last executing test programs: 19m25.298763301s ago: executing program 4 (id=55): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000010", @ANYRES32], 0x50) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002700), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002a00)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) keyctl$session_to_parent(0x12) 19m23.559239002s ago: executing program 4 (id=60): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "b70146a0a7435e581ead01b9b35d213cb1009f3e9e7223043c8087be3cd8e54f60f41dd0756be4ea7e2d92674719f1410e9e66679fe2ab51390d40fce76aa286", 0x28}, 0x48, 0xfffffffffffffffc) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0xfffffffffffffe7c, 0xb2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (fail_nth: 1) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 19m21.844865908s ago: executing program 4 (id=67): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a2002be80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce4af9b1c5683ffffff02ff030000ba", 0x89) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) add_key(&(0x7f00000000c0)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) ioctl$NBD_SET_SIZE(r3, 0xab02, 0xffffffff) r4 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="3f010000000000400b060a7000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "00000880"}]}}, 0x0}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4002) sendmsg$FOU_CMD_GET(r0, 0x0, 0x24042854) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0xf00, 0x240, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_usb_connect$uac1(0x0, 0x94, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0) 19m18.18904861s ago: executing program 4 (id=76): mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x80000010, 0x0, @thr={0x0, 0x0}}) (fail_nth: 1) 19m17.235444841s ago: executing program 4 (id=80): r0 = syz_open_dev$sndpcmp(&(0x7f0000000a40), 0x64, 0x80042) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000bc0)=0xe9) 19m16.128986109s ago: executing program 4 (id=87): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={'cmac(sm4-generic)\x00'}}) keyctl$set_timeout(0xf, r1, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r2, 0x4, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_CREATE2(r0, &(0x7f0000000640)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x9b, 0xff1e, 0x3, 0x2, 0x8, 0x4, "c3dbae815c6ca814bb959185ce23bff8102bda0e2634f7d655075ce37fcff94e68afcbd9adcb7ab192659daafd29d8597fb84d436c5b00ff2fc2f2b55a905fddffa6983b40ab352e40aab52dba05386467ce1831b608fb0f541e87ac4ad38587c4e3c0587204d4ec962dfc611c7b9343b7dba248531f19cbc5ac7bc8ab9f969f9af3bf071c418021773e7e34034c5a2ae69d9158045341d0c7c065"}}, 0x1b3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r3, &(0x7f0000000040)=@can, 0x80) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x2000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) keyctl$setperm(0x5, r1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) 19m0.890676151s ago: executing program 32 (id=87): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={'cmac(sm4-generic)\x00'}}) keyctl$set_timeout(0xf, r1, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r2, 0x4, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_CREATE2(r0, &(0x7f0000000640)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x9b, 0xff1e, 0x3, 0x2, 0x8, 0x4, "c3dbae815c6ca814bb959185ce23bff8102bda0e2634f7d655075ce37fcff94e68afcbd9adcb7ab192659daafd29d8597fb84d436c5b00ff2fc2f2b55a905fddffa6983b40ab352e40aab52dba05386467ce1831b608fb0f541e87ac4ad38587c4e3c0587204d4ec962dfc611c7b9343b7dba248531f19cbc5ac7bc8ab9f969f9af3bf071c418021773e7e34034c5a2ae69d9158045341d0c7c065"}}, 0x1b3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r3, &(0x7f0000000040)=@can, 0x80) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x2000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) keyctl$setperm(0x5, r1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) 8m42.351372159s ago: executing program 5 (id=2828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001300010029bd700000ff000000000000", @ANYRES32=r2, @ANYBLOB="062a010009040000050021000e00000008000a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) recvmsg(r4, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x34}}, 0x4008800) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045568, 0x6) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000440)={0xa, 0x4e28, 0x200008, @empty, 0x1}, 0x1c, 0x0}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x6, 0xfa00, {0x1, 0x0, 0x2, 0x3}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x8001}, 0x9c) 8m38.571030462s ago: executing program 5 (id=2838): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (fail_nth: 2) 8m38.457972266s ago: executing program 5 (id=2839): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000059ff3a4cc36212ed934b94182cbdf82d4761e71f7db79403001c", @ANYRES32=r1, @ANYBLOB="0000000000c00001000000000000010000000000"]) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000059ff3a4cc36212ed934b94182cbdf82d4761e71f7db79403001c", @ANYRES32=r1, @ANYBLOB="0000000000c00001000000000000010000000000"]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = fsopen(&(0x7f0000000000)='romfs\x00', 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='$[)-\\&{\xbe-$+-\x00', &(0x7f00000001c0)='/dev/udmabuf\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='$[)-\\&{\xbe-$+-\x00', &(0x7f00000001c0)='/dev/udmabuf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='gid', &(0x7f0000000100)='\x01\x89\x02\xee\x17\x94SB\xa6{\xad\xc2\x9d\x006QCp/&z\xff\x03\x81\xdd4J\x17\x8f!\xe3\x98\xff\x12\xc5V\x0f\x9c', 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4) 8m38.215965905s ago: executing program 5 (id=2840): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) shmat(0xffffffffffffffff, &(0x7f0000178000/0x1000)=nil, 0x1000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 8m37.045287743s ago: executing program 3 (id=2843): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) accept4$packet(r0, 0x0, &(0x7f0000000040), 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8m33.411706072s ago: executing program 3 (id=2847): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f000000bfc0)=[{{0x0, 0x0, 0x0}, 0xa3}], 0x1, 0x40000000, 0x0) (fail_nth: 2) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) 8m31.861115162s ago: executing program 5 (id=2848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001300010029bd700000ff000000000000", @ANYRES32=r2, @ANYBLOB="062a010009040000050021000e00000008000a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) recvmsg(r4, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x34}}, 0x4008800) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045568, 0x6) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000440)={0xa, 0x4e28, 0x200008, @empty, 0x1}, 0x1c, 0x0}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x6, 0xfa00, {0x1, 0x0, 0x2, 0x3}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x8001}, 0x9c) 8m31.856656303s ago: executing program 3 (id=2849): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 8m31.702716487s ago: executing program 3 (id=2850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000380), 0x40, 0x8000) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c851}, 0x4000880) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r8, 0x0, 0x0, 0x60, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x3d, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0x1, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) 8m29.90093635s ago: executing program 3 (id=2853): unshare(0x2c020400) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') lseek(r1, 0x2004, 0x0) (fail_nth: 1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bridge0\x00'}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40800d0) 8m28.86576381s ago: executing program 3 (id=2856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x8, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r4) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xa0000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000329bd7000fedbdf25080000b715a4d066f951839025bac752000c0010005d070000000000000600020000000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f0000000080)={{@hyper, 