)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r6, &(0x7f0000000b00)='7', 0x1) pselect6(0x0, 0x0, &(0x7f0000000b40)={0x1, 0x100000001, 0x2, 0x4000000000003, 0x4, 0x888, 0x0, 0x9}, 0x0, &(0x7f0000000b80)={0x0, 0x989680}, 0x0) sendfile(r3, r0, &(0x7f0000000500)=0xfffffffffffffff7, 0xf6) syz_clone3(&(0x7f0000000600)={0x23800000, &(0x7f0000000680)=0xffffffffffffffff, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x6, &(0x7f0000000200)=0x0) io_submit(r8, 0x1, &(0x7f0000000700)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000800)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000bc0)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x110a, 0x5}, @ptr={0x70742a85, 0x4, &(0x7f0000000240)=""/61, 0x3d, 0x0, 0x18}}, &(0x7f00000009c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) mkdir(0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 1m33.912088402s ago: executing program 34 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000380), 0x50) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000680), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0xa, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x401, 0x7, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x40000000, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x5, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0x100000d, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x1c, 0x7, 0x5, 0x12, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x9287, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0xf8, 0x100, 0x10008d0, 0x9, 0x5, 0x1007ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0xfffffffd, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x1b8d, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0x8, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce6, 0x6, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0x0, 0x2, 0x7fff, 0x2, 0x14c, 0x800060a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x6e4e9bcf, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000b40)=[{}, {r1}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000b80)={0xb, @sliced={0x2, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0xa, 0x7, 0x200, 0x0, 0xc29, 0xd069, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0xd443, 0x3, 0x81, 0x5, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x7, 0xf52, 0x4, 0xaae, 0x8, 0x85], 0x9}}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='foo1 bar1 0', 0xb) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000003c0)=0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x104c00, 0x3e) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000a000000800004801300010062726f61933664636173742d6c696e"], 0x94}}, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000280)={'adq12b\x00', [0x100000, 0x0, 0x22f, 0x7, 0x80000000, 0x5c, 0xfffffffc, 0x4, 0x0, 0x3, 0x4, 0x8, 0x2, 0x2, 0x9bf463a4, 0x2, 0x7fff, 0x3, 0x800, 0x2, 0x3, 0x1, 0x4, 0xff, 0x9, 0x3, 0x35, 0x6, 0xfffffff8, 0x10, 0x4, 0x70c]}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x43) write(r4, &(0x7f0000000000)='100', 0x3) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd10x0, &(0x7f0000000780), &(0x7f0000000800)) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)=@delpolicy={0x178, 0x14, 0x300, 0x70bd2b, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4e20, 0x1915, 0x4e23, 0x6, 0x2, 0x0, 0xa0, 0xff, 0x0, r1}, 0x6e6bb4}, [@iptfs_drop_time={0x8, 0x24, 0x4000}, @lastused={0xc, 0xf, 0x7}, @mark={0xc, 0x15, {0x35075c, 0x4}}, @algo_auth_trunc={0xf6, 0x14, {{'sm3\x00'}, 0x550, 0x4b401d6e2448d2c1, "430793f55d277fc315fda7ed1e218211710d6069982ce15cdda8a43224915e81709b9fffa1b4385e2a5466a4639063eec267cd8914cf6f30e8e06ae01d3248cce3f29bb620f1144aefbe1d3ebf481067652553db4dfa6a26ba4140b490aa825c53d3bd3ce083f77ef7a57f68bb603e8c483fe66164330728e2d8a399919b075b509479a72179ea072baaa3d24a77772170f989638b37e64271e4095041587ae3b5ffe807fbb6466372ba"}}, @extra_flags={0x8, 0x18, 0x3}, @etimer_thresh={0x8, 0xc, 0x8}]}, 0x178}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040c0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000000e8acf6b477e4cae10a93ec92aa9a149ce13b9a26fd91139597fd17a3029e6f4a47faf1a79faa621a515084c44e6194b50c42d38e6adb7f0cf0aba7d77da65aecaf2ad39bff7146c7592f40b2daba51af515d7028a6c66cc552623e21c3c8bbe5b4c7a96b3cb47ce65cbd81013a44d1bc02bb6b23494bdd7fb20b88aa57c4954b96d417fda0eba53479cdb8b393c27b6058e49d1d0c7eee53816eebe38c3015d636bff2731af50000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000a80)='./security\x00', &(0x7f0000000ac0)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./security/ima/policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000b40)='measure ', 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x164, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2f, 0x6, "e9859e20adffa6e1956029b6105f919ebd3c0bc2e82a6c7aba9767a86ed00880884250ed52f6bd30773331"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "c1de426696338bb22808d42392c9fe489eb20ceefa8c8f98c064724edecb5feb5b9463ae481d68cded36bb961a66435aa0a91950248073461bb2a2d3ef71177356c555f5d6c4ea9a9a6d3eebc12e6d6bf2cc83bd413aed038c7005fb0b7d883b8b8c8ab9e02e17b0f5756a331eaac2074fd443eef25ab5351b9cd2eb5f54fa9961d8513791c2320609042cb8ec83283a531cce4438f48521739844d5a959e6b80ecb5d490a00861348b019216663645ac5117780800d90c5a59506a9c3f20e949ca08262b88765d15fa9b1a3417432f560ffe819d4b270"}, @NFTA_TABLE_USERDATA={0x1a, 0x6, "4c2649be65bd220da7f41f3bd3c07e3a3a4ef1954b5f"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x1ac}, 0x1, 0x0, 0x0, 0x80004}, 0xc801) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0xe12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) 1m26.753088954s ago: executing program 35 (id=284): r0 = syz_open_dev$cec(&(0x7f0000000800), 0x0, 0xa0a02) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000009c0)={"a0453822", 0x0, 0x6, 0x2, 0xbe, 0x8, "3377f877c734c40400", "01d61500", "020100", "d9f2d351", ["c3869ed5e174fb493207ec01", "0080000000000000001000", "000000000000000000c40800", "0016fab26600f5ffffff8100"]}) getxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_access\x00', &(0x7f00000005c0)=""/47, 0x2f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000e40)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000e80)=0x400000001, 0x4) connect$inet6(r1, &(0x7f0000000ec0)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) ioctl$int_out(r1, 0x0, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000f00)={0x0, 0x21, 0x800000000004}, &(0x7f0000000f40)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000ffffff800000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000300)=""/222}, 0x78) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac140001"], 0x4a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000600)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000008c0)={0x20, 0x7, 0x9b, "4488357d67f93d177b4a9765fb500482c0fcf6a261da5662198b6ec86942c3c98bf15dcb860282ec7349c136d5a9a2795aa743bee9f6c7cd1baba4131712c290c500e1c78c07aecbc3588b49b2b2177bb11fa6ea2be5d88e8ac6548aeb73ce690269b57c4754d7001b3d7c41e1a72b1bb3ef2d6f524a65d519e72de007e62ec17183c80ad7ae994810b8a543da53a5275b21c48f3012626efd894a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000980)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000fc0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m15.590476792s ago: executing program 36 (id=291): r0 = socket$netlink(0x10, 0x3, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000780), &(0x7f0000000800)) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)=@delpolicy={0x178, 0x14, 0x300, 0x70bd2b, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4e20, 0x1915, 0x4e23, 0x6, 0x2, 0x0, 0xa0, 0xff, 0x0, r1}, 0x6e6bb4}, [@iptfs_drop_time={0x8, 0x24, 0x4000}, @lastused={0xc, 0xf, 0x7}, @mark={0xc, 0x15, {0x35075c, 0x4}}, @algo_auth_trunc={0xf6, 0x14, {{'sm3\x00'}, 0x550, 0x4b401d6e2448d2c1, "430793f55d277fc315fda7ed1e218211710d6069982ce15cdda8a43224915e81709b9fffa1b4385e2a5466a4639063eec267cd8914cf6f30e8e06ae01d3248cce3f29bb620f1144aefbe1d3ebf481067652553db4dfa6a26ba4140b490aa825c53d3bd3ce083f77ef7a57f68bb603e8c483fe66164330728e2d8a399919b075b509479a72179ea072baaa3d24a77772170f989638b37e64271e4095041587ae3b5ffe807fbb6466372ba"}}, @extra_flags={0x8, 0x18, 0x3}, @etimer_thresh={0x8, 0xc, 0x8}]}, 0x178}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040c0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000000e8acf6b477e4cae10a93ec92aa9a149ce13b9a26fd91139597fd17a3029e6f4a47faf1a79faa621a515084c44e6194b50c42d38e6adb7f0cf0aba7d77da65aecaf2ad39bff7146c7592f40b2daba51af515d7028a6c66cc552623e21c3c8bbe5b4c7a96b3cb47ce65cbd81013a44d1bc02bb6b23494bdd7fb20b88aa57c4954b96d417fda0eba53479cdb8b393c27b6058e49d1d0c7eee53816eebe38c3015d636bff2731af50000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000a80)='./security\x00', &(0x7f0000000ac0)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./security/ima/policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000b40)='measure ', 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x164, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2f, 0x6, "e9859e20adffa6e1956029b6105f919ebd3c0bc2e82a6c7aba9767a86ed00880884250ed52f6bd30773331"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "c1de426696338bb22808d42392c9fe489eb20ceefa8c8f98c064724edecb5feb5b9463ae481d68cded36bb961a66435aa0a91950248073461bb2a2d3ef71177356c555f5d6c4ea9a9a6d3eebc12e6d6bf2cc83bd413aed038c7005fb0b7d883b8b8c8ab9e02e17b0f5756a331eaac2074fd443eef25ab5351b9cd2eb5f54fa9961d8513791c2320609042cb8ec83283a531cce4438f48521739844d5a959e6b80ecb5d490a00861348b019216663645ac5117780800d90c5a59506a9c3f20e949ca08262b88765d15fa9b1a3417432f560ffe819d4b270"}, @NFTA_TABLE_USERDATA={0x1a, 0x6, "4c2649be65bd220da7f41f3bd3c07e3a3a4ef1954b5f"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x1ac}, 0x1, 0x0, 0x0, 0x80004}, 0xc801) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0xe12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) 37.659482122s ago: executing program 6 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) set_mempolicy(0x3, &(0x7f00000002c0)=0x29, 0x6) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x200000, r0}, 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="5c00000028006b05c84e21020ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e61821466cdc3dc0048dfd8cdbf9367b098fa51f60a00c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x401c080) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/ttyUSB0/file0\x00', 0x8000, 0x9) syz_open_dev$char_usb(0xc, 0xb4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r5, r6}}, './file0\x00'}) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x1}, [{0x2, 0x4, r5}, {0x2, 0x0, r7}, {0x2, 0x7, r5}, {0x2, 0x1, r5}, {0x2, 0x1, r5}, {0x2, 0x4, r5}, {0x2, 0x6, r5}, {0x2, 0x5, r5}], {0x4, 0x1}, [{0x8, 0x4, r6}, {0x8, 0x1, r6}, {0x8, 0x6, r6}, {0x8, 0x3, r6}, {0x8, 0x1, r8}, {0x8, 0x2, r9}], {0x10, 0x2}, {0x20, 0x7}}, 0x94, 0x2) write$FUSE_INIT(r1, &(0x7f00000062c0)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) write$FUSE_NOTIFY_DELETE(r2, &(0x7f000000a580)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) 34.567681274s ago: executing program 8 (id=292): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) setns(0xc9, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x162e02, 0x0) r2 = dup(r1) fallocate(r2, 0x10, 0x0, 0x72000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) r4 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r5 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}) ioprio_get$pid(0x1, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000340), 0x0, 0x40008041, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000000000000000000000000001000200004e200050000020001600009f52b43d23a0a269c3215d4948bee7736354a68af3583f52d85d3006896047fcc5afe1900c65852c0ecbdd1b63fc24e3cec28a32f89b2caf02dff4049dc6aae80024e773f1f5b21427d793dc84b5cc51c3cdbe1eb78df29b85633f3f10b412b795bdd03425e3fb259f942edd936ebfe1d9756736ef972dd6f26f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x24000058) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x410040, 0x0) ptrace$cont(0x9, r5, 0x0, 0x6) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000600)={0x0, 0x0, 0x9f}, 0xc) open$dir(&(0x7f0000000640)='./debug/dynamic_debug/control\x00', 0x220000, 0x11c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 34.336272383s ago: executing program 6 (id=297): socket$packet(0x11, 0x2, 0x300) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) personality(0x619641b6fb4b8591) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x12) socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = inotify_init1(0x800) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@rand_addr=0x64010101}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000540), 0x4) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x10}}, 0x0) close(r4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x10}}, 0x0) r6 = inotify_add_watch(r3, &(0x7f00000006c0)='./cgroup\x00', 0xd0000405) inotify_rm_watch(r3, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01001fbd700000000000890000000a000300590b94bd7ca38bfa21583dff5c989b4ccff136e1e35fdc96bcc05bcd27abd37be1b89c18358e766b539cf10c3edab4bc00120700000000000000156b9f4fcbc58226065470980f32bbf9f44ad47be992d006f018a18ca79301b43b167b168780840759421375139ac9eb", @ANYRES32=r2, @ANYBLOB="18001d8014000080060005008c00000005000b0000"], 0x34}}, 0x10000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(&(0x7f0000000940)=@filename='./dev/sda1\x00', &(0x7f0000000980)='./mnt\x00', &(0x7f00000009c0)='ext4\x00', 0x8410, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000a40)=0x4091) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) 31.517651687s ago: executing program 6 (id=301): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x40000000, 0x8}, 0x10}, 0xde) 30.967579111s ago: executing program 6 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x8811) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (rerun: 32) 30.334551672s ago: executing program 6 (id=304): unshare(0x400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) fcntl$addseals(r1, 0x409, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000009, 0x97052, r1, 0x2d6af000) getsockopt$nfc_llcp(r0, 0x118, 0x2, 0x0, 0x0) 30.207069999s ago: executing program 6 (id=305): landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f00000003c0)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000900)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x2c9, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x4000000, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e20, 0x100, @private0, 0xc3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x72de, 0x0, @in6=@mcast1, @in6=@loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0xa0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc800) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010301020000003b3c2c51fc5588a407920000000000010000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) 26.021067526s ago: executing program 7 (id=312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x43, 0x22, &(0x7f0000000240)="0000ffffffffa000", &(0x7f0000000280)=""/34, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000020000008008"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000340)='./file0\x00', &(0x7f0000000d00)='ext4\x00', 0x0, &(0x7f0000000e00)='ta\t\x00') 24.871096698s ago: executing program 7 (id=313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x74040013}, 0x80) 24.644459704s ago: executing program 7 (id=314): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0xa4242, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000af4000/0x400000)=nil, &(0x7f0000bc2000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000a6f000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x8, &(0x7f0000000580)={0x0, 0xc8a1, 0x2, 0x8, 0xc1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x100000004, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f0000000000)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={r4, 