0xf2}, 0x903, 0x6, 0x2, 0x8000000040000004, 0x9, 0x2, 0x0, 0x8000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) 8m28.817792112s ago: executing program 5 (id=2857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x40000000000007b, 0x4004) 8m13.471103179s ago: executing program 33 (id=2856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x8, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r4) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xa0000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000329bd7000fedbdf25080000b715a4d066f951839025bac752000c0010005d070000000000000600020000000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f0000000080)={{@hyper, 0xf2}, 0x903, 0x6, 0x2, 0x8000000040000004, 0x9, 0x2, 0x0, 0x8000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) 8m13.296779085s ago: executing program 34 (id=2857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x40000000000007b, 0x4004) 7m43.922439525s ago: executing program 0 (id=2956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa00000000", @ANYRES8, @ANYRES8], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 7m43.609046294s ago: executing program 0 (id=2958): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5608, 0x3f00) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000300)=0xde, 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x4, &(0x7f0000000240)=""/126) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b0000002f4900007f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r6}, 0x38) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x232000, 0x123) openat(r8, 0x0, 0x4000, 0x5) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) 7m42.549139625s ago: executing program 0 (id=2962): symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x103, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = eventfd(0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x2, 0xcb}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) io_uring_enter(0xffffffffffffffff, 0xdc2, 0x751e, 0x0, 0x0, 0x3f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35}]}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) read$eventfd(r4, &(0x7f0000000080), 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 7m41.729946376s ago: executing program 0 (id=2963): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd, 0x9d}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rus\x97\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d19, &(0x7f0000000040)=0x121) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xffff, 0x0, 0x2845}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x4008894) setfsgid(0xee00) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) 7m40.057301571s ago: executing program 0 (id=2968): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0xcd6}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) (fail_nth: 2) 7m37.905848947s ago: executing program 0 (id=2972): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0xb7fb, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb", 0x2}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fcntl$setpipe(r1, 0x407, 0x1000000300007) write$eventfd(r1, &(0x7f0000000240)=0xffffffff7ffffffe, 0x8) r4 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) 3m20.452120074s ago: executing program 7 (id=3480): r0 = epoll_create1(0x80000) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 3m17.996693988s ago: executing program 7 (id=3485): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x10000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x46}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file3\x00', 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x52, 0xffffffffffffffff, &(0x7f0000000000)=0xa) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800005, 0x74, 0x40000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 3m15.388923577s ago: executing program 7 (id=3490): r0 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r1, 0xf, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$kcm(0xa, 0x1, 0x106) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="032fda000000040000b52362d3040000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r7, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendmsg$kcm(r3, &(0x7f0000000d80)={&(0x7f0000000640)=@nfc={0x27, r7, 0xffffffffffffffff, 0x2}, 0x80, 0x0}, 0x20000800) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8937, &(0x7f00000001c0)={'bond_slave_0\x00', @random="0d93830100"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x47) sendmmsg$unix(r9, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="b5aaf4a90e6f8083280514f563cbaf5f96762fed100c00935e5c4eebee8d9d8ac28e47ed88d8185354a9acc16b243924f954795ef3cdfffd54aac925120969a812648688c308b9988b69e6e5d1899de6131d7e452d6cc899f244c857682c1b87489b0500df6538"], 0x11cc}, 0x1, 0x0, 0x0, 0x80}, 0x810) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1ff, 0x0) ppoll(&(0x7f0000000100)=[{r11, 0x484}], 0x1, 0x0, &(0x7f00000000c0)={[0x6]}, 0x8) r12 = fanotify_init(0x8, 0x101000) fanotify_mark(r12, 0x90, 0x48100000, 0xffffffffffffffff, 0x0) close(r10) 3m8.409048736s ago: executing program 7 (id=3498): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000091000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x0, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x4, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)}, {&(0x7f0000000140)="530000008404f5884ce9fa919ac8f285da1f1425efe3e38a", 0x18}], 0x2) mount(0x0, 0x0, 0x0, 0x81001f, &(0x7f0000000340)='norecovery') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m7.117477456s ago: executing program 7 (id=3505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x80200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m5.009783785s ago: executing program 7 (id=3510): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000000600)=[0x695f, 0x1ff]) r0 = syz_usb_connect(0x0, 0x48, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) epoll_create1(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xffffe000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{0x2, 0x4, 0x5, 0x7, 'syz1\x00', 0x10}, 0x1, [0x23d1, 0x4, 0x7, 0x5, 0x7, 0x3, 0xec3d, 0x6, 0x60000000000, 0x8, 0xd, 0x10, 0x8, 0x7, 0x1, 0x8, 0x7, 0x80000000, 0x2, 0x1, 0x1, 0xa, 0x7fff, 0x4, 0xeb, 0x10, 0x8, 0x4, 0x8, 0x3, 0x9, 0x0, 0x4, 0x0, 0x9, 0xf50, 0x5, 0x2, 0x8001, 0x5fa6, 0x183dff2e, 0x0, 0x7, 0x7, 0x7ff, 0x7f, 0x6, 0x1, 0x116, 0x8, 0x3, 0x2, 0x90, 0x3, 0x7cea, 0x7ff, 0x9, 0x7, 0xde, 0x8, 0x80000001, 0x3, 0x1200, 0x71, 0x40, 0x402, 0x3, 0x6, 0x6, 0x9, 0xffffffff, 0xe, 0x3d, 0x9, 0xe89c29, 0x3, 0x1, 0x1, 0x401, 0xe, 0x3, 0x6b, 0x101, 0xcc, 0x9b4f, 0x10, 0x81a0, 0x1, 0x4, 0x2, 0xed5, 0x40, 0x3, 0xc0000000000, 0x1ff, 0x3, 0x7fffffff, 0x7fffffff, 0x2, 0x318, 0x3ff, 0x154394b7, 0x4, 0x647, 0x8, 0x8, 0xc, 0x8, 0x0, 0x3e6, 0x10000, 0x6, 0x46, 0x800, 0x0, 0x9, 0xfc, 0x0, 0x2, 0x0, 0x4, 0x10e000000000, 0x6, 0x1, 0xfff, 0x4, 0x47e, 0x4]}) mq_open(&(0x7f0000002280)='\xe2\xff\xff\xff\xff\xff\xff\xff\x00\xe1\xec\x8d_\x0e.\x1dvq\xe6\x95\aO\x1b\xf7\xe9\xc1~8Fn{\x99`\x00Kx\xa0\xf5=@\r\xc9_\xed-kH\x1c\xf7?,\xf6\x9a\\\xa1\xb6\xaf\x91\xc58\xf4\x1d\xd2\xbe^u!}8~E\xf5\xb1\xe6\r\x8e*\x82\xeez\xabmi\xaef\t\xc9&kI>\x16\xf9q.` \xb7c\x0e\xca\x8b\xaf\x13{\xf6rV\xfd\xf2\\\xda\xabV\x92\r\v\x03\\\xe7\x97\xb7\b\\\x0f\xdb\x02\a\'2/\\\xb5\xba\xf6l\xc7\x03\x9b\x8b\xe0Y\x9a\xf3\xb1\x99.\x18\x84\x04(\xcf?D7}\xf0q\x14\"A\x84TU\x01\v\x8c\xce\xc8\x85\x7fo\x169,\x06\xcaoZ\"kMX\xa2\xf9\xa2\xa4\xc1w\xe3\x8d4\xda\x11\xaf\x01\xb0\xc5\xffb\t\xec\xcfP?\xc4\xdd\xed\xd2', 0x40, 0x100, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x40, 0x10, 0x5, 0x2, {{0x6, 0x4, 0x0, 0x37, 0x18, 0x64, 0x0, 0x3, 0x29, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x3, 0x4d}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x1200002, &(0x7f00000002c0)='cache=none') setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000100), 0x4) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000740)={&(0x7f0000000700)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5) 2m49.26960411s ago: executing program 35 (id=3510): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000000600)=[0x695f, 0x1ff]) r0 = syz_usb_connect(0x0, 0x48, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) epoll_create1(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xffffe000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{0x2, 0x4, 0x5, 0x7, 'syz1\x00', 0x10}, 0x1, [0x23d1, 0x4, 0x7, 0x5, 0x7, 0x3, 0xec3d, 0x6, 0x60000000000, 0x8, 0xd, 0x10, 0x8, 0x7, 0x1, 0x8, 0x7, 0x80000000, 0x2, 0x1, 0x1, 0xa, 0x7fff, 0x4, 0xeb, 0x10, 0x8, 0x4, 0x8, 0x3, 0x9, 0x0, 0x4, 0x0, 0x9, 0xf50, 0x5, 0x2, 0x8001, 0x5fa6, 0x183dff2e, 0x0, 0x7, 0x7, 0x7ff, 0x7f, 0x6, 0x1, 0x116, 0x8, 0x3, 0x2, 0x90, 0x3, 0x7cea, 0x7ff, 0x9, 0x7, 0xde, 0x8, 0x80000001, 0x3, 0x1200, 0x71, 0x40, 0x402, 0x3, 0x6, 0x6, 0x9, 0xffffffff, 0xe, 0x3d, 0x9, 0xe89c29, 0x3, 0x1, 0x1, 0x401, 0xe, 0x3, 0x6b, 0x101, 0xcc, 0x9b4f, 0x10, 0x81a0, 0x1, 0x4, 0x2, 0xed5, 0x40, 0x3, 0xc0000000000, 0x1ff, 0x3, 0x7fffffff, 0x7fffffff, 0x2, 0x318, 0x3ff, 0x154394b7, 0x4, 0x647, 0x8, 0x8, 0xc, 0x8, 0x0, 0x3e6, 0x10000, 0x6, 0x46, 0x800, 0x0, 0x9, 0xfc, 0x0, 0x2, 0x0, 0x4, 0x10e000000000, 0x6, 0x1, 0xfff, 0x4, 0x47e, 0x4]}) mq_open(&(0x7f0000002280)='\xe2\xff\xff\xff\xff\xff\xff\xff\x00\xe1\xec\x8d_\x0e.\x1dvq\xe6\x95\aO\x1b\xf7\xe9\xc1~8Fn{\x99`\x00Kx\xa0\xf5=@\r\xc9_\xed-kH\x1c\xf7?,\xf6\x9a\\\xa1\xb6\xaf\x91\xc58\xf4\x1d\xd2\xbe^u!}8~E\xf5\xb1\xe6\r\x8e*\x82\xeez\xabmi\xaef\t\xc9&kI>\x16\xf9q.` \xb7c\x0e\xca\x8b\xaf\x13{\xf6rV\xfd\xf2\\\xda\xabV\x92\r\v\x03\\\xe7\x97\xb7\b\\\x0f\xdb\x02\a\'2/\\\xb5\xba\xf6l\xc7\x03\x9b\x8b\xe0Y\x9a\xf3\xb1\x99.\x18\x84\x04(\xcf?D7}\xf0q\x14\"A\x84TU\x01\v\x8c\xce\xc8\x85\x7fo\x169,\x06\xcaoZ\"kMX\xa2\xf9\xa2\xa4\xc1w\xe3\x8d4\xda\x11\xaf\x01\xb0\xc5\xffb\t\xec\xcfP?\xc4\xdd\xed\xd2', 0x40, 0x100, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x40, 0x10, 0x5, 0x2, {{0x6, 0x4, 0x0, 0x37, 0x18, 0x64, 0x0, 0x3, 0x29, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x3, 0x4d}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x1200002, &(0x7f00000002c0)='cache=none') setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000100), 0x4) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000740)={&(0x7f0000000700)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5) 2m36.54520292s ago: executing program 6 (id=3570): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000280), 0xb00000, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES8]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c8"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968", 0x79}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) (async) r3 = dup(0xffffffffffffffff) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) bind$tipc(r3, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)={0x14, 0x24, 0x1, 0x70bd25, 0x25dfdc01, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) setuid(0xee00) (async) r7 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff8000/0x2000)=nil) shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x2000) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m35.53433887s ago: executing program 6 (id=3574): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)=ANY=[]) 2m34.04041027s ago: executing program 6 (id=3576): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) 2m33.741170389s ago: executing program 6 (id=3578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x4000000, 0x0, 0x1, 0x0, &(0x7f0000000000)="05", 0x0, 0x0, 0x4}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4004841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c00000401cb80100001800c00108008000b"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18, 0x20000010}}], 0x1, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m31.666016049s ago: executing program 6 (id=3579): r0 = eventfd2(0x40, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x1, 0x1, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) pipe2(&(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xcb, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r9, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x3}], 0x10000000000000a3, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)=ANY=[], 0x9) 2m29.674482264s ago: executing program 6 (id=3583): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x80200) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000580)={&(0x7f0000000500)=[{0x1ff, 0x0, 0x0, 0x0}, {0x4, 0x4010, 0x0, 0x0}], 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x105, &(0x7f0000000400)=""/261, 0xb6df4c32c1d5c814}, 0x94) 2m14.20242916s ago: executing program 36 (id=3583): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x80200) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000580)={&(0x7f0000000500)=[{0x1ff, 0x0, 0x0, 0x0}, {0x4, 0x4010, 0x0, 0x0}], 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x105, &(0x7f0000000400)=""/261, 0xb6df4c32c1d5c814}, 0x94) 7.798068431s ago: executing program 1 (id=3924): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3, 0x0, &(0x7f0000000080)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0)="140000000900", 0x6) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x2000e3f, @mcast2, 0x7}}}, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x163, 0x80, 0x5, 0x4, 0x4, 0x2, 0xfc, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1}}}, 0x87e8, 0x9, 0x1, 0x10000, 0x4}}, &(0x7f00000001c0)=0xb0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r11, 0xffffffffffffc000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000300)={r8, 0x3}, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r9, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 6.597465919s ago: executing program 1 (id=3926): r0 = eventfd2(0x40, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) pipe2(&(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xcb, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)=ANY=[], 0x9) 5.122200111s ago: executing program 1 (id=3927): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24622, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000000140)) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 3.742255095s ago: executing program 1 (id=3930): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) socket$kcm(0x2a, 0x2, 0x0) 3.628112668s ago: executing program 2 (id=3931): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x61, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) set_mempolicy(0x5, 0x0, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c0c2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) link(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003400)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x5, [@struct={0x4, 0x3, 0x0, 0x4, 0x1, 0x6, [{0x9, 0x0, 0x6}, {0xd, 0x0, 0xe44}, {0x2, 0x4, 0x100}]}, @fwd={0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xfffffa61}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @var={0x10, 0x0, 0x0, 0xe, 0x1, 0x1}, @var={0xd, 0x0, 0x0, 0xe, 0x1}, @union={0x9, 0x1, 0x0, 0x5, 0x1, 0x3, [{0xa, 0x5, 0x84c}]}]}, {0x0, [0x0, 0x5f, 0x5f]}}, &(0x7f0000002400)=""/4096, 0xc1, 0x1000, 0x0, 0x6}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f00000001c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) prctl$PR_PAC_RESET_KEYS(0x36, 0x26) sendmmsg$unix(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000300)="b7ddeff115dc8ac479ca235cac", 0xd}, {&(0x7f0000000340)="879d3aaac91a1f2a5f5af38e31c9e4d929cc9181195ab45090fbe020cefb6af5eb43ed494ccdb73b9bed9850d30e154bffaab5cd4cfd78044b1583158aff6986bdb709992d343065bf8fa563627e597d114c74ca5e6a", 0x56}, {&(0x7f0000000780)="340af9140bad0dde6d5cedf625cf5a4ab2e9f0ebd4c117a601898a27b53a8b2c72307ab798957ea0432ea01b6dde8f357860936f3d7cb426c322edff2577a0f20c3f07fe8190ac40b5b83296fe3c555e9753edd6d169160b4a89b79ca0503d41b86959e440b51a5de19dc71dfe2296489cdee353fda71fe88e9f3a6b5858f903e45699747d267fe3", 0x88}, {&(0x7f0000000840)="7df93f8582dadd7162476297784ed66b3c04bba38af384966e326531e870f925ffcf0fd65929dcee3fbc5567c8e42ddf3fdf2f9d4144ac9314454d89f2f04a5260d0b641bd3c69925b48b62b1c9ecf47671f7467ec0d8c75cb4a2813f7a0b247081408f77d6d2e15eac0e93ed6f5e9b2c56f25e40fb1bacb7455c2db08bbe33bd0d1125d163c0ee09cb0f2dbb5e8", 