0x66, "352692ee51aefed4ff3396dd6ff0dcfc17f99056552612e2b5179e0d548ef669f4aafe983d4ac1de93129588033e8592cbb87160c90dedb1af112e7fb20499b813e29b4cb033c5b9734d42ec414dd6e235cf575bb2562823fbaaa927cf6d2c50c96ea3ce5234"}, &(0x7f0000000100)=0x6e) 23.458935747s ago: executing program 7 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, 0x1a, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000380)={@remote, r2}, 0x14) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="66643dd35d0445a481f660f1c12a1c7979bef23989e62b15de338b0d26efb7a658dae06073f7cd1e078b9744264ba3531b21e14bcb2f10bce61ef79d0000000000000000488308ec79e928a49752f306d1eb9e1f44cfd10ce2f2c406f712cd6223b819e0e6b6e6ff6c05c757dbb99582621fc3", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=nilfs2\x00,\x00']) 22.423661234s ago: executing program 7 (id=316): syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r6, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c00020008000a00e80300"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100, 0x1}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010003a0339a20501da1600242010203010902122001b20260060904f20b00b4286412"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) r10 = syz_open_dev$evdev(&(0x7f0000000840), 0x2, 0x80) ioctl$EVIOCSREP(r10, 0x40084503, &(0x7f0000000880)=[0x3ff, 0x200]) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r11, &(0x7f00000008c0)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) sendmsg$nl_xfrm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0100001900010000000000fddbdf2500000000000000000000000000000000000000000000000000000000000000004002000000000b000200000050000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000084000500ffffffff000000000000000000000000000004d23c0000000a000000ac14140d0000000000000000000000000435000001030000010000000100000000000000ac141442000000000000000000000000000004d3320000000a000000000000000000000000000000000000010000000005030900010000800800000004000000"], 0x13c}}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19.030535314s ago: executing program 37 (id=292): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) setns(0xc9, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x162e02, 0x0) r2 = dup(r1) fallocate(r2, 0x10, 0x0, 0x72000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) r4 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r5 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}) ioprio_get$pid(0x1, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000340), 0x0, 0x40008041, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000000000000000000000000001000200004e200050000020001600009f52b43d23a0a269c3215d4948bee7736354a68af3583f52d85d3006896047fcc5afe1900c65852c0ecbdd1b63fc24e3cec28a32f89b2caf02dff4049dc6aae80024e773f1f5b21427d793dc84b5cc51c3cdbe1eb78df29b85633f3f10b412b795bdd03425e3fb259f942edd936ebfe1d9756736ef972dd6f26f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x24000058) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x410040, 0x0) ptrace$cont(0x9, r5, 0x0, 0x6) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000600)={0x0, 0x0, 0x9f}, 0xc) open$dir(&(0x7f0000000640)='./debug/dynamic_debug/control\x00', 0x220000, 0x11c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 15.666671355s ago: executing program 7 (id=318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001a0007002abd7000fcdbdf25fe80000000000000000000000000001be0c86901000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b4000000000000020000000000000080000000000000010000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0700000000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e80), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002000)={&(0x7f0000001ec0)={0x110, r6, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa73}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2c0000}, {0x6, 0x16, 0xe}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7e}, {0x6, 0x16, 0x9}, {0x5}}]}, 0x110}}, 0x44808) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000020c0)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1c}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x24044884) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffffffff390000000c009900012000005600000018000d801400018005000700000000000500040002000000c2347de47209b64fe4076617c4c3246dbf452b802ec287bab32adad95ba7886ae2874f3e80a1f4c7777cc6e1e8e15f254cd07646d5827808fd3fc0e244d023338cd55d"], 0x38}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000001d80)={0x18, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x2, 0x2}, @increfs={0x40046304, 0x1}], 0x606, 0x0, &(0x7f0000001740)=""/1542}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r11, 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000280)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000016c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000, 0x1, &(0x7f0000001600)=""/190, 0xbe}, &(0x7f0000001700)=0x40) 14.980046522s ago: executing program 38 (id=305): landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f00000003c0)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000900)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x2c9, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x4000000, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e20, 0x100, @private0, 0xc3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x72de, 0x0, @in6=@mcast1, @in6=@loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0xa0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc800) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010301020000003b3c2c51fc5588a407920000000000010000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) 0s ago: executing program 39 (id=318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001a0007002abd7000fcdbdf25fe80000000000000000000000000001be0c86901000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b4000000000000020000000000000080000000000000010000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0700000000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e80), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002000)={&(0x7f0000001ec0)={0x110, r6, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa73}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2c0000}, {0x6, 0x16, 0xe}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7e}, {0x6, 0x16, 0x9}, {0x5}}]}, 0x110}}, 0x44808) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000020c0)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1c}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x24044884) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffffffff390000000c009900012000005600000018000d801400018005000700000000000500040002000000c2347de47209b64fe4076617c4c3246dbf452b802ec287bab32adad95ba7886ae2874f3e80a1f4c7777cc6e1e8e15f254cd07646d5827808fd3fc0e244d023338cd55d"], 0x38}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000001d80)={0x18, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x2, 0x2}, @increfs={0x40046304, 0x1}], 0x606, 0x0, &(0x7f0000001740)=""/1542}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r11, 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000280)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000016c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000, 0x1, &(0x7f0000001600)=""/190, 0xbe}, &(0x7f0000001700)=0x40) kernel console output (not intermixed with test programs): face 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.033254][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.033286][ T9] usb 5-1: Product: syz [ 160.033303][ T9] usb 5-1: Manufacturer: syz [ 160.033320][ T9] usb 5-1: SerialNumber: syz [ 160.139391][ T9] usb 5-1: config 0 descriptor?? [ 161.151757][ T9] xbox_remote_probe: endpoint_in message size==0? [ 161.181215][ T6199] FAULT_INJECTION: forcing a failure. [ 161.181215][ T6199] name fail_futex, interval 1, probability 0, space 0, times 0 [ 161.181250][ T6199] CPU: 1 UID: 0 PID: 6199 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 161.181274][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.181286][ T6199] Call Trace: [ 161.181295][ T6199] [ 161.181303][ T6199] dump_stack_lvl+0xe8/0x150 [ 161.181340][ T6199] should_fail_ex+0x46b/0x600 [ 161.181379][ T6199] get_futex_key+0xf12/0x1580 [ 161.181425][ T6199] ? __pfx_get_futex_key+0x10/0x10 [ 161.181488][ T6199] futex_wake+0x119/0x600 [ 161.181546][ T6199] ? __pfx_futex_wake+0x10/0x10 [ 161.181583][ T6199] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.181636][ T6199] do_futex+0x458/0x4e0 [ 161.181666][ T6199] ? __pfx_do_futex+0x10/0x10 [ 161.181695][ T6199] ? __might_fault+0xaf/0x130 [ 161.181732][ T6199] mm_exit_exec_release+0x10d/0x290 [ 161.181767][ T6199] exit_mm+0x50/0x240 [ 161.181793][ T6199] do_exit+0x6cd/0x2360 [ 161.181817][ T6199] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 161.181856][ T6199] ? __pfx_do_exit+0x10/0x10 [ 161.181879][ T6199] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 161.181914][ T6199] ? rt_spin_unlock+0x159/0x200 [ 161.181941][ T6199] do_group_exit+0x22d/0x2f0 [ 161.181965][ T6199] ? rt_spin_unlock+0x165/0x200 [ 161.181993][ T6199] get_signal+0x121b/0x12c0 [ 161.182046][ T6199] arch_do_signal_or_restart+0xbb/0x860 [ 161.182086][ T6199] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 161.182141][ T6199] exit_to_user_mode_loop+0x10e/0x770 [ 161.182174][ T6199] ? rcu_is_watching+0x16/0xb0 [ 161.182199][ T6199] do_syscall_64+0x328/0x520 [ 161.182230][ T6199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.182252][ T6199] ? clear_bhb_loop+0x70/0xc0 [ 161.182280][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.182301][ T6199] RIP: 0033:0x7fdcedc2e1d9 [ 161.182322][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.182340][ T6199] RSP: 002b:00007fdceba210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 161.182364][ T6199] RAX: fffffffffffffe00 RBX: 00007fdcedeb6278 RCX: 00007fdcedc2e1d9 [ 161.182380][ T6199] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdcedeb6278 [ 161.182394][ T6199] RBP: 00007fdcedeb6270 R08: 0000000000000000 R09: 0000000000000000 [ 161.182407][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.182421][ T6199] R13: 00007fdcedeb6308 R14: 00007ffe329d0ee0 R15: 00007ffe329d0fc8 [ 161.182455][ T6199] [ 162.059509][ T6205] FAULT_INJECTION: forcing a failure. [ 162.059509][ T6205] name fail_futex, interval 1, probability 0, space 0, times 0 [ 162.059552][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.059578][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.059591][ T6205] Call Trace: [ 162.059599][ T6205] [ 162.059609][ T6205] dump_stack_lvl+0xe8/0x150 [ 162.059648][ T6205] should_fail_ex+0x46b/0x600 [ 162.059690][ T6205] get_futex_key+0xf12/0x1580 [ 162.059740][ T6205] ? __pfx_get_futex_key+0x10/0x10 [ 162.059789][ T6205] futex_wake+0x119/0x600 [ 162.059824][ T6205] ? __pfx_futex_wake+0x10/0x10 [ 162.059850][ T6205] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.059896][ T6205] do_futex+0x458/0x4e0 [ 162.059925][ T6205] ? __pfx_do_futex+0x10/0x10 [ 162.059954][ T6205] ? __might_fault+0xaf/0x130 [ 162.059993][ T6205] mm_exit_exec_release+0x10d/0x290 [ 162.060022][ T6205] exit_mm+0x50/0x240 [ 162.060062][ T6205] do_exit+0x6cd/0x2360 [ 162.060081][ T6205] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 162.060113][ T6205] ? __pfx_do_exit+0x10/0x10 [ 162.060132][ T6205] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 162.060160][ T6205] ? rt_spin_unlock+0x159/0x200 [ 162.060183][ T6205] do_group_exit+0x22d/0x2f0 [ 162.060202][ T6205] ? rt_spin_unlock+0x165/0x200 [ 162.060224][ T6205] get_signal+0x121b/0x12c0 [ 162.060268][ T6205] arch_do_signal_or_restart+0xbb/0x860 [ 162.060299][ T6205] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 162.060344][ T6205] exit_to_user_mode_loop+0x10e/0x770 [ 162.060370][ T6205] ? rcu_is_watching+0x16/0xb0 [ 162.060391][ T6205] do_syscall_64+0x328/0x520 [ 162.060418][ T6205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.060436][ T6205] ? clear_bhb_loop+0x70/0xc0 [ 162.060458][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.060482][ T6205] RIP: 0033:0x7f513a16e1d9 [ 162.060499][ T6205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.060515][ T6205] RSP: 002b:00007f5137b3e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 162.060535][ T6205] RAX: fffffffffffffe00 RBX: 00007f513a3f6368 RCX: 00007f513a16e1d9 [ 162.060548][ T6205] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f513a3f6368 [ 162.060560][ T6205] RBP: 00007f513a3f6360 R08: 0000000000000000 R09: 0000000000000000 [ 162.060571][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.060581][ T6205] R13: 00007f513a3f63f8 R14: 00007ffc8e763d10 R15: 00007ffc8e763df8 [ 162.060610][ T6205] [ 162.274645][ T9] usb 5-1: USB disconnect, device number 5 [ 164.634468][ T5693] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 165.705146][ T5693] usb 3-1: device not accepting address 2, error -71 [ 167.048873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.068867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.128877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.138866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.148865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 169.649003][ T5902] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.911571][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.111'. [ 170.263760][ T6260] block2mtd: error: cannot open device /dev/zram0 [ 170.709552][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 170.722392][ T6269] validate_nla: 44 callbacks suppressed [ 170.722411][ T6269] netlink: 'syz.0.119': attribute type 2 has an invalid length. [ 170.759915][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.919997][ T5886] usb 5-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 170.921601][ T5886] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 170.921629][ T5886] usb 5-1: config 0 has no interface number 0 [ 170.921677][ T5886] usb 5-1: config 0 interface 64 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.921706][ T5886] usb 5-1: config 0 interface 64 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.921736][ T5886] usb 5-1: config 0 interface 64 has no altsetting 0 [ 170.921771][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.061686][ T5886] usb 5-1: config 0 descriptor?? [ 171.532522][ T5886] hid (null): report_id 0 is invalid [ 171.607062][ T5886] logitech-djreceiver 0003:046D:C71E.0001: report_id 0 is invalid [ 171.607089][ T5886] logitech-djreceiver 0003:046D:C71E.0001: item 0 0 1 8 parsing failed [ 171.613334][ T5886] logitech-djreceiver 0003:046D:C71E.0001: logi_dj_probe: parse failed [ 171.613568][ T5886] logitech-djreceiver 0003:046D:C71E.0001: probe with driver logitech-djreceiver failed with error -22 [ 171.853935][ T5886] usb 5-1: USB disconnect, device number 6 [ 172.158968][ T5714] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.328906][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 173.330736][ T5714] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 173.333432][ T5714] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 173.333458][ T5714] usb 3-1: config 0 has no interface number 0 [ 173.333505][ T5714] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.333531][ T5714] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 173.333559][ T5714] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.333588][ T5714] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.333633][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.435212][ T5714] usb 3-1: config 0 descriptor?? [ 173.486910][ T5714] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 174.279310][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.125'. [ 174.363481][ T9] usb 3-1: USB disconnect, device number 4 [ 174.413014][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 174.936377][ T6315] netlink: 32 bytes leftover after parsing attributes in process `syz.0.131'. [ 176.598534][ T6333] syz.2.136 uses obsolete (PF_INET,SOCK_PACKET) [ 177.591224][ T5714] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.741969][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 177.742937][ T5714] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 177.752084][ T5714] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 177.752123][ T5714] usb 5-1: can't read configurations, error -61 [ 177.889277][ T5714] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 178.198931][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 178.199708][ T5714] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 178.207259][ T5714] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 178.207298][ T5714] usb 5-1: can't read configurations, error -61 [ 178.207679][ T5714] usb usb5-port1: attempt power cycle [ 179.231409][ T6363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.144'. [ 179.581969][ T5714] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 179.613606][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 179.614469][ T5714] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 179.618474][ T5714] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 179.618509][ T5714] usb 5-1: can't read configurations, error -61 [ 179.778950][ T5714] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.824947][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 179.826124][ T5714] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 179.845604][ T5714] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 179.845645][ T5714] usb 5-1: can't read configurations, error -61 [ 179.846219][ T5714] usb usb5-port1: unable to enumerate USB device [ 180.498978][ T202] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.661769][ T202] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 180.664618][ T202] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.664676][ T202] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.664706][ T202] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 180.717400][ T202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 180.717430][ T202] usb 2-1: Product: syz [ 180.717446][ T202] usb 2-1: Manufacturer: syz [ 180.796411][ T202] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 180.984308][ T202] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 181.042255][ T202] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 181.084098][ T202] usb 2-1: USB disconnect, device number 6 [ 181.127058][ T202] garmin_gps 2-1:1.0: device disconnected [ 181.441577][ T6397] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 181.536884][ T5899] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 181.566316][ T6396] affs: No valid root block on device nullb0 [ 181.733014][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 181.733977][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 181.735562][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.735617][ T5899] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.735645][ T5899] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.735669][ T5899] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 181.735696][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.735731][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.853304][ T5899] usb 1-1: config 0 descriptor?? [ 181.948934][ T202] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 182.178982][ T202] usb 5-1: device descriptor read/64, error -71 [ 182.179105][ T5714] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.469360][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 182.949977][ T202] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 183.097385][ T5714] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 183.126011][ T5714] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 183.126043][ T5714] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 183.126067][ T5714] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 183.126091][ T5714] usb 3-1: config 1 has no interface number 0 [ 183.126140][ T5714] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.126169][ T5714] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 183.126213][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.340674][ T5714] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 183.365291][ T202] usb 5-1: device descriptor read/64, error -71 [ 183.470236][ T202] usb usb5-port1: attempt power cycle [ 183.568072][ T5899] usbhid 1-1:0.0: can't add hid device: -71 [ 183.568204][ T5899] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 183.581067][ T5899] usb 1-1: USB disconnect, device number 8 [ 183.681733][ T5714] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 183.829057][ T202] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 183.850233][ T202] usb 5-1: device descriptor read/8, error -71 [ 184.089491][ T202] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 184.120890][ T202] usb 5-1: device descriptor read/8, error -71 [ 184.189573][ T5899] usb 3-1: USB disconnect, device number 5 [ 184.211531][ T5899] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 184.465781][ T202] usb usb5-port1: unable to enumerate USB device [ 187.028469][ T37] audit: type=1326 audit(1791662090.895:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6451 comm="syz.1.172" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f513a16e1d9 code=0x0 [ 188.484726][ T6467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.039976][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 189.328996][ T5899] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 189.499996][ T5899] usb 5-1: not running at top speed; connect to a high speed hub [ 189.500038][ T5899] usb 5-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 189.516675][ T5899] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 189.516712][ T5899] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 21965, setting to 1023 [ 189.553039][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.553067][ T5899] usb 5-1: Product: 䠊 [ 189.553102][ T5899] usb 5-1: Manufacturer: 蕟ۦ츬略꧒ꤿ迆沲紳谴㝪缽⒔ⅿ햐䐱บ㠡ླྀ訋慒౨䨑ﺅ䬝젺䐐惂쭻㔏谞랳큦꪿닶亢⫱笅끓 [ 189.553125][ T5899] usb 5-1: SerialNumber: Ѕ [ 190.864544][ T5899] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 191.759075][ T5899] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 192.014298][ T6483] syz.2.180 (6483) used greatest stack depth: 18648 bytes left [ 192.248571][ T6503] capability: warning: `syz.3.184' uses deprecated v2 capabilities in a way that may be insecure [ 192.308683][ T6504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.185'. [ 192.386595][ T6505] sg_write: process 142 (syz.3.184) changed security contexts after opening file descriptor, this is not allowed. [ 192.729147][ T5899] usb 5-1: USB disconnect, device number 15 [ 193.323034][ T6468] udevd[6468]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.101796][ T6530] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 194.791243][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.791321][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.078756][ T6530] team0 (unregistering): Port device team_slave_0 removed [ 195.078990][ T5693] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 195.180691][ T6530] team0 (unregistering): Port device team_slave_1 removed [ 195.266445][ T5693] usb 2-1: not running at top speed; connect to a high speed hub [ 195.266490][ T5693] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 195.303361][ T5693] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 195.303398][ T5693] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 21965, setting to 1023 [ 195.331228][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.331258][ T5693] usb 2-1: Product: 䠊 [ 195.331273][ T5693] usb 2-1: Manufacturer: 蕟ۦ츬略꧒ꤿ迆沲紳谴㝪缽⒔ⅿ햐䐱บ㠡ླྀ訋慒౨䨑ﺅ䬝젺䐐惂쭻㔏谞랳큦꪿닶亢⫱笅끓 [ 195.331293][ T5693] usb 2-1: SerialNumber: Ѕ [ 195.647188][ T5693] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 195.657779][ T5693] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 195.835253][ T5693] usb 2-1: USB disconnect, device number 7 [ 197.743982][ T6468] udevd[6468]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.903598][ T6553] block2mtd: error: cannot open device /dev/zram0 [ 198.103233][ T6556] FAULT_INJECTION: forcing a failure. [ 198.103233][ T6556] name failslab, interval 1, probability 0, space 0, times 0 [ 198.103279][ T6556] CPU: 0 UID: 0 PID: 6556 Comm: syz.1.197 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 198.103311][ T6556] Tainted: [L]=SOFTLOCKUP [ 198.103320][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.103333][ T6556] Call Trace: [ 198.103342][ T6556] [ 198.103356][ T6556] dump_stack_lvl+0xe8/0x150 [ 198.103398][ T6556] should_fail_ex+0x46b/0x600 [ 198.103441][ T6556] should_failslab+0xa8/0x100 [ 198.103470][ T6556] __kmalloc_cache_noprof+0xa1/0x680 [ 198.103515][ T6556] ? nft_pernet+0x45/0x270 [ 198.103545][ T6556] ? nft_array_may_resize+0x32d/0x570 [ 198.103575][ T6556] ? nft_array_may_resize+0x32d/0x570 [ 198.103616][ T6556] nft_array_may_resize+0x32d/0x570 [ 198.103658][ T6556] nft_rbtree_insert+0x11e/0x2510 [ 198.103694][ T6556] ? __kmalloc_noprof+0x43e/0x790 [ 198.103728][ T6556] ? nft_trans_alloc+0x22/0x2a0 [ 198.103772][ T6556] ? nft_trans_alloc+0x40/0x2a0 [ 198.103809][ T6556] nf_tables_newsetelem+0x2aa4/0x4200 [ 198.103891][ T6556] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 198.103926][ T6556] ? __lock_acquire+0x651/0x2de0 [ 198.103969][ T6556] ? nla_validate_array+0xfc/0x260 [ 198.104030][ T6556] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.104058][ T6556] ? __pfx___nla_validate_parse+0x10/0x10 [ 198.104102][ T6556] ? lock_acquire+0x115/0x350 [ 198.104134][ T6556] ? nfnl_pernet+0x23/0x240 [ 198.104176][ T6556] ? __nla_parse+0x40/0x60 [ 198.104208][ T6556] nfnetlink_rcv+0x1291/0x28d0 [ 198.104292][ T6556] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 198.104342][ T6556] ? ref_tracker_free+0x668/0x820 [ 198.104394][ T6556] ? skb_clone+0x246/0x3a0 [ 198.104431][ T6556] ? __netlink_deliver_tap+0x811/0x860 [ 198.104475][ T6556] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.104516][ T6556] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.104556][ T6556] netlink_unicast+0x7f5/0x990 [ 198.104601][ T6556] netlink_sendmsg+0x813/0xb40 [ 198.104646][ T6556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.104684][ T6556] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 198.104714][ T6556] ? __kernel_text_address+0xd/0x30 [ 198.104740][ T6556] ? unwind_get_return_address+0x4d/0x90 [ 198.104772][ T6556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.104806][ T6556] sock_sendmsg_nosec+0x13a/0x180 [ 198.104833][ T6556] ____sys_sendmsg+0x565/0x870 [ 198.104874][ T6556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.104916][ T6556] ? import_iovec+0x73/0xa0 [ 198.104945][ T6556] ___sys_sendmsg+0x2a5/0x360 [ 198.104975][ T6556] ? __lock_acquire+0x747/0x2de0 [ 198.105011][ T6556] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.105082][ T6556] ? __fget_files+0x2a/0x420 [ 198.105109][ T6556] ? __fget_files+0x3a8/0x420 [ 198.105149][ T6556] __x64_sys_sendmsg+0x1b7/0x290 [ 198.105184][ T6556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.105240][ T6556] do_syscall_64+0x166/0x520 [ 198.105271][ T6556] ? trace_irq_disable+0x3b/0x140 [ 198.105302][ T6556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.105325][ T6556] ? clear_bhb_loop+0x70/0xc0 [ 198.105354][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.105377][ T6556] RIP: 0033:0x7f513a16e1d9 [ 198.105399][ T6556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.105416][ T6556] RSP: 002b:00007f51383c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.105439][ T6556] RAX: ffffffffffffffda RBX: 00007f513a3f5fa0 RCX: 00007f513a16e1d9 [ 198.105451][ T6556] RDX: 0000000000000040 RSI: 0000200000000b40 RDI: 0000000000000003 [ 198.105462][ T6556] RBP: 00007f51383c6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.105472][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.105482][ T6556] R13: 00007f513a3f6038 R14: 00007f513a3f5fa0 R15: 00007ffc8e763df8 [ 198.105519][ T6556] [ 199.518971][ T5823] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 199.679375][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 199.684615][ T5823] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 199.687591][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.688550][ T5823] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.688581][ T5823] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.688604][ T5823] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 199.688632][ T5823] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.688667][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.885538][ T5823] usb 1-1: config 0 descriptor?? [ 200.553877][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.587814][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.459261][ T5823] logitech-djreceiver 0003:046D:C53A.0002: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 202.871405][ T5823] usb 1-1: USB disconnect, device number 9 [ 203.515813][ T6581] fido_id[6581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 208.982078][ T5714] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.089002][ T6615] capability: warning: `syz.2.215' uses 32-bit capabilities (legacy support in use) [ 209.171462][ T6615] FAULT_INJECTION: forcing a failure. [ 209.171462][ T6615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.171510][ T6615] CPU: 0 UID: 0 PID: 6615 Comm: syz.2.215 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 209.171540][ T6615] Tainted: [L]=SOFTLOCKUP [ 209.171548][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 209.171561][ T6615] Call Trace: [ 209.171569][ T6615] [ 209.171579][ T6615] dump_stack_lvl+0xe8/0x150 [ 209.171618][ T6615] should_fail_ex+0x46b/0x600 [ 209.171659][ T6615] _copy_from_user+0x2d/0xb0 [ 209.171686][ T6615] ___sys_sendmsg+0x1c6/0x360 [ 209.171717][ T6615] ? __lock_acquire+0x747/0x2de0 [ 209.171752][ T6615] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.171822][ T6615] ? __fget_files+0x2a/0x420 [ 209.171849][ T6615] ? __fget_files+0x3a8/0x420 [ 209.171888][ T6615] __x64_sys_sendmsg+0x1b7/0x290 [ 209.171921][ T6615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.171976][ T6615] do_syscall_64+0x166/0x520 [ 209.172008][ T6615] ? trace_irq_disable+0x3b/0x140 [ 209.172038][ T6615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.172062][ T6615] ? clear_bhb_loop+0x70/0xc0 [ 209.172090][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.172112][ T6615] RIP: 0033:0x7fd0b8f4e1d9 [ 209.172132][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.172151][ T6615] RSP: 002b:00007fd0b71a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.172178][ T6615] RAX: ffffffffffffffda RBX: 00007fd0b91d5fa0 RCX: 00007fd0b8f4e1d9 [ 209.172194][ T6615] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 209.172208][ T6615] RBP: 00007fd0b71a6090 R08: 0000000000000000 R09: 0000000000000000 [ 209.172222][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.172235][ T6615] R13: 00007fd0b91d6038 R14: 00007fd0b91d5fa0 R15: 00007ffd737dca18 [ 209.172272][ T6615] [ 209.290972][ T5823] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.402666][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.429092][ T5714] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 210.431859][ T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.432159][ T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.496628][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'. [ 211.558369][ T5823] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 211.568946][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 211.571764][ T5714] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 211.573309][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.573364][ T5714] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.573393][ T5714] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.573418][ T5714] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 211.573447][ T5714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 211.573483][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.710487][ T5714] usb 1-1: config 0 descriptor?? [ 212.158072][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.197288][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.141049][ T5714] logitech-djreceiver 0003:046D:C53A.0003: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 214.269526][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.958715][ T6658] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.198846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.218846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.228841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.238839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.248849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.467072][ T6662] process 'syz.3.226' launched '/dev/fd/7' with NULL argv: empty string added [ 217.677628][ T202] usb 1-1: USB disconnect, device number 10 [ 218.889817][ T6677] overlay: Unknown parameter '/' [ 219.098110][ T6680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.230'. [ 219.818949][ T5714] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 220.099070][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 220.100030][ T5714] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 220.101516][ T5714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.101570][ T5714] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.101598][ T5714] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.101622][ T5714] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 220.101650][ T5714] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.101685][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.230084][ T5714] usb 5-1: config 0 descriptor?? [ 220.684356][ T6685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.708510][ T6685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.001109][ T5714] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 221.050569][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.057679][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.126343][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.137787][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.165338][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.789013][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.122656][ T5589] Bluetooth: hci0: command 0x0406 tx timeout [ 223.312041][ T5599] Bluetooth: hci5: command tx timeout [ 223.619222][ T5823] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 223.823533][ T6725] FAULT_INJECTION: forcing a failure. [ 223.823533][ T6725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.823628][ T6725] CPU: 1 UID: 0 PID: 6725 Comm: syz.4.241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 223.823660][ T6725] Tainted: [L]=SOFTLOCKUP [ 223.823668][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 223.823682][ T6725] Call Trace: [ 223.823691][ T6725] [ 223.823701][ T6725] dump_stack_lvl+0xe8/0x150 [ 223.823742][ T6725] should_fail_ex+0x46b/0x600 [ 223.823786][ T6725] _copy_from_user+0x2d/0xb0 [ 223.823813][ T6725] video_usercopy+0x359/0x1430 [ 223.823843][ T6725] ? smk_tskacc+0x2fb/0x370 [ 223.823872][ T6725] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 223.823905][ T6725] ? __pfx_video_usercopy+0x10/0x10 [ 223.823925][ T6725] ? smack_file_ioctl+0x2c4/0x370 [ 223.823984][ T6725] ? __fget_files+0x2a/0x420 [ 223.824012][ T6725] ? __fget_files+0x3a8/0x420 [ 223.824044][ T6725] v4l2_ioctl+0x190/0x1e0 [ 223.824081][ T6725] ? __pfx_v4l2_ioctl+0x10/0x10 [ 223.824117][ T6725] __se_sys_ioctl+0xff/0x170 [ 223.824150][ T6725] do_syscall_64+0x166/0x520 [ 223.824176][ T6725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.824195][ T6725] ? clear_bhb_loop+0x70/0xc0 [ 223.824217][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.824235][ T6725] RIP: 0033:0x7fb7e8eae1d9 [ 223.824251][ T6725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.824278][ T6725] RSP: 002b:00007fb7e70c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.824297][ T6725] RAX: ffffffffffffffda RBX: 00007fb7e9136180 RCX: 00007fb7e8eae1d9 [ 223.824310][ T6725] RDX: 0000200000000100 RSI: 00000000c040564a RDI: 0000000000000003 [ 223.824340][ T6725] RBP: 00007fb7e70c4090 R08: 0000000000000000 R09: 0000000000000000 [ 223.824351][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.824362][ T6725] R13: 00007fb7e9136218 R14: 00007fb7e9136180 R15: 00007fff8cfc41c8 [ 223.824390][ T6725] [ 225.061395][ T6731] netlink: 'syz.0.242': attribute type 21 has an invalid length. [ 225.400169][ T60] Bluetooth: hci5: command tx timeout [ 225.450155][ T5714] usb 5-1: USB disconnect, device number 16 [ 227.069019][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 227.069272][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 227.069471][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 227.069670][ T60] Bluetooth: hci3: command 0x2016 tx timeout [ 227.440481][ T5714] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 227.471266][ T5599] Bluetooth: hci5: command tx timeout [ 227.661506][ T5714] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.675242][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.675265][ T5714] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.750095][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.750125][ T5714] usb 1-1: Product: syz [ 227.750141][ T5714] usb 1-1: Manufacturer: syz [ 227.750156][ T5714] usb 1-1: SerialNumber: syz [ 227.819037][ T5902] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 228.084906][ T5902] usb 5-1: not running at top speed; connect to a high speed hub [ 228.084946][ T5902] usb 5-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 228.116872][ T5714] usb 1-1: 0:2 : does not exist [ 228.116963][ T5714] usb 1-1: unit 9 not found! [ 228.160680][ T5902] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 228.160718][ T5902] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 21965, setting to 1023 [ 228.468905][ T6736] netlink: 56 bytes leftover after parsing attributes in process `syz.0.245'. [ 228.468933][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 228.535291][ T5714] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 228.631026][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.631053][ T5902] usb 5-1: Product: 䠊 [ 228.631065][ T5902] usb 5-1: Manufacturer: 蕟ۦ츬略꧒ꤿ迆沲紳谴㝪缽⒔ⅿ햐䐱บ㠡ླྀ訋慒౨䨑ﺅ䬝젺䐐惂쭻㔏谞랳큦꪿닶亢⫱笅끓 [ 228.631084][ T5902] usb 5-1: SerialNumber: Ѕ [ 229.128471][ T5714] usb 1-1: USB disconnect, device number 11 [ 229.337734][ T5902] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 229.374297][ T5902] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 229.532755][ T6671] udevd[6671]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.549194][ T4898] Bluetooth: hci5: command tx timeout [ 229.843319][ T5902] usb 5-1: USB disconnect, device number 17 [ 230.148921][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 230.258258][ T6760] CacheFiles: 'bind' command doesn't take an argument [ 230.298933][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 230.300787][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 230.302500][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.302565][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.302593][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.302617][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 230.302645][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.302680][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.371782][ T9] usb 1-1: config 0 descriptor?? [ 230.452209][ T6671] udevd[6671]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.086799][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.087515][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.587884][ T9] logitech-djreceiver 0003:046D:C53A.0005: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 233.029334][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 233.181380][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 233.218687][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.237724][ T9] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 233.237757][ T9] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.237786][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 233.284322][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.301223][ T9] usb 3-1: Product: Ђ [ 233.301344][ T9] usb 3-1: Manufacturer: 蟒䏥㲡ꕩ谐⸝⏏뮒禘礉蠰뚋⯟㥒 [ 233.301365][ T9] usb 3-1: SerialNumber: syz [ 233.381342][ T6786] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 233.381811][ T6786] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 234.253393][ T9] usb 3-1: USB disconnect, device number 6 [ 235.318984][ T31] usb 1-1: USB disconnect, device number 12 [ 235.470789][ T6805] cifs: Unknown parameter ' ' [ 236.060758][ T5714] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 236.228312][ T5714] usb 5-1: not running at top speed; connect to a high speed hub [ 236.228359][ T5714] usb 5-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 236.260043][ T5714] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 236.260079][ T5714] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 21965, setting to 1023 [ 236.329013][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.329045][ T5714] usb 5-1: Product: 䠊 [ 236.329061][ T5714] usb 5-1: Manufacturer: 蕟ۦ츬略꧒ꤿ迆沲紳谴㝪缽⒔ⅿ햐䐱บ㠡ླྀ訋慒౨䨑ﺅ䬝젺䐐惂쭻㔏谞랳큦꪿닶亢⫱笅끓 [ 236.329083][ T5714] usb 5-1: SerialNumber: Ѕ [ 236.518306][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.735617][ T5714] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 236.741105][ T5714] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 236.864239][ T5714] usb 5-1: USB disconnect, device number 18 [ 237.240452][ T6765] udevd[6765]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.120366][ T6839] FAULT_INJECTION: forcing a failure. [ 241.120366][ T6839] name fail_futex, interval 1, probability 0, space 0, times 0 [ 241.120410][ T6839] CPU: 1 UID: 0 PID: 6839 Comm: syz.3.266 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 241.120443][ T6839] Tainted: [L]=SOFTLOCKUP [ 241.120451][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.120477][ T6839] Call Trace: [ 241.120486][ T6839] [ 241.120496][ T6839] dump_stack_lvl+0xe8/0x150 [ 241.120537][ T6839] should_fail_ex+0x46b/0x600 [ 241.120577][ T6839] get_futex_key+0xf12/0x1580 [ 241.120617][ T6839] ? __pfx_get_futex_key+0x10/0x10 [ 241.120656][ T6839] futex_wake+0x119/0x600 [ 241.120685][ T6839] ? __pfx_futex_wake+0x10/0x10 [ 241.120706][ T6839] ? do_raw_spin_lock+0x12b/0x2f0 [ 241.120742][ T6839] do_futex+0x458/0x4e0 [ 241.120766][ T6839] ? __pfx_do_futex+0x10/0x10 [ 241.120797][ T6839] ? __might_fault+0xaf/0x130 [ 241.120827][ T6839] mm_exit_exec_release+0x10d/0x290 [ 241.120856][ T6839] exit_mm+0x50/0x240 [ 241.120877][ T6839] do_exit+0x6cd/0x2360 [ 241.120897][ T6839] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 241.120929][ T6839] ? __pfx_do_exit+0x10/0x10 [ 241.120948][ T6839] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 241.120976][ T6839] ? rt_spin_unlock+0x159/0x200 [ 241.120999][ T6839] do_group_exit+0x22d/0x2f0 [ 241.121017][ T6839] ? rt_spin_unlock+0x165/0x200 [ 241.121040][ T6839] get_signal+0x121b/0x12c0 [ 241.121083][ T6839] arch_do_signal_or_restart+0xbb/0x860 [ 241.121115][ T6839] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 241.121160][ T6839] exit_to_user_mode_loop+0x10e/0x770 [ 241.121186][ T6839] ? rcu_is_watching+0x16/0xb0 [ 241.121207][ T6839] do_syscall_64+0x328/0x520 [ 241.121233][ T6839] ? trace_irq_disable+0x3b/0x140 [ 241.121258][ T6839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.121279][ T6839] ? clear_bhb_loop+0x70/0xc0 [ 241.121302][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.121319][ T6839] RIP: 0033:0x7fc10b00e1d9 [ 241.121336][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.121351][ T6839] RSP: 002b:00007fc108e010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 241.121372][ T6839] RAX: fffffffffffffe00 RBX: 00007fc10b296278 RCX: 00007fc10b00e1d9 [ 241.121385][ T6839] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc10b296278 [ 241.121396][ T6839] RBP: 00007fc10b296270 R08: 0000000000000000 R09: 0000000000000000 [ 241.121408][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.121418][ T6839] R13: 00007fc10b296308 R14: 00007ffd878bf420 R15: 00007ffd878bf508 [ 241.121446][ T6839] [ 242.005331][ T6697] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.005470][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.005671][ T6697] bridge_slave_0: entered allmulticast mode [ 242.060301][ T6697] bridge_slave_0: entered promiscuous mode [ 242.131578][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.131714][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.131997][ T6697] bridge_slave_1: entered allmulticast mode [ 242.175529][ T6697] bridge_slave_1: entered promiscuous mode [ 244.283373][ T6850] FAULT_INJECTION: forcing a failure. [ 244.283373][ T6850] name failslab, interval 1, probability 0, space 0, times 0 [ 244.283418][ T6850] CPU: 1 UID: 0 PID: 6850 Comm: syz.0.269 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.283451][ T6850] Tainted: [L]=SOFTLOCKUP [ 244.283468][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.283482][ T6850] Call Trace: [ 244.283491][ T6850] [ 244.283502][ T6850] dump_stack_lvl+0xe8/0x150 [ 244.283544][ T6850] should_fail_ex+0x46b/0x600 [ 244.283590][ T6850] should_failslab+0xa8/0x100 [ 244.283620][ T6850] __kvmalloc_node_noprof+0x176/0x890 [ 244.283649][ T6850] ? newary+0x143/0xaf0 [ 244.283682][ T6850] ? newary+0x143/0xaf0 [ 244.283723][ T6850] newary+0x143/0xaf0 [ 244.283771][ T6850] ipcget+0x1db/0xf30 [ 244.283799][ T6850] ? do_futex+0x3e7/0x4e0 [ 244.283831][ T6850] ? __pfx_do_futex+0x10/0x10 [ 244.283856][ T6850] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 244.283885][ T6850] ? __pfx_ipcget+0x10/0x10 [ 244.283916][ T6850] ? __se_sys_futex+0x3a8/0x450 [ 244.283947][ T6850] __x64_sys_semget+0x1aa/0x210 [ 244.283986][ T6850] ? __pfx___x64_sys_semget+0x10/0x10 [ 244.284036][ T6850] do_syscall_64+0x166/0x520 [ 244.284070][ T6850] ? trace_irq_disable+0x3b/0x140 [ 244.284102][ T6850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.284127][ T6850] ? clear_bhb_loop+0x70/0xc0 [ 244.284156][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.284180][ T6850] RIP: 0033:0x7fdcedc2e1d9 [ 244.284203][ T6850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.284222][ T6850] RSP: 002b:00007fdceb1db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 244.284247][ T6850] RAX: ffffffffffffffda RBX: 00007fdcedeb6450 RCX: 00007fdcedc2e1d9 [ 244.284264][ T6850] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 244.284278][ T6850] RBP: 00007fdcedcc5888 R08: 0000000000000000 R09: 0000000000000000 [ 244.284293][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.284307][ T6850] R13: 00007fdcedeb64e8 R14: 00007fdcedeb6450 R15: 00007ffe329d0fc8 [ 244.284346][ T6850] [ 248.571342][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 248.691908][ T6868] veth3: entered promiscuous mode [ 248.750196][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 248.750239][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 248.761823][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 248.761915][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 21965, setting to 1023 [ 248.832652][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.832794][ T9] usb 1-1: Product: 䠊 [ 248.832812][ T9] usb 1-1: Manufacturer: 蕟ۦ츬略꧒ꤿ迆沲紳谴㝪缽⒔ⅿ햐䐱บ㠡ླྀ訋慒౨䨑ﺅ䬝젺䐐惂쭻㔏谞랳큦꪿닶亢⫱笅끓 [ 248.832836][ T9] usb 1-1: SerialNumber: Ѕ [ 248.840095][ T6697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.937683][ T6697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.081275][ T5823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 249.240329][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 249.241897][ T5823] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 249.258515][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 249.258608][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.331361][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.331390][ T5823] usb 4-1: Product: syz [ 249.331405][ T5823] usb 4-1: Manufacturer: syz [ 249.331420][ T5823] usb 4-1: SerialNumber: syz [ 249.386571][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 249.392724][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 249.441624][ T5823] usb 4-1: config 0 descriptor?? [ 249.524586][ T5823] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 249.524629][ T5823] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 249.816480][ T6697] team0: Port device team_slave_0 added [ 249.892762][ T6697] team0: Port device team_slave_1 added [ 250.179297][ T5886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 250.187700][ T5823] em28xx 4-1:0.0: unknown em28xx chip ID (228) [ 250.332608][ T5886] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 250.404866][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.404896][ T5886] usb 3-1: Product: syz [ 250.404911][ T5886] usb 3-1: Manufacturer: syz [ 250.404927][ T5886] usb 3-1: SerialNumber: syz [ 250.447673][ T9] usb 1-1: USB disconnect, device number 13 [ 250.459784][ T5823] em28xx 4-1:0.0: Config register raw data: 0xe4 [ 250.459825][ T5823] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 250.459843][ T5823] em28xx 4-1:0.0: No AC97 audio processor [ 250.539292][ T6890] netlink: 'syz.4.277': attribute type 10 has an invalid length. [ 250.852888][ T6890] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 250.853493][ T6890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.976466][ T5886] ums_eneub6250 3-1:1.0: USB Mass Storage device detected [ 251.087610][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.131900][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.342975][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.358108][ T5823] usb 4-1: USB disconnect, device number 7 [ 251.390326][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.472195][ T5886] scsi host1: usb-storage 3-1:1.0 [ 251.772611][ T6872] udevd[6872]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.807874][ T6697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.807893][ T6697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.807922][ T6697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.902853][ T6697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.902874][ T6697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.902904][ T6697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.939575][ T6697] hsr_slave_0: entered promiscuous mode [ 252.944339][ T6697] hsr_slave_1: entered promiscuous mode [ 252.948677][ T6697] debugfs: 'hsr0' already exists in 'hsr' [ 252.948704][ T6697] Cannot create hsr debugfs directory [ 257.863764][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.863837][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.588911][ T5823] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 259.739790][ T5823] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 259.742115][ T5823] usb 1-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 259.742169][ T5823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 28770, setting to 1024 [ 259.742199][ T5823] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 259.742224][ T5823] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.742268][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.916404][ T6933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.784609][ T1504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.371485][ T5823] gud 1-1:1.0: USB-2: Failed to add properties (ret=-71) [ 261.371542][ T5823] gud 1-1:1.0: Failed to get connectors (error=-71) [ 261.371578][ T5823] gud 1-1:1.0: probe with driver gud failed with error -71 [ 261.479098][ T5823] usb 1-1: USB disconnect, device number 14 [ 263.768930][ T5823] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 263.770771][ T6697] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.924882][ T5823] usb 4-1: not running at top speed; connect to a high speed hub [ 263.924927][ T5823] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 263.926555][ T5823] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 263.926587][ T5823] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 21965, setting to 1023 [ 263.970517][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.970555][ T5823] usb 4-1: Product: 䠊 [ 263.970571][ T5823] usb 4-1: Manufacturer: 蕟ۦ츬略꧒ꤿ迆沲紳谴㝪缽⒔ⅿ햐䐱บ㠡ླྀ訋慒౨䨑ﺅ䬝젺䐐惂쭻㔏谞랳큦꪿닶亢⫱笅끓 [ 263.970595][ T5823] usb 4-1: SerialNumber: Ѕ [ 264.443944][ T5823] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 264.447741][ T5823] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 264.489434][ T6697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.587874][ T5823] usb 4-1: USB disconnect, device number 8 [ 264.601574][ T6697] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.776586][ T6899] udevd[6899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.816461][ T6697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.826486][ T6697] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.168152][ T6697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.181889][ T6697] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.231126][ T6697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.309049][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.406122][ T5589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.539260][ T5589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.557805][ T5589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.567969][ T5589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.581624][ T5589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.708957][ T4898] Bluetooth: hci0: command tx timeout [ 268.064242][ T5589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 268.146881][ T5589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 268.158384][ T5589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 268.174529][ T5589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 268.176525][ T5589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.788952][ T4898] Bluetooth: hci0: command tx timeout [ 270.349135][ T4898] Bluetooth: hci6: command tx timeout [ 271.869865][ T4898] Bluetooth: hci0: command tx timeout [ 272.108195][ T6978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 272.222254][ T37] audit: type=1807 audit(1791662176.155:4): action=measure res=1 [ 272.428974][ T4898] Bluetooth: hci6: command tx timeout [ 272.840993][ T6977] ima: policy update completed [ 272.846295][ T37] audit: type=1802 audit(1791662176.795:5): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.3.291" res=1 errno=0 [ 273.949043][ T4898] Bluetooth: hci0: command tx timeout [ 274.508921][ T4898] Bluetooth: hci6: command tx timeout [ 274.693640][ T6697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.805125][ T6697] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.037587][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.041179][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.292100][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.292315][ T5793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.592512][ T4898] Bluetooth: hci6: command tx timeout [ 276.937650][ T5589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.049537][ T5589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.075602][ T5589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.077842][ T5589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.101257][ T5589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.398301][ T37] audit: type=1800 audit(1791662180.855:6): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127473 res=0 errno=0 [ 277.453269][ T37] audit: type=1800 audit(1791662181.405:7): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127484 res=0 errno=0 [ 277.504300][ T37] audit: type=1800 audit(1791662181.455:8): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127514 res=0 errno=0 [ 277.555670][ T37] audit: type=1800 audit(1791662181.505:9): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127503 res=0 errno=0 [ 279.149011][ T5589] Bluetooth: hci2: command tx timeout [ 280.771664][ T37] audit: type=1800 audit(1791662184.725:10): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130308 res=0 errno=0 [ 280.854414][ T4898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.895692][ T4898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.908510][ T4898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.959821][ T4898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.963034][ T4898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.168896][ T37] audit: type=1800 audit(1791662185.115:11): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130319 res=0 errno=0 [ 281.204621][ T37] audit: type=1800 audit(1791662185.145:12): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130406 res=0 errno=0 [ 281.229026][ T5589] Bluetooth: hci2: command tx timeout [ 281.260874][ T37] audit: type=1800 audit(1791662185.195:13): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130417 res=0 errno=0 [ 282.919296][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.919442][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.919618][ T6957] bridge_slave_0: entered allmulticast mode [ 282.959910][ T6957] bridge_slave_0: entered promiscuous mode [ 283.042336][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.042581][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.043227][ T6957] bridge_slave_1: entered allmulticast mode [ 283.046564][ T6957] bridge_slave_1: entered promiscuous mode [ 283.152719][ T5589] Bluetooth: hci3: command tx timeout [ 283.313462][ T5589] Bluetooth: hci2: command tx timeout [ 284.010380][ T1504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.943876][ T6957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.970746][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.970880][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.971081][ T6971] bridge_slave_0: entered allmulticast mode [ 284.974136][ T6971] bridge_slave_0: entered promiscuous mode [ 285.229270][ T5589] Bluetooth: hci3: command tx timeout [ 285.389156][ T5589] Bluetooth: hci2: command tx timeout [ 286.090947][ T6957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.199598][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.199785][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.200030][ T6971] bridge_slave_1: entered allmulticast mode [ 286.206820][ T6971] bridge_slave_1: entered promiscuous mode [ 286.551366][ T6957] team0: Port device team_slave_0 added [ 286.764751][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.786965][ T6957] team0: Port device team_slave_1 added [ 286.823711][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.200400][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.200421][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.200468][ T6957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.205204][ T6971] team0: Port device team_slave_0 added [ 287.309460][ T5589] Bluetooth: hci3: command tx timeout [ 287.332663][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.332681][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.332710][ T6957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.417523][ T6971] team0: Port device team_slave_1 added [ 287.779975][ T37] audit: type=1800 audit(1791662191.725:14): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135715 res=0 errno=0 [ 287.783695][ T37] audit: type=1800 audit(1791662191.735:15): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135726 res=0 errno=0 [ 287.847012][ T4898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.896737][ T4898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.912159][ T4898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.917712][ T4898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.926757][ T4898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.038485][ T37] audit: type=1800 audit(1791662192.965:16): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135745 res=0 errno=0 [ 289.106617][ T37] audit: type=1800 audit(1791662193.055:17): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135756 res=0 errno=0 [ 289.389381][ T4898] Bluetooth: hci3: command tx timeout [ 290.474555][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.474576][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.474606][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.068936][ T4898] Bluetooth: hci5: command tx timeout [ 291.425083][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.425105][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.425134][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.776393][ T6957] hsr_slave_0: entered promiscuous mode [ 291.789139][ T6957] hsr_slave_1: entered promiscuous mode [ 291.791816][ T6957] debugfs: 'hsr0' already exists in 'hsr' [ 291.791836][ T6957] Cannot create hsr debugfs directory [ 292.348411][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.348549][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.350357][ T6988] bridge_slave_0: entered allmulticast mode [ 292.356770][ T6988] bridge_slave_0: entered promiscuous mode [ 292.401206][ T6971] hsr_slave_0: entered promiscuous mode [ 292.402714][ T6971] hsr_slave_1: entered promiscuous mode [ 292.403899][ T6971] debugfs: 'hsr0' already exists in 'hsr' [ 292.403925][ T6971] Cannot create hsr debugfs directory [ 292.486812][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.486949][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.487139][ T6988] bridge_slave_1: entered allmulticast mode [ 292.504875][ T6988] bridge_slave_1: entered promiscuous mode [ 293.150477][ T4898] Bluetooth: hci5: command tx timeout [ 293.432269][ T6988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.524548][ T6988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.376974][ T6988] team0: Port device team_slave_0 added [ 294.460327][ T6988] team0: Port device team_slave_1 added [ 295.100895][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.100915][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.100944][ T6988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.108309][ T37] audit: type=1800 audit(1791662199.055:18): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 295.182264][ T37] audit: type=1800 audit(1791662199.135:19): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24329 res=0 errno=0 [ 295.229498][ T4898] Bluetooth: hci5: command tx timeout [ 295.651067][ T37] audit: type=1800 audit(1791662199.595:20): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143557 res=0 errno=0 [ 295.712020][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.712041][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.712071][ T6988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.111973][ T37] audit: type=1800 audit(1791662200.065:21): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 296.449353][ T6988] hsr_slave_0: entered promiscuous mode [ 296.453707][ T6988] hsr_slave_1: entered promiscuous mode [ 296.455674][ T6988] debugfs: 'hsr0' already exists in 'hsr' [ 296.455698][ T6988] Cannot create hsr debugfs directory [ 296.826361][ T7010] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.826603][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.826818][ T7010] bridge_slave_0: entered allmulticast mode [ 296.850997][ T7010] bridge_slave_0: entered promiscuous mode [ 297.020555][ T7010] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.020763][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.020956][ T7010] bridge_slave_1: entered allmulticast mode [ 297.025962][ T7010] bridge_slave_1: entered promiscuous mode [ 297.309481][ T4898] Bluetooth: hci5: command tx timeout [ 298.045543][ T7010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.062009][ T37] audit: type=1800 audit(1791662201.995:22): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24329 res=0 errno=0 [ 298.124611][ T37] audit: type=1800 audit(1791662202.075:23): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=147492 res=0 errno=0 [ 298.240980][ T7010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.333572][ T6957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.481781][ T6957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.079994][ T6957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 299.169998][ T6957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.235822][ T6957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 299.329647][ T6957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.355189][ T7010] team0: Port device team_slave_0 added [ 299.444949][ T6957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 299.495941][ T6957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.567883][ T7010] team0: Port device team_slave_1 added [ 300.186286][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.186306][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.186334][ T7010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.312285][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.312857][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.313052][ T7032] bridge_slave_0: entered allmulticast mode [ 300.315977][ T7032] bridge_slave_0: entered promiscuous mode [ 300.414891][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.414911][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.414941][ T7010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.535503][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.535635][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.535852][ T7032] bridge_slave_1: entered allmulticast mode [ 300.537076][ T37] audit: type=1800 audit(1791662204.485:24): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 300.593363][ T7032] bridge_slave_1: entered promiscuous mode [ 300.832268][ T37] audit: type=1800 audit(1791662204.785:25): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24329 res=0 errno=0 [ 300.888725][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.911222][ T37] audit: type=1800 audit(1791662204.855:26): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150958 res=0 errno=0 [ 301.060027][ T6971] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 301.505448][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.536099][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.692418][ T6971] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 301.891413][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.947136][ T7010] hsr_slave_0: entered promiscuous mode [ 301.948697][ T7010] hsr_slave_1: entered promiscuous mode [ 301.971561][ T7010] debugfs: 'hsr0' already exists in 'hsr' [ 301.971593][ T7010] Cannot create hsr debugfs directory [ 302.092220][ T6971] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.140147][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.327264][ T6971] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.423580][ T6971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.464483][ T7032] team0: Port device team_slave_0 added [ 302.642531][ T7032] team0: Port device team_slave_1 added [ 302.963118][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.963139][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.963169][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.016587][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.016605][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.016635][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.988227][ T6988] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 304.531424][ T6988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.643668][ T6988] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 305.184224][ T6988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.271241][ T6988] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 305.662276][ T6988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.701089][ T7032] hsr_slave_0: entered promiscuous mode [ 305.702614][ T7032] hsr_slave_1: entered promiscuous mode [ 305.703685][ T7032] debugfs: 'hsr0' already exists in 'hsr' [ 305.703712][ T7032] Cannot create hsr debugfs directory [ 305.855708][ T6988] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 306.595788][ T6988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.659334][ T37] audit: type=1800 audit(1791662211.615:27): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 309.064791][ T37] audit: type=1800 audit(1791662213.015:28): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 309.068649][ T6957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.262583][ T6957] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.328319][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.328630][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.433907][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.434271][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.504267][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.596432][ T6988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.683550][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.758528][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.770876][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.836856][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.857304][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.890528][ T6988] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.941129][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.941413][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.016887][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.017023][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.031560][ T4948] udevd[4948]: worker [6884] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 313.272750][ T6957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.404596][ T6971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.526832][ T6988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.807298][ T6957] veth0_vlan: entered promiscuous mode [ 314.857686][ T6957] veth1_vlan: entered promiscuous mode [ 315.305360][ T6957] veth0_macvtap: entered promiscuous mode [ 315.332645][ T6957] veth1_macvtap: entered promiscuous mode [ 315.379521][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.437842][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.980097][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.982341][ T5793] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.794371][ T5793] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.794832][ T5793] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.310524][ T37] audit: type=1800 audit(1791662221.255:29): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155870 res=0 errno=0 [ 317.466431][ T6988] veth0_vlan: entered promiscuous mode [ 317.668409][ T6971] veth0_vlan: entered promiscuous mode [ 317.706101][ T6988] veth1_vlan: entered promiscuous mode [ 317.737144][ T5793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.737168][ T5793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.791543][ T37] audit: type=1800 audit(1791662221.735:30): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155996 res=0 errno=0 [ 317.917220][ T6971] veth1_vlan: entered promiscuous mode [ 318.082398][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.082424][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.282904][ T6988] veth0_macvtap: entered promiscuous mode [ 318.308150][ T6971] veth0_macvtap: entered promiscuous mode [ 318.378480][ T6988] veth1_macvtap: entered promiscuous mode [ 318.415800][ T6971] veth1_macvtap: entered promiscuous mode [ 318.574301][ T5886] ums_eneub6250 3-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 318.678565][ T37] audit: type=1800 audit(1791662222.615:31): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=123436 res=0 errno=0 [ 318.714485][ T37] audit: type=1800 audit(1791662222.665:32): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=123385 res=0 errno=0 [ 318.795623][ T37] audit: type=1800 audit(1791662222.745:33): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=123438 res=0 errno=0 [ 318.887476][ T37] audit: type=1800 audit(1791662222.835:34): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123552 res=0 errno=0 [ 318.922207][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.061770][ T5886] usb 3-1: USB disconnect, device number 7 [ 319.066935][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.116655][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.157822][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.178103][ T37] audit: type=1800 audit(1791662222.995:35): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123375 res=0 errno=0 [ 321.105372][ T37] audit: type=1800 audit(1791662224.925:36): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156172 res=0 errno=0 [ 321.372037][ T37] audit: type=1800 audit(1791662225.325:37): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.288" name="compressor" dev="sysfs" ino=55203 res=0 errno=0 [ 322.158068][ T86] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.216226][ T86] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.216994][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.217224][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.217677][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.269957][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.322055][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.322129][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.322889][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.323256][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.323533][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.529934][ T37] audit: type=1800 audit(1791662226.485:38): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156298 res=0 errno=0 [ 323.152996][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.153021][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.157808][ T37] audit: type=1800 audit(1791662227.105:39): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156424 res=0 errno=0 [ 323.727035][ T7139] mmap: syz.6.294 (7139) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 324.239069][ T37] audit: type=1800 audit(1791662228.185:40): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156436 res=0 errno=0 [ 324.330545][ T37] audit: type=1800 audit(1791662228.275:41): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31253 res=0 errno=0 [ 324.338242][ T37] audit: type=1800 audit(1791662228.285:42): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31276 res=0 errno=0 [ 324.609027][ T7077] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 324.799774][ T7077] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 324.853583][ T7077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.853614][ T7077] usb 7-1: Product: syz [ 324.853631][ T7077] usb 7-1: Manufacturer: syz [ 324.853647][ T7077] usb 7-1: SerialNumber: syz [ 324.893921][ T37] audit: type=1800 audit(1791662228.845:43): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156463 res=0 errno=0 [ 324.948655][ T37] audit: type=1800 audit(1791662228.895:44): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=156495 res=0 errno=0 [ 324.948716][ T37] audit: type=1800 audit(1791662228.895:45): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=156470 res=0 errno=0 [ 325.004475][ T37] audit: type=1800 audit(1791662228.955:46): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=156471 res=0 errno=0 [ 325.033018][ T7077] usb 7-1: USB2VGA dongle found at address 2 [ 325.070479][ T7077] usb 7-1: Allocated 8 output buffers [ 325.090229][ T7077] usb 7-1: Failed to early initialize device [ 325.264502][ T37] audit: type=1800 audit(1791662229.215:47): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=156492 res=0 errno=0 [ 325.663030][ T7144] netlink: 56 bytes leftover after parsing attributes in process `syz.6.296'. [ 325.751902][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.751928][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.106865][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.106890][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.583769][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.583794][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.233965][ T5314] usb 7-1: USB disconnect, device number 2 [ 327.257876][ T7148] Unsupported ieee802154 address type: 0 [ 328.872923][ T7159] netlink: 'syz.6.297': attribute type 3 has an invalid length. [ 330.708660][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 330.937533][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 330.937793][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 330.938036][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 330.938290][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 330.938529][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 331.181751][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 331.202506][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 331.202786][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 331.203045][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.303'. [ 333.038335][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 333.038355][ T37] audit: type=1800 audit(1791662236.985:54): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4600 res=0 errno=0 [ 335.561117][ T37] audit: type=1800 audit(1791662239.515:55): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.311" name="quirks" dev="sysfs" ino=58398 res=0 errno=0 [ 336.914668][ T57] IPVS: starting estimator thread 0... [ 336.999495][ T7210] IPVS: using max 7 ests per chain, 16800 per kthread [ 338.737195][ T7219] fuse: Bad value for 'fd' [ 340.883941][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.920913][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.924955][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.947049][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.948226][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.137927][ T37] audit: type=1800 audit(1791662244.985:56): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156978 res=0 errno=0 [ 341.137995][ T37] audit: type=1800 audit(1791662245.075:57): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156989 res=0 errno=0 [ 341.203399][ T37] audit: type=1800 audit(1791662245.155:58): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157019 res=0 errno=0 [ 341.212192][ T37] audit: type=1800 audit(1791662245.155:59): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157008 res=0 errno=0 [ 342.669508][ T37] audit: type=1800 audit(1791662246.625:60): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31303 res=0 errno=0 [ 342.684073][ T37] audit: type=1800 audit(1791662246.635:61): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31326 res=0 errno=0 [ 343.128860][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 343.154595][ T5589] Bluetooth: hci1: command tx timeout [ 343.372497][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 343.395025][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 343.395086][ T31] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=42.02 [ 343.413612][ T37] audit: type=1800 audit(1791662247.355:62): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159065 res=0 errno=0 [ 343.417456][ T31] usb 8-1: config index 0 descriptor too short (expected 8210, got 18) [ 343.417486][ T31] usb 8-1: config 178 has an invalid interface number: 242 but max is 0 [ 343.417508][ T31] usb 8-1: config 178 has no interface number 0 [ 343.417543][ T31] usb 8-1: config 178 interface 242 has no altsetting 0 [ 343.476525][ T37] audit: type=1800 audit(1791662247.425:63): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159543 res=0 errno=0 [ 343.477002][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.477030][ T31] usb 8-1: Product: syz [ 343.477046][ T31] usb 8-1: Manufacturer: syz [ 343.477063][ T31] usb 8-1: SerialNumber: syz [ 343.477897][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.479817][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.480377][ T7221] bridge_slave_0: entered allmulticast mode [ 343.543946][ T7221] bridge_slave_0: entered promiscuous mode [ 343.573691][ T4898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.605644][ T4898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.641105][ T4898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.644018][ T4898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.646174][ T4898] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.841545][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.845106][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.845339][ T7221] bridge_slave_1: entered allmulticast mode [ 343.883960][ T37] audit: type=1800 audit(1791662247.825:64): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159644 res=0 errno=0 [ 343.884017][ T37] audit: type=1800 audit(1791662247.825:65): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159562 res=0 errno=0 [ 343.992089][ T7221] bridge_slave_1: entered promiscuous mode [ 344.550646][ T7221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.590294][ T7221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.899800][ T31] airspy 8-1:178.242: usb_control_msg() failed -71 request 09 [ 344.899822][ T31] airspy 8-1:178.242: Could not detect board [ 344.899934][ T31] airspy 8-1:178.242: probe with driver airspy failed with error -71 [ 344.926526][ T31] usb 8-1: USB disconnect, device number 2 [ 345.217466][ T7221] team0: Port device team_slave_0 added [ 345.228981][ T5589] Bluetooth: hci1: command tx timeout [ 345.234049][ T7221] team0: Port device team_slave_1 added [ 345.341791][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.341810][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.341840][ T7221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.347958][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.347975][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.348006][ T7221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.868642][ T7221] hsr_slave_0: entered promiscuous mode [ 345.869419][ T5589] Bluetooth: hci4: command tx timeout [ 345.924097][ T7221] hsr_slave_1: entered promiscuous mode [ 345.932702][ T7221] debugfs: 'hsr0' already exists in 'hsr' [ 345.932782][ T7221] Cannot create hsr debugfs directory [ 346.102567][ T7259] netlink: 'syz.7.318': attribute type 13 has an invalid length. [ 347.310387][ T5589] Bluetooth: hci1: command tx timeout [ 347.331679][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 347.331700][ T37] audit: type=1800 audit(1791662251.275:74): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162824 res=0 errno=0 [ 347.389648][ T37] audit: type=1800 audit(1791662251.335:75): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162835 res=0 errno=0 [ 347.426766][ T4898] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.497569][ T4898] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.514294][ T4898] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.575137][ T4898] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 347.575991][ T4898] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.750411][ T37] audit: type=1800 audit(1791662251.705:76): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162922 res=0 errno=0 [ 347.787263][ T37] audit: type=1800 audit(1791662251.735:77): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162948 res=0 errno=0 [ 347.913630][ T37] audit: type=1800 audit(1791662251.865:78): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163035 res=0 errno=0 [ 347.940004][ T37] audit: type=1800 audit(1791662251.895:79): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163046 res=0 errno=0 [ 347.950596][ T5589] Bluetooth: hci4: command tx timeout [ 348.041859][ T4898] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 348.134482][ T4898] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 348.137368][ T4898] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 348.159141][ T4898] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 348.164845][ T4898] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 348.293290][ T37] audit: type=1800 audit(1791662252.245:80): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163148 res=0 errno=0 [ 348.323635][ T37] audit: type=1800 audit(1791662252.245:81): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163161 res=0 errno=0 [ 348.951736][ T37] audit: type=1800 audit(1791662252.905:82): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 349.388928][ T4898] Bluetooth: hci1: command tx timeout [ 349.798912][ T4898] Bluetooth: hci7: command tx timeout [ 350.039116][ T4898] Bluetooth: hci4: command tx timeout [ 350.337874][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.338135][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.338389][ T7243] bridge_slave_0: entered allmulticast mode [ 350.350584][ T4898] Bluetooth: hci8: command tx timeout [ 350.386367][ T7243] bridge_slave_0: entered promiscuous mode [ 350.428282][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.428448][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.428650][ T7243] bridge_slave_1: entered allmulticast mode [ 350.453225][ T7243] bridge_slave_1: entered promiscuous mode [ 350.710890][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.770687][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.456461][ T7243] team0: Port device team_slave_0 added [ 351.483706][ T7243] team0: Port device team_slave_1 added [ 351.599675][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.599697][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.599736][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.602729][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.602745][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.602775][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.869147][ T4898] Bluetooth: hci7: command tx timeout [ 352.108978][ T4898] Bluetooth: hci4: command tx timeout [ 352.162279][ T7243] hsr_slave_0: entered promiscuous mode [ 352.163796][ T7243] hsr_slave_1: entered promiscuous mode [ 352.164810][ T7243] debugfs: 'hsr0' already exists in 'hsr' [ 352.164837][ T7243] Cannot create hsr debugfs directory [ 352.428997][ T4898] Bluetooth: hci8: command tx timeout [ 353.949073][ T4898] Bluetooth: hci7: command tx timeout [ 354.508964][ T4898] Bluetooth: hci8: command tx timeout [ 355.472788][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.472927][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.473135][ T7264] bridge_slave_0: entered allmulticast mode [ 355.476248][ T7264] bridge_slave_0: entered promiscuous mode [ 355.598341][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.598475][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.619146][ T7264] bridge_slave_1: entered allmulticast mode [ 355.622301][ T7264] bridge_slave_1: entered promiscuous mode [ 355.683316][ T37] audit: type=1800 audit(1791662259.635:83): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 355.813110][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.864158][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.958178][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.958680][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.974151][ T7268] bridge_slave_0: entered allmulticast mode [ 355.977274][ T7268] bridge_slave_0: entered promiscuous mode [ 356.026955][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.027178][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.027384][ T7268] bridge_slave_1: entered allmulticast mode [ 356.029185][ T4898] Bluetooth: hci7: command tx timeout [ 356.062281][ T7268] bridge_slave_1: entered promiscuous mode [ 356.067260][ T7264] team0: Port device team_slave_0 added [ 356.104009][ T7264] team0: Port device team_slave_1 added [ 356.161233][ T7268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.205267][ T7268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.206234][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.206250][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.206281][ T7264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.331251][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.331271][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.331302][ T7264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.465389][ T7268] team0: Port device team_slave_0 added [ 356.477567][ T7268] team0: Port device team_slave_1 added [ 356.588920][ T4898] Bluetooth: hci8: command tx timeout [ 359.360520][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.360542][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.360572][ T7268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.425180][ T7264] hsr_slave_0: entered promiscuous mode [ 359.436430][ T7264] hsr_slave_1: entered promiscuous mode [ 359.437461][ T7264] debugfs: 'hsr0' already exists in 'hsr' [ 359.437487][ T7264] Cannot create hsr debugfs directory [ 359.457521][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.457538][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.457569][ T7268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.129130][ T7268] hsr_slave_0: entered promiscuous mode [ 360.134160][ T7268] hsr_slave_1: entered promiscuous mode [ 360.136914][ T7268] debugfs: 'hsr0' already exists in 'hsr' [ 360.136942][ T7268] Cannot create hsr debugfs directory [ 361.347995][ T37] audit: type=1800 audit(1791662265.295:84): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 361.556646][ T37] audit: type=1800 audit(1791662265.505:85): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 361.964307][ T5604] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 362.016589][ T5604] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 362.034280][ T5604] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 362.068370][ T5604] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 362.069476][ T5604] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 362.194118][ T37] audit: type=1800 audit(1791662266.145:86): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179640 res=0 errno=0 [ 362.198280][ T37] audit: type=1800 audit(1791662266.145:87): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179651 res=0 errno=0 [ 362.264313][ T37] audit: type=1800 audit(1791662266.215:88): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179670 res=0 errno=0 [ 362.316981][ T37] audit: type=1800 audit(1791662266.265:89): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179681 res=0 errno=0 [ 364.135093][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.135293][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.135481][ T7306] bridge_slave_0: entered allmulticast mode [ 364.173494][ T7306] bridge_slave_0: entered promiscuous mode [ 364.189044][ T4898] Bluetooth: hci9: command tx timeout [ 365.966447][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.966683][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.966929][ T7306] bridge_slave_1: entered allmulticast mode [ 365.998156][ T7306] bridge_slave_1: entered promiscuous mode [ 366.133420][ T7306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.153704][ T7306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.261273][ T7306] team0: Port device team_slave_0 added [ 366.265376][ T7306] team0: Port device team_slave_1 added [ 366.274720][ T4898] Bluetooth: hci9: command tx timeout [ 366.329985][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.330004][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.330034][ T7306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.332513][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.332527][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.332558][ T7306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.508092][ T7306] hsr_slave_0: entered promiscuous mode [ 366.521465][ T7306] hsr_slave_1: entered promiscuous mode [ 366.524578][ T7306] debugfs: 'hsr0' already exists in 'hsr' [ 366.524606][ T7306] Cannot create hsr debugfs directory [ 366.824689][ T37] audit: type=1800 audit(1791662270.775:90): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 368.355496][ T4898] Bluetooth: hci9: command tx timeout [ 370.429132][ T4898] Bluetooth: hci9: command tx timeout [ 374.871618][ T1504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.747692][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.747769][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.924066][ T4898] Bluetooth: hci0: command 0x0406 tx timeout [ 400.904351][ T37] audit: type=1800 audit(1791662304.845:91): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185260 res=0 errno=0 [ 400.905145][ T5589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 400.965210][ T5589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 400.966505][ T5589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 400.993172][ T37] audit: type=1800 audit(1791662304.915:92): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185271 res=0 errno=0 [ 400.994436][ T5589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 400.995675][ T5589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 401.088853][ T37] audit: type=1800 audit(1791662305.025:93): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185290 res=0 errno=0 [ 401.229432][ T4898] Bluetooth: hci2: command 0x0406 tx timeout [ 401.233439][ T37] audit: type=1800 audit(1791662305.185:94): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185301 res=0 errno=0 [ 403.053107][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.053365][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.053588][ T7334] bridge_slave_0: entered allmulticast mode [ 403.056495][ T7334] bridge_slave_0: entered promiscuous mode [ 403.101935][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.102066][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.102299][ T7334] bridge_slave_1: entered allmulticast mode [ 403.105291][ T7334] bridge_slave_1: entered promiscuous mode [ 403.158961][ T5604] Bluetooth: hci6: command tx timeout [ 403.199871][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.204485][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.275416][ T7334] team0: Port device team_slave_0 added [ 403.299731][ T7334] team0: Port device team_slave_1 added [ 403.412123][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.412141][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.412166][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.415308][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.415325][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.415355][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.800485][ T37] audit: type=1800 audit(1791662307.745:95): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188995 res=0 errno=0 [ 403.856632][ T4898] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 403.857178][ T37] audit: type=1800 audit(1791662307.805:96): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189006 res=0 errno=0 [ 403.918081][ T4898] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 403.933687][ T4898] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 403.937016][ T4898] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 403.938017][ T4898] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 404.111521][ T7334] hsr_slave_0: entered promiscuous mode [ 404.113169][ T7334] hsr_slave_1: entered promiscuous mode [ 404.114336][ T7334] debugfs: 'hsr0' already exists in 'hsr' [ 404.114364][ T7334] Cannot create hsr debugfs directory [ 404.435743][ T37] audit: type=1800 audit(1791662308.385:97): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189612 res=0 errno=0 [ 404.464480][ T37] audit: type=1800 audit(1791662308.385:98): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189623 res=0 errno=0 [ 405.230601][ T5604] Bluetooth: hci6: command tx timeout [ 405.502075][ T37] audit: type=1800 audit(1791662309.455:99): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 406.509322][ T5604] Bluetooth: hci10: command tx timeout [ 406.588907][ T5604] Bluetooth: hci3: command 0x0406 tx timeout [ 406.645264][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.645500][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.645711][ T7354] bridge_slave_0: entered allmulticast mode [ 406.743557][ T7354] bridge_slave_0: entered promiscuous mode [ 406.747921][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.748180][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.748404][ T7354] bridge_slave_1: entered allmulticast mode [ 406.778118][ T7354] bridge_slave_1: entered promiscuous mode [ 406.878138][ T7354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.897158][ T7354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.973173][ T7354] team0: Port device team_slave_0 added [ 406.987176][ T7354] team0: Port device team_slave_1 added [ 407.309137][ T5589] Bluetooth: hci6: command tx timeout [ 407.620127][ T37] audit: type=1800 audit(1791662311.575:100): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194277 res=0 errno=0 [ 407.698087][ T5604] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 407.755927][ T5604] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 407.782898][ T5604] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 407.804110][ T37] audit: type=1800 audit(1791662311.755:101): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194288 res=0 errno=0 [ 407.828505][ T5604] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 407.856622][ T5604] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 407.899325][ T37] audit: type=1800 audit(1791662311.845:102): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194390 res=0 errno=0 [ 408.000231][ T37] audit: type=1800 audit(1791662311.945:103): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194401 res=0 errno=0 [ 408.029307][ T37] audit: type=1800 audit(1791662311.965:104): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194412 res=0 errno=0 [ 408.116693][ T37] audit: type=1800 audit(1791662312.065:105): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194423 res=0 errno=0 [ 408.173747][ T5604] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 408.206161][ T5604] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 408.212344][ T5604] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 408.224426][ T5604] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 408.225829][ T5604] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 408.385486][ T37] audit: type=1800 audit(1791662312.275:106): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194442 res=0 errno=0 [ 408.590336][ T5604] Bluetooth: hci10: command tx timeout [ 408.621879][ T37] audit: type=1800 audit(1791662312.575:107): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194453 res=0 errno=0 [ 409.395786][ T5589] Bluetooth: hci6: command tx timeout [ 410.031818][ T4898] Bluetooth: hci11: command tx timeout [ 410.173036][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.173056][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.173086][ T7354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.181581][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.181631][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.181707][ T7354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.613532][ T7354] hsr_slave_0: entered promiscuous mode [ 410.625031][ T7354] hsr_slave_1: entered promiscuous mode [ 410.639957][ T7354] debugfs: 'hsr0' already exists in 'hsr' [ 410.639979][ T7354] Cannot create hsr debugfs directory [ 410.669211][ T5589] Bluetooth: hci10: command tx timeout [ 410.669345][ T4898] Bluetooth: hci12: command tx timeout [ 411.470653][ T4898] Bluetooth: hci5: command 0x0406 tx timeout [ 411.681276][ T37] audit: type=1800 audit(1791662315.635:108): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 412.109783][ T5604] Bluetooth: hci11: command tx timeout [ 412.749313][ T4898] Bluetooth: hci10: command tx timeout [ 412.749370][ T5604] Bluetooth: hci12: command tx timeout [ 412.871209][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.872897][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.873123][ T7373] bridge_slave_0: entered allmulticast mode [ 412.904939][ T7373] bridge_slave_0: entered promiscuous mode [ 412.927991][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.928131][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.928440][ T7373] bridge_slave_1: entered allmulticast mode [ 412.952915][ T7373] bridge_slave_1: entered promiscuous mode [ 413.011723][ T7373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.016434][ T7373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.086632][ T7373] team0: Port device team_slave_0 added [ 413.097279][ T7373] team0: Port device team_slave_1 added [ 413.271770][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.271791][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.271821][ T7373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.584458][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.584478][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.584509][ T7373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.991954][ T7373] hsr_slave_0: entered promiscuous mode [ 413.993005][ T7373] hsr_slave_1: entered promiscuous mode [ 413.993762][ T7373] debugfs: 'hsr0' already exists in 'hsr' [ 413.993782][ T7373] Cannot create hsr debugfs directory [ 414.190018][ T5604] Bluetooth: hci11: command tx timeout [ 414.449122][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.449257][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.449487][ T7375] bridge_slave_0: entered allmulticast mode [ 414.459802][ T7375] bridge_slave_0: entered promiscuous mode [ 414.829177][ T5604] Bluetooth: hci12: command tx timeout [ 415.087292][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.087515][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.087727][ T7375] bridge_slave_1: entered allmulticast mode [ 415.114147][ T7375] bridge_slave_1: entered promiscuous mode [ 415.265769][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.303971][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.425643][ T7375] team0: Port device team_slave_0 added [ 415.478229][ T7375] team0: Port device team_slave_1 added [ 416.269505][ T5604] Bluetooth: hci11: command tx timeout [ 416.661048][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.661070][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.661101][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.909542][ T5604] Bluetooth: hci12: command tx timeout [ 417.127211][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.127232][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.127273][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.229615][ T37] audit: type=1800 audit(1791662321.185:109): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 417.344906][ T7375] hsr_slave_0: entered promiscuous mode [ 417.346497][ T7375] hsr_slave_1: entered promiscuous mode [ 417.347636][ T7375] debugfs: 'hsr0' already exists in 'hsr' [ 417.347663][ T7375] Cannot create hsr debugfs directory [ 417.685370][ T37] audit: type=1800 audit(1791662321.635:110): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 423.025943][ T4898] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 423.111960][ T37] audit: type=1800 audit(1791662327.065:111): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207740 res=0 errno=0 [ 423.115010][ T37] audit: type=1800 audit(1791662327.065:112): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207751 res=0 errno=0 [ 423.232677][ T4898] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 423.255195][ T4898] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 423.272926][ T4898] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 423.273755][ T4898] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 423.420397][ T37] audit: type=1800 audit(1791662327.375:113): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207770 res=0 errno=0 [ 423.655640][ T37] audit: type=1800 audit(1791662327.605:114): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207781 res=0 errno=0 [ 425.312389][ T4898] Bluetooth: hci13: command tx timeout [ 425.495826][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.496079][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.496334][ T7408] bridge_slave_0: entered allmulticast mode [ 425.536249][ T7408] bridge_slave_0: entered promiscuous mode [ 425.548175][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.548414][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.548675][ T7408] bridge_slave_1: entered allmulticast mode [ 425.594832][ T7408] bridge_slave_1: entered promiscuous mode [ 425.705918][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.725267][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.819488][ T7408] team0: Port device team_slave_0 added [ 425.823654][ T7408] team0: Port device team_slave_1 added [ 425.879409][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.879429][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.879459][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.938280][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.938299][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.938330][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.060940][ T7408] hsr_slave_0: entered promiscuous mode [ 426.062559][ T7408] hsr_slave_1: entered promiscuous mode [ 426.063622][ T7408] debugfs: 'hsr0' already exists in 'hsr' [ 426.063649][ T7408] Cannot create hsr debugfs directory [ 426.358205][ T37] audit: type=1800 audit(1791662330.305:115): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24330 res=0 errno=0 [ 427.388983][ T5604] Bluetooth: hci13: command tx timeout [ 429.470494][ T5604] Bluetooth: hci13: command tx timeout [ 431.548934][ T5604] Bluetooth: hci13: command tx timeout [ 440.035198][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 442.589438][ T38] INFO: task syz-executor:6697 blocked for more than 143 seconds. [ 442.589471][ T38] Tainted: G L syzkaller #0 [ 442.589485][ T38] Blocked by coredump. [ 442.589493][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.589504][ T38] task:syz-executor state:D stack:18904 pid:6697 tgid:6697 ppid:1 task_flags:0x40054c flags:0x00080003 [ 442.589585][ T38] Call Trace: [ 442.589594][ T38] [ 442.589611][ T38] __schedule+0x16d9/0x5700 [ 442.589680][ T38] ? __pfx___schedule+0x10/0x10 [ 442.589729][ T38] rt_mutex_schedule+0x76/0xf0 [ 442.589761][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 442.589806][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 442.589844][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 442.589872][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 442.589920][ T38] ? rcu_barrier+0x4c/0x530 [ 442.589952][ T38] ? rcu_barrier+0x4c/0x530 [ 442.589975][ T38] mutex_lock_nested+0x168/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 442.589999][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 442.590031][ T38] rcu_barrier+0x4c/0x530 [ 442.590069][ T38] netdev_run_todo+0x2fc/0x1060 [ 442.590108][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 442.590135][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 442.590167][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 442.590203][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 442.590245][ T38] ? netdev_state_change+0x1bc/0x210 [ 442.590278][ T38] tun_chr_close+0x13f/0x1c0 [ 442.590302][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 442.590325][ T38] __fput+0x41f/0xa80 [ 442.590361][ T38] task_work_run+0x1d9/0x270 [ 442.590392][ T38] ? __pfx_task_work_run+0x10/0x10 [ 442.590420][ T38] ? do_exit+0x735/0x2360 [ 442.590442][ T38] ? kmem_cache_free+0x187/0x6d0 [ 442.590463][ T38] ? put_net+0x191/0x260 [ 442.590492][ T38] ? do_exit+0x735/0x2360 [ 442.590520][ T38] do_exit+0x73a/0x2360 [ 442.590546][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 442.590586][ T38] ? __pfx_do_exit+0x10/0x10 [ 442.590610][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 442.590648][ T38] ? rt_spin_unlock+0x159/0x200 [ 442.590677][ T38] do_group_exit+0x22d/0x2f0 [ 442.590702][ T38] ? rt_spin_unlock+0x165/0x200 [ 442.590731][ T38] get_signal+0x121b/0x12c0 [ 442.590817][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 442.590865][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 442.590899][ T38] ? sock_ioctl+0x57d/0x7f0 [ 442.590955][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 442.590989][ T38] ? rcu_is_watching+0x16/0xb0 [ 442.591017][ T38] do_syscall_64+0x328/0x520 [ 442.591050][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.591074][ T38] ? clear_bhb_loop+0x70/0xc0 [ 442.591103][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.591135][ T38] RIP: 0033:0x7f850196de6b [ 442.591156][ T38] RSP: 002b:00007fff20fa20f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.591199][ T38] RAX: ffffffffffffffed RBX: 0000000000000005 RCX: 00007f850196de6b [ 442.591217][ T38] RDX: 00007fff20fa2150 RSI: 0000000000008933 RDI: 0000000000000005 [ 442.591233][ T38] RBP: 00007f8501a0619f R08: 0000000000000000 R09: 00007fff20fa2470 [ 442.591250][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 442.591264][ T38] R13: 00007f8502724620 R14: 0000000000000000 R15: 0000000000000000 [ 442.591302][ T38] [ 442.591383][ T38] [ 442.591383][ T38] Showing all locks held in the system: [ 442.591397][ T38] locks held by rcuc/1/28: 3, last CPU#1: [ 442.591415][ T38] #0: ffffffff8f1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 442.591485][ T38] #1: ffffffff8f1c3cc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 442.591545][ T38] #2: ffffffff8f1c3cc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 442.591607][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 442.591624][ T38] #0: ffffffff8f1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 442.591694][ T38] locks held by kworker/u8:11/1504: 6, on CPU#0: [ 442.591711][ T38] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 442.591777][ T38] #1: ffffc900067efc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 442.591850][ T38] #2: ffffffff905c7fc0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 442.591911][ T38] #3: ffff888062a8a160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 442.591973][ T38] #4: ffff88803c8be310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 442.592034][ T38] #5: ffffffff8f1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 442.592106][ T38] locks held by getty/5337: 2, on CPU#0: [ 442.592122][ T38] #0: ffff88803807a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 442.592187][ T38] #1: ffffc900044db2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 442.592252][ T38] locks held by kworker/0:4/5714: 3, on CPU#0: [ 442.592269][ T38] #0: ffff88813ff2b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 442.592337][ T38] #1: ffffc90005007c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 442.592403][ T38] #2: ffffffff8f1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 442.592464][ T38] locks held by syz-executor/6697: 1, on CPU#0: [ 442.592481][ T38] #0: ffffffff8f1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 442.592539][ T38] locks held by syz.4.280/6910: 1, on CPU#0: [ 442.592556][ T38] #0: ffffffff8f1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 442.592615][ T38] locks held by syz-executor/6971: 1, on CPU#0: [ 442.592631][ T38] #0: ffffffff8f1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 442.592691][ T38] locks held by syz.3.291/6980: 1, on CPU#1: [ 442.592708][ T38] #0: ffffffff8f1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 442.592767][ T38] locks held by syz-executor/7010: 7, on CPU#0: [ 442.592784][ T38] #0: ffff888036cd6510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 442.592860][ T38] #1: ffff888036a49878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540