0x8e}, {&(0x7f0000000900)="fcf183dc24d521ba82094ccacc0a097c502e748fdcb5ba781cb56949103dc2746c807c97d697ebdb21e6f05f6a46bb30dee55440d4120bd7848beabf72b526466b0e6d51a5c441a2d1aa6290af06ec6cba25eed1f79ad418aca227e3c2efc5ce79f3bfb461ecad1acf1120d3adf9671991e532", 0x73}, {&(0x7f0000000980)="56208ad98e557b9a2b60a4c0bed51e1ff4a9138f2babc7b6af575406c152f6787656351e29664c5fbaf13de5378fa685a78cc64a536c79a3766a58c92e1dce270ef35b4e84e5de32a6b3fe2990dc87a5192bbbb8aae117cff221b630a4960be9ddc1e757e0f0e691c72393d882c2a1cada05931770db11a0b3cde599853f0240eb95592eeba89a3cfd958522a259f75ddddb06a5dd1fa232450a2a", 0x9b}], 0x6, 0x0, 0x0, 0x8854}}], 0x1, 0x4010) 3.285687967s ago: executing program 1 (id=3932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001300010029bd700000ff000000000000", @ANYRES32=r2, @ANYBLOB="062a010009040000050021000e00000008000a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) recvmsg(r4, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000002020101000000000000020073797a30000000000900020073797a3000000000050001000700000000000000000000005c26295d04d74b55bab2fe81d5f12c55d7a3956a29340ab56dd2ac1bd9673cba791abeae17727fa2062a5e14f6fbd82c595ca679244a4e7c512a8c73025d0e498a1591c771af09fde343db9e6cbfccb5143cc7129f86c3d7a7e00d0e426751b376bb1c2cc9cff2301716f5a4c3c3b81b2512df6d3ca7e0a475f5873c93e740d84e61144821b2eca0f51216e7dd6f91b14e5defe762637e2b7551d77169d61b52db156a8dbba2ed724ac709756ce0e6702b005f9c9e9f6571fe768229442d9855eba24e8e9c7cad5eff2537cc02e3434fa22386ef3e379a3c6959a2a0f8556581f65894537656aef5a6e921137905c33e8d3bfa0119e080b4c512508993606da7b125ecfef0622b3ff3ebd1a7368b3c960a0bdb1947b337d88dacc5bc97a003a068a7d0e2"], 0x34}}, 0x4008800) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045568, 0x6) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000440)={0xa, 0x4e28, 0x200008, @empty, 0x1}, 0x1c, 0x0}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x6, 0xfa00, {0x1, 0x0, 0x2, 0x3}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x8001}, 0x9c) 2.913276237s ago: executing program 2 (id=3933): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) setns(0xffffffffffffffff, 0x24020000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) write(r0, &(0x7f0000000080)="0f", 0x1) 2.329945826s ago: executing program 1 (id=3934): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0) 1.859196697s ago: executing program 2 (id=3935): r0 = eventfd2(0x40, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) pipe2(&(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xcb, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)=ANY=[], 0x9) 514.881008ms ago: executing program 2 (id=3936): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xd1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (fail_nth: 2) 266.321568ms ago: executing program 2 (id=3937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2c000044) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000010000304080020000000000000000000", @ANYRES32=0x0, @ANYBLOB="88200100420000001800128008000100677470000c00028008000200", @ANYBLOB='\a\x00\x00\x00\x00'], 0x38}, 0x1, 0xba01}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x5, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2c000044) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000010000304080020000000000000000000", @ANYRES32=0x0, @ANYBLOB="88200100420000001800128008000100677470000c00028008000200", @ANYBLOB='\a\x00\x00\x00\x00'], 0x38}, 0x1, 0xba01}, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x5, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) (async) 0s ago: executing program 2 (id=3938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xc}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) (fail_nth: 2) r4 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000080)=0x2) kernel console output (not intermixed with test programs): d allmulticast mode [ 991.972748][T16509] bridge_slave_0: entered promiscuous mode [ 992.009266][T16509] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.009348][T16509] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.009515][T16509] bridge_slave_1: entered allmulticast mode [ 992.019777][T16509] bridge_slave_1: entered promiscuous mode [ 992.147944][T16699] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3246'. [ 992.249515][T16509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.405926][T16509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.547213][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.547261][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.869692][T11073] usb 3-1: USB disconnect, device number 93 [ 994.164847][T16509] team0: Port device team_slave_0 added [ 994.186474][T16509] team0: Port device team_slave_1 added [ 995.749850][T16509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.749991][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.750025][T16509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.753092][T16509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.765092][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.765230][T16509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.025431][T16717] tmpfs: Bad value for 'mpol' [ 997.181805][T16509] hsr_slave_0: entered promiscuous mode [ 997.183621][T16509] hsr_slave_1: entered promiscuous mode [ 997.184855][T16509] debugfs: 'hsr0' already exists in 'hsr' [ 997.184883][T16509] Cannot create hsr debugfs directory [ 999.346754][T16738] RGB/YUV Input: ================= START STATUS ================= [ 999.346829][T16738] RGB/YUV Input: Test Pattern: 75% Colorbar [ 999.346945][T16738] RGB/YUV Input: Show Information: All [ 999.347051][T16738] RGB/YUV Input: Vertical Flip: false [ 999.347147][T16738] RGB/YUV Input: Horizontal Flip: false [ 999.347244][T16738] RGB/YUV Input: Brightness: 128 [ 999.347341][T16738] RGB/YUV Input: Contrast: 128 [ 999.347438][T16738] RGB/YUV Input: Hue: 0 [ 999.347507][T16738] RGB/YUV Input: Saturation: 128 [ 999.347579][T16738] RGB/YUV Input: Pixel Rate: 160000000 [ 999.347677][T16738] RGB/YUV Input: Horizontal Blanking: 800 [ 999.347774][T16738] RGB/YUV Input: Vertical Blanking: 3223 [ 999.347871][T16738] RGB/YUV Input: ================== END STATUS ================== [ 999.371880][T16738] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1001.799590][T16777] program syz.2.3263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1002.100053][T11073] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1003.411564][T11073] usb 3-1: Using ep0 maxpacket: 16 [ 1003.412852][T11073] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 1003.457410][T11073] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1003.457456][T11073] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 1003.457479][T11073] usb 3-1: Product: syz [ 1003.457494][T11073] usb 3-1: Manufacturer: syz [ 1003.469412][T11073] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1003.469440][T11073] r8152-cfgselector 3-1: config 0 descriptor?? [ 1004.330324][T16800] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1004.419276][T16376] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1004.581663][T16376] usb 7-1: Using ep0 maxpacket: 8 [ 1004.589122][T16376] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1004.589157][T16376] usb 7-1: config 0 has no interface number 0 [ 1004.589206][T16376] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1004.589232][T16376] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1004.589258][T16376] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1004.589285][T16376] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1004.589329][T16376] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1004.589354][T16376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.719327][T16376] usb 7-1: config 0 descriptor?? [ 1004.840862][T16376] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1005.033673][ T36] usb 7-1: USB disconnect, device number 9 [ 1005.064420][ T36] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1005.159662][T16815] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1005.402920][T11073] r8152-cfgselector 3-1: USB disconnect, device number 94 [ 1005.971309][T16825] program syz.6.3276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1006.170674][T16828] RGB/YUV Input: ================= START STATUS ================= [ 1006.170747][T16828] RGB/YUV Input: Test Pattern: 75% Colorbar [ 1006.170848][T16828] RGB/YUV Input: Show Information: All [ 1006.170938][T16828] RGB/YUV Input: Vertical Flip: false [ 1006.171008][T16828] RGB/YUV Input: Horizontal Flip: false [ 1006.171104][T16828] RGB/YUV Input: Brightness: 128 [ 1006.171201][T16828] RGB/YUV Input: Contrast: 128 [ 1006.171297][T16828] RGB/YUV Input: Hue: 0 [ 1006.171392][T16828] RGB/YUV Input: Saturation: 128 [ 1006.171487][T16828] RGB/YUV Input: Pixel Rate: 160000000 [ 1006.171584][T16828] RGB/YUV Input: Horizontal Blanking: 800 [ 1006.171681][T16828] RGB/YUV Input: Vertical Blanking: 3223 [ 1006.171778][T16828] RGB/YUV Input: ================== END STATUS ================== [ 1006.247950][T16829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3275'. [ 1007.252247][T11073] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1007.410022][T11073] usb 7-1: Using ep0 maxpacket: 16 [ 1007.411306][T11073] usb 7-1: too many configurations: 112, using maximum allowed: 8 [ 1007.489271][T11073] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1007.489305][T11073] usb 7-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 1007.489329][T11073] usb 7-1: Product: syz [ 1007.489346][T11073] usb 7-1: Manufacturer: syz [ 1007.722310][T11073] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1007.722339][T11073] r8152-cfgselector 7-1: config 0 descriptor?? [ 1009.837746][ T10] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 1010.412562][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 1010.412582][ T37] audit: type=1326 audit(1783786225.565:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1010.436509][ T37] audit: type=1326 audit(1783786225.585:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1010.436585][ T37] audit: type=1326 audit(1783786225.585:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1010.436631][ T37] audit: type=1326 audit(1783786225.585:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1010.436678][ T37] audit: type=1326 audit(1783786225.585:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1010.436729][ T37] audit: type=1326 audit(1783786225.585:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1010.436783][ T37] audit: type=1326 audit(1783786225.585:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1010.436835][ T37] audit: type=1326 audit(1783786225.585:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa096d0e68e code=0x7ffc0000 [ 1010.436885][ T37] audit: type=1326 audit(1783786225.585:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1010.436923][ T37] audit: type=1326 audit(1783786225.585:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16882 comm="syz.6.3286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa096d4daeb code=0x7ffc0000 [ 1010.573102][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1010.690468][T16875] Process accounting resumed [ 1010.706721][T16376] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1010.902445][T16376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.902483][T16376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.902527][T16376] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1010.902552][T16376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.948327][T16376] usb 7-1: config 0 descriptor?? [ 1013.801447][T16901] CIFS mount error: No usable UNC path provided in device string! [ 1013.801447][T16901] [ 1013.801471][T16901] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1014.237905][T16376] usb 7-1: string descriptor 0 read error: -71 [ 1014.240646][T16376] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 1014.240762][T16376] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 1014.240781][T16376] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 1014.240841][T16376] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 1014.240963][T16376] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 1014.548363][T16376] usb 7-1: USB disconnect, device number 11 [ 1015.958650][ T37] kauditd_printk_skb: 2669 callbacks suppressed [ 1015.958673][ T37] audit: type=1326 audit(1783786231.115:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16938 comm="syz.1.3295" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x0 [ 1018.786233][ T37] audit: type=1326 audit(1783786233.945:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16977 comm="syz.1.3302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1018.786297][ T37] audit: type=1326 audit(1783786233.945:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16977 comm="syz.1.3302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1018.787137][ T37] audit: type=1326 audit(1783786233.945:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16977 comm="syz.1.3302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1018.787296][ T37] audit: type=1326 audit(1783786233.945:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16977 comm="syz.1.3302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1018.787446][ T37] audit: type=1326 audit(1783786233.945:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16977 comm="syz.1.3302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1018.788693][ T37] audit: type=1326 audit(1783786233.945:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16977 comm="syz.1.3302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1018.790131][ T37] audit: type=1326 audit(1783786233.955:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16977 comm="syz.1.3302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1018.791604][ T37] audit: type=1326 audit(1783786233.955:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16977 comm="syz.1.3302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1018.791658][ T37] audit: type=1326 audit(1783786233.955:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16977 comm="syz.1.3302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1019.891592][T16997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3305'. [ 1021.314212][T17010] random: crng reseeded on system resumption [ 1022.135771][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 1022.135793][ T37] audit: type=1326 audit(1783786237.295:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1022.135847][ T37] audit: type=1326 audit(1783786237.295:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1022.135895][ T37] audit: type=1326 audit(1783786237.295:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1022.135945][ T37] audit: type=1326 audit(1783786237.295:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1022.135991][ T37] audit: type=1326 audit(1783786237.295:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1022.136041][ T37] audit: type=1326 audit(1783786237.295:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1022.136087][ T37] audit: type=1326 audit(1783786237.295:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1022.136132][ T37] audit: type=1326 audit(1783786237.295:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1022.139196][ T37] audit: type=1326 audit(1783786237.295:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1022.139253][ T37] audit: type=1326 audit(1783786237.295:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.1.3312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1024.270108][ T4923] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1024.425625][ T4923] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1024.425659][ T4923] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1024.425682][ T4923] usb 7-1: Product: syz [ 1024.425698][ T4923] usb 7-1: SerialNumber: syz [ 1024.471882][ T4923] usb 7-1: config 0 descriptor?? [ 1024.717144][ T4923] hso 7-1:0.0: Failed to find BULK eps [ 1025.009407][ T4923] usb 7-1: USB disconnect, device number 12 [ 1025.153334][ T2000] bridge_slave_1: left allmulticast mode [ 1025.153372][ T2000] bridge_slave_1: left promiscuous mode [ 1025.153651][ T2000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.644962][ T2000] bridge_slave_0: left allmulticast mode [ 1026.644999][ T2000] bridge_slave_0: left promiscuous mode [ 1026.645265][ T2000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.953266][T17068] random: crng reseeded on system resumption [ 1027.374249][ T2000] bridge_slave_1: left allmulticast mode [ 1027.374287][ T2000] bridge_slave_1: left promiscuous mode [ 1027.374558][ T2000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.457520][ T4910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.070535][ T4910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.107040][ T4910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1029.108346][ T4910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1029.109217][ T4910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1029.598298][ T2000] bridge_slave_0: left allmulticast mode [ 1029.598336][ T2000] bridge_slave_0: left promiscuous mode [ 1029.598628][ T2000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.615587][ T5620] Bluetooth: hci3: command tx timeout [ 1031.851487][ T2000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.913938][ T2000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.952861][ T2000] bond0 (unregistering): Released all slaves [ 1033.690418][ T4910] Bluetooth: hci3: command tx timeout [ 1035.230763][ T2000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.770002][ T4910] Bluetooth: hci3: command tx timeout [ 1035.990952][ T2000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.060881][ T2000] bond0 (unregistering): Released all slaves [ 1036.068577][ T2000] bond1 (unregistering): Released all slaves [ 1036.089061][ T2000] bond2 (unregistering): Released all slaves [ 1037.074419][T17130] RGB/YUV Input: ================= START STATUS ================= [ 1037.074476][T17130] RGB/YUV Input: Test Pattern: 75% Colorbar [ 1037.074581][T17130] RGB/YUV Input: Show Information: All [ 1037.074678][T17130] RGB/YUV Input: Vertical Flip: false [ 1037.074775][T17130] RGB/YUV Input: Horizontal Flip: false [ 1037.074846][T17130] RGB/YUV Input: Brightness: 128 [ 1037.074944][T17130] RGB/YUV Input: Contrast: 128 [ 1037.075041][T17130] RGB/YUV Input: Hue: 0 [ 1037.075137][T17130] RGB/YUV Input: Saturation: 128 [ 1037.075234][T17130] RGB/YUV Input: Pixel Rate: 160000000 [ 1037.075347][T17130] RGB/YUV Input: Horizontal Blanking: 800 [ 1037.075446][T17130] RGB/YUV Input: Vertical Blanking: 3223 [ 1037.075544][T17130] RGB/YUV Input: ================== END STATUS ================== [ 1037.103136][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3334'. [ 1037.161993][T17131] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3334'. [ 1037.919957][ T4910] Bluetooth: hci3: command tx timeout [ 1038.122480][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1038.673484][ T2000] : left promiscuous mode [ 1039.471374][T17152] RGB/YUV Input: ================= START STATUS ================= [ 1039.471447][T17152] RGB/YUV Input: Test Pattern: 75% Colorbar [ 1039.471550][T17152] RGB/YUV Input: Show Information: All [ 1039.471646][T17152] RGB/YUV Input: Vertical Flip: false [ 1039.471742][T17152] RGB/YUV Input: Horizontal Flip: false [ 1039.471838][T17152] RGB/YUV Input: Brightness: 128 [ 1039.471935][T17152] RGB/YUV Input: Contrast: 128 [ 1039.472043][T17152] RGB/YUV Input: Hue: 0 [ 1039.472138][T17152] RGB/YUV Input: Saturation: 128 [ 1039.472235][T17152] RGB/YUV Input: Pixel Rate: 160000000 [ 1039.472333][T17152] RGB/YUV Input: Horizontal Blanking: 800 [ 1039.472442][T17152] RGB/YUV Input: Vertical Blanking: 3223 [ 1039.472514][T17152] RGB/YUV Input: ================== END STATUS ================== [ 1039.489181][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1039.547994][T17154] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1042.727584][T17191] program syz.2.3346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.147847][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1044.182292][T16376] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1044.345477][T16376] usb 3-1: Using ep0 maxpacket: 16 [ 1044.350453][T16376] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 1044.400095][T16376] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1044.400130][T16376] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 1044.400153][T16376] usb 3-1: Product: syz [ 1044.400169][T16376] usb 3-1: Manufacturer: syz [ 1044.498449][T16376] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1044.498469][T16376] r8152-cfgselector 3-1: config 0 descriptor?? [ 1045.125055][T17205] CIFS mount error: No usable UNC path provided in device string! [ 1045.125055][T17205] [ 1045.125078][T17205] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1046.623962][T16448] r8152-cfgselector 3-1: USB disconnect, device number 95 [ 1048.121513][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 1048.636321][ T2000] hsr_slave_0: left promiscuous mode [ 1048.646146][T17245] CIFS mount error: No usable UNC path provided in device string! [ 1048.646146][T17245] [ 1048.646171][T17245] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1048.768220][ T2000] hsr_slave_1: left promiscuous mode [ 1048.773863][ T2000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.812084][ T2000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.077932][ T2000] hsr_slave_0: left promiscuous mode [ 1049.100257][ T2000] hsr_slave_1: left promiscuous mode [ 1049.101465][ T2000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.190362][ T2000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.705919][T17258] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3363'. [ 1050.060097][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 1050.060135][ T37] audit: type=1326 audit(1783786265.205:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.060193][ T37] audit: type=1326 audit(1783786265.205:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.063425][ T37] audit: type=1326 audit(1783786265.225:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.063952][ T37] audit: type=1326 audit(1783786265.225:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.064003][ T37] audit: type=1326 audit(1783786265.225:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.064990][ T37] audit: type=1326 audit(1783786265.225:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.065295][ T37] audit: type=1326 audit(1783786265.225:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.067561][ T37] audit: type=1326 audit(1783786265.225:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.068164][ T37] audit: type=1326 audit(1783786265.225:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.068215][ T37] audit: type=1326 audit(1783786265.225:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17259 comm="syz.6.3362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1050.172489][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 1051.271071][ T2000] team0 (unregistering): Port device team_slave_1 removed [ 1051.360954][ T2000] team0 (unregistering): Port device team_slave_0 removed [ 1051.823793][T17278] CIFS mount error: No usable UNC path provided in device string! [ 1051.823793][T17278] [ 1051.823827][T17278] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1052.981860][ T5620] Bluetooth: hci6: command 0x0406 tx timeout [ 1053.570964][ T2000] team0 (unregistering): Port device team_slave_1 removed [ 1053.631004][ T2000] team0 (unregistering): Port device team_slave_0 removed [ 1053.921858][T17270] bridge0: port 3(erspan0) entered blocking state [ 1053.921998][T17270] bridge0: port 3(erspan0) entered disabled state [ 1053.923071][T17270] erspan0: entered allmulticast mode [ 1053.927253][T17270] erspan0: entered promiscuous mode [ 1053.933153][T17270] bridge0: port 3(erspan0) entered blocking state [ 1053.933337][T17270] bridge0: port 3(erspan0) entered forwarding state [ 1054.013053][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1054.761784][T17076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.762128][T17076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.762354][T17076] bridge_slave_0: entered allmulticast mode [ 1054.768342][T17076] bridge_slave_0: entered promiscuous mode [ 1054.827071][T17076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.827243][T17076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.827518][T17076] bridge_slave_1: entered allmulticast mode [ 1054.846475][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.846555][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.901954][T17076] bridge_slave_1: entered promiscuous mode [ 1054.962495][T17301] program syz.2.3372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1055.050082][ T4910] Bluetooth: hci6: command 0x0406 tx timeout [ 1055.256019][T17076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.275279][T17076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.633217][T17076] team0: Port device team_slave_0 added [ 1055.657041][T17076] team0: Port device team_slave_1 added [ 1055.817458][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3374'. [ 1055.835413][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3374'. [ 1056.021999][T17076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.022019][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.022045][T17076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.705415][T17076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.705429][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.705446][T17076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.392229][T15807] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1060.540036][T15807] usb 8-1: Using ep0 maxpacket: 8 [ 1060.542821][T15807] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.546010][T15807] usb 8-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 1060.546043][T15807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.546064][T15807] usb 8-1: Product: syz [ 1060.546177][T15807] usb 8-1: Manufacturer: syz [ 1060.546194][T15807] usb 8-1: SerialNumber: syz [ 1060.576611][T15807] usb 8-1: config 0 descriptor?? [ 1060.658962][T15807] gspca_main: t613-2.14.0 probing 17a1:0128 [ 1061.161173][T15807] gspca_t613: unknown sensor 0000 [ 1061.161299][T15807] t613 8-1:0.0: probe with driver t613 failed with error -22 [ 1061.552782][T17076] hsr_slave_0: entered promiscuous mode [ 1061.554376][T17076] hsr_slave_1: entered promiscuous mode [ 1061.558873][T17076] debugfs: 'hsr0' already exists in 'hsr' [ 1061.558904][T17076] Cannot create hsr debugfs directory [ 1062.014230][T16448] usb 8-1: USB disconnect, device number 12 [ 1062.211070][T17361] binder: 17356:17361 ioctl 400c620e 200000002580 returned -22 [ 1062.516606][T17357] nvme_fabrics: missing parameter 'transport=%s' [ 1062.516627][T17357] nvme_fabrics: missing parameter 'nqn=%s' [ 1073.199955][T17498] FAULT_INJECTION: forcing a failure. [ 1073.199955][T17498] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.200023][T17498] CPU: 0 UID: 0 PID: 17498 Comm: syz.7.3406 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1073.200055][T17498] Tainted: [L]=SOFTLOCKUP [ 1073.200063][T17498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1073.200077][T17498] Call Trace: [ 1073.200086][T17498] [ 1073.200097][T17498] dump_stack_lvl+0xe8/0x150 [ 1073.200141][T17498] should_fail_ex+0x467/0x600 [ 1073.200181][T17498] should_failslab+0xa8/0x100 [ 1073.200209][T17498] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1073.200246][T17498] ? __alloc_skb+0x1d7/0x7a0 [ 1073.200360][T17498] ? __alloc_skb+0x1d7/0x7a0 [ 1073.200394][T17498] __alloc_skb+0x1d7/0x7a0 [ 1073.200429][T17498] netlink_sendmsg+0x5d4/0xb40 [ 1073.200465][T17498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.200490][T17498] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1073.200529][T17498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.200550][T17498] sock_sendmsg_nosec+0x13a/0x180 [ 1073.200584][T17498] ____sys_sendmsg+0x565/0x870 [ 1073.200606][T17498] ? __might_fault+0xaf/0x130 [ 1073.200636][T17498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1073.200669][T17498] ? import_iovec+0x73/0xa0 [ 1073.200698][T17498] ___sys_sendmsg+0x2a5/0x360 [ 1073.200719][T17498] ? __lock_acquire+0x683/0x2ce0 [ 1073.200749][T17498] ? __pfx____sys_sendmsg+0x10/0x10 [ 1073.200776][T17498] ? lockdep_hardirqs_on+0x7a/0x110 [ 1073.200838][T17498] ? __fget_files+0x2a/0x420 [ 1073.200859][T17498] ? __fget_files+0x3a8/0x420 [ 1073.200892][T17498] __x64_sys_sendmsg+0x1b7/0x290 [ 1073.200918][T17498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1073.200961][T17498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.200986][T17498] do_syscall_64+0x174/0x580 [ 1073.201019][T17498] ? clear_bhb_loop+0x40/0x90 [ 1073.201046][T17498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.201068][T17498] RIP: 0033:0x7ff46bc2de59 [ 1073.201091][T17498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.201111][T17498] RSP: 002b:00007ff469e44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1073.201136][T17498] RAX: ffffffffffffffda RBX: 00007ff46beb6180 RCX: 00007ff46bc2de59 [ 1073.201154][T17498] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1073.201169][T17498] RBP: 00007ff469e44090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.201184][T17498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.201198][T17498] R13: 00007ff46beb6218 R14: 00007ff46beb6180 R15: 00007fffe9dd20a8 [ 1073.201234][T17498] [ 1073.761759][ T2000] bridge_slave_1: left allmulticast mode [ 1073.761800][ T2000] bridge_slave_1: left promiscuous mode [ 1073.762080][ T2000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.048228][ T2000] bridge_slave_0: left allmulticast mode [ 1074.048269][ T2000] bridge_slave_0: left promiscuous mode [ 1074.048590][ T2000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.711147][T17506] FAULT_INJECTION: forcing a failure. [ 1074.711147][T17506] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.711190][T17506] CPU: 1 UID: 0 PID: 17506 Comm: syz.6.3409 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1074.711232][T17506] Tainted: [L]=SOFTLOCKUP [ 1074.711240][T17506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1074.711253][T17506] Call Trace: [ 1074.711262][T17506] [ 1074.711272][T17506] dump_stack_lvl+0xe8/0x150 [ 1074.711311][T17506] should_fail_ex+0x467/0x600 [ 1074.711349][T17506] should_failslab+0xa8/0x100 [ 1074.711377][T17506] __kmalloc_noprof+0xfe/0x780 [ 1074.711402][T17506] ? tomoyo_encode+0x2ad/0x570 [ 1074.711427][T17506] ? tomoyo_encode+0x2ad/0x570 [ 1074.711460][T17506] tomoyo_encode+0x2ad/0x570 [ 1074.711492][T17506] tomoyo_realpath_from_path+0x5fa/0x640 [ 1074.711546][T17506] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1074.711582][T17506] tomoyo_path_number_perm+0x246/0x5f0 [ 1074.711619][T17506] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1074.711652][T17506] ? __lock_acquire+0x683/0x2ce0 [ 1074.711692][T17506] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1074.711722][T17506] ? hook_file_ioctl+0x1f3/0x600 [ 1074.711751][T17506] ? lockdep_hardirqs_on+0x7a/0x110 [ 1074.711803][T17506] ? __fget_files+0x2a/0x420 [ 1074.711830][T17506] ? __fget_files+0x2a/0x420 [ 1074.711849][T17506] ? __fget_files+0x3a8/0x420 [ 1074.711870][T17506] ? __fget_files+0x2a/0x420 [ 1074.711896][T17506] security_file_ioctl+0xc3/0x2a0 [ 1074.711921][T17506] __se_sys_ioctl+0x47/0x170 [ 1074.711950][T17506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.711974][T17506] do_syscall_64+0x174/0x580 [ 1074.712004][T17506] ? trace_irq_disable+0x3b/0x140 [ 1074.712039][T17506] ? clear_bhb_loop+0x40/0x90 [ 1074.712066][T17506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.712087][T17506] RIP: 0033:0x7fa096d4de59 [ 1074.712108][T17506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.712127][T17506] RSP: 002b:00007fa094fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1074.712151][T17506] RAX: ffffffffffffffda RBX: 00007fa096fd5fa0 RCX: 00007fa096d4de59 [ 1074.712167][T17506] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 000000000000000a [ 1074.712181][T17506] RBP: 00007fa094fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.712195][T17506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.712218][T17506] R13: 00007fa096fd6038 R14: 00007fa096fd5fa0 R15: 00007ffeb4b37668 [ 1074.712255][T17506] [ 1074.712276][T17506] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1077.722474][ T2000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.844479][ T2000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.957982][ T2000] bond0 (unregistering): Released all slaves [ 1078.787089][T17559] FAULT_INJECTION: forcing a failure. [ 1078.787089][T17559] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.787166][T17559] CPU: 1 UID: 0 PID: 17559 Comm: syz.2.3423 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1078.787198][T17559] Tainted: [L]=SOFTLOCKUP [ 1078.787205][T17559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1078.787219][T17559] Call Trace: [ 1078.787227][T17559] [ 1078.787237][T17559] dump_stack_lvl+0xe8/0x150 [ 1078.787276][T17559] should_fail_ex+0x467/0x600 [ 1078.787306][T17559] should_failslab+0xa8/0x100 [ 1078.787328][T17559] __kmalloc_noprof+0xfe/0x780 [ 1078.787346][T17559] ? iovec_from_user+0x87/0x250 [ 1078.787362][T17559] ? iovec_from_user+0x87/0x250 [ 1078.787384][T17559] iovec_from_user+0x87/0x250 [ 1078.787404][T17559] __import_iovec+0x15e/0x7e0 [ 1078.787430][T17559] import_iovec+0x73/0xa0 [ 1078.787450][T17559] ___sys_sendmsg+0x255/0x360 [ 1078.787474][T17559] ? __pfx____sys_sendmsg+0x10/0x10 [ 1078.787496][T17559] ? kvm_sched_clock_read+0x11/0x20 [ 1078.787529][T17559] ? lockdep_hardirqs_on+0x7a/0x110 [ 1078.787565][T17559] ? __sys_sendmmsg+0x1ff/0x4d0 [ 1078.787586][T17559] __sys_sendmmsg+0x279/0x4d0 [ 1078.787608][T17559] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1078.787632][T17559] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1078.787663][T17559] ? ksys_write+0x248/0x270 [ 1078.787684][T17559] ? rcu_is_watching+0x15/0xb0 [ 1078.787711][T17559] __x64_sys_sendmmsg+0xa0/0xc0 [ 1078.787728][T17559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.787745][T17559] do_syscall_64+0x174/0x580 [ 1078.787769][T17559] ? clear_bhb_loop+0x40/0x90 [ 1078.787789][T17559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.787805][T17559] RIP: 0033:0x7fddd505de59 [ 1078.787829][T17559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.787844][T17559] RSP: 002b:00007fddd3274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1078.787863][T17559] RAX: ffffffffffffffda RBX: 00007fddd52e6180 RCX: 00007fddd505de59 [ 1078.787876][T17559] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 1078.787888][T17559] RBP: 00007fddd3274090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.787898][T17559] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.787909][T17559] R13: 00007fddd52e6218 R14: 00007fddd52e6180 R15: 00007fffafc01b28 [ 1078.787935][T17559] [ 1080.522469][T17550] FAULT_INJECTION: forcing a failure. [ 1080.522469][T17550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.522528][T17550] CPU: 0 UID: 0 PID: 17550 Comm: syz.7.3422 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1080.522558][T17550] Tainted: [L]=SOFTLOCKUP [ 1080.522566][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1080.522580][T17550] Call Trace: [ 1080.522588][T17550] [ 1080.522599][T17550] dump_stack_lvl+0xe8/0x150 [ 1080.522639][T17550] should_fail_ex+0x467/0x600 [ 1080.522676][T17550] _copy_from_user+0x2d/0xb0 [ 1080.522700][T17550] __copy_msghdr+0x390/0x590 [ 1080.522730][T17550] ___sys_sendmsg+0x213/0x360 [ 1080.522750][T17550] ? __lock_acquire+0x683/0x2ce0 [ 1080.522777][T17550] ? __pfx____sys_sendmsg+0x10/0x10 [ 1080.522805][T17550] ? kstrtouint+0x6e/0xe0 [ 1080.522858][T17550] ? __fget_files+0x2a/0x420 [ 1080.522887][T17550] ? __fget_files+0x3a8/0x420 [ 1080.522917][T17550] __sys_sendmmsg+0x279/0x4d0 [ 1080.522946][T17550] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1080.522979][T17550] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1080.523020][T17550] ? ksys_write+0x248/0x270 [ 1080.523049][T17550] ? __pfx_ksys_write+0x10/0x10 [ 1080.523081][T17550] __x64_sys_sendmmsg+0xa0/0xc0 [ 1080.523108][T17550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.523131][T17550] do_syscall_64+0x174/0x580 [ 1080.523161][T17550] ? trace_irq_disable+0x3b/0x140 [ 1080.523193][T17550] ? clear_bhb_loop+0x40/0x90 [ 1080.523221][T17550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.523242][T17550] RIP: 0033:0x7ff46bc2de59 [ 1080.523264][T17550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.523283][T17550] RSP: 002b:00007ff469e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1080.523306][T17550] RAX: ffffffffffffffda RBX: 00007ff46beb5fa0 RCX: 00007ff46bc2de59 [ 1080.523321][T17550] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 0000000000000006 [ 1080.523337][T17550] RBP: 00007ff469e86090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.523350][T17550] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 1080.523365][T17550] R13: 00007ff46beb6038 R14: 00007ff46beb5fa0 R15: 00007fffe9dd20a8 [ 1080.523397][T17550] [ 1081.898381][ T2000] hsr_slave_0: left promiscuous mode [ 1083.080179][ T2000] hsr_slave_1: left promiscuous mode [ 1083.082431][ T2000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.142423][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3430'. [ 1083.184215][ T2000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.741426][T17601] dlm: no locking on control device [ 1084.043673][ T2000] team0 (unregistering): Port device team_slave_1 removed [ 1084.109147][ T2000] team0 (unregistering): Port device team_slave_0 removed [ 1084.400884][T17588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.504429][T17588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.930985][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1086.600114][ T946] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1086.760001][ T946] usb 7-1: Using ep0 maxpacket: 32 [ 1086.763722][ T946] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.763753][ T946] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1086.766809][ T946] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1086.766841][ T946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.766862][ T946] usb 7-1: Product: syz [ 1086.766878][ T946] usb 7-1: Manufacturer: syz [ 1086.766895][ T946] usb 7-1: SerialNumber: syz [ 1086.807789][ T946] usb 7-1: config 0 descriptor?? [ 1086.819978][ T10] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1087.002621][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1087.003267][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 1087.004776][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 104, changing to 4 [ 1087.007378][ T10] usb 8-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 1087.007410][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.007431][ T10] usb 8-1: Product: syz [ 1087.007445][ T10] usb 8-1: Manufacturer: syz [ 1087.007461][ T10] usb 8-1: SerialNumber: syz [ 1088.838112][T17645] comedi comedi2: dac02: I/O base address or length out of range [ 1089.532677][ T10] usb 8-1: 1:1 : invalid channels 0 [ 1089.562910][ T10] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1090.121044][T15238] usb 7-1: USB disconnect, device number 13 [ 1090.178637][T17660] FAULT_INJECTION: forcing a failure. [ 1090.178637][T17660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.178677][T17660] CPU: 0 UID: 0 PID: 17660 Comm: syz.2.3446 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1090.178709][T17660] Tainted: [L]=SOFTLOCKUP [ 1090.178717][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1090.178730][T17660] Call Trace: [ 1090.178739][T17660] [ 1090.178749][T17660] dump_stack_lvl+0xe8/0x150 [ 1090.178788][T17660] should_fail_ex+0x467/0x600 [ 1090.178826][T17660] _copy_to_user+0x31/0xb0 [ 1090.178852][T17660] simple_read_from_buffer+0xe1/0x170 [ 1090.178891][T17660] proc_fail_nth_read+0x1be/0x230 [ 1090.178919][T17660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1090.178945][T17660] ? rw_verify_area+0x250/0x4d0 [ 1090.178972][T17660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1090.178994][T17660] vfs_read+0x219/0xa90 [ 1090.179030][T17660] ? __pfx_vfs_read+0x10/0x10 [ 1090.179058][T17660] ? kmem_cache_free+0x187/0x6c0 [ 1090.179081][T17660] ? do_sys_openat2+0x14e/0x200 [ 1090.179117][T17660] ksys_read+0x156/0x270 [ 1090.179146][T17660] ? __pfx_ksys_read+0x10/0x10 [ 1090.179188][T17660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.179213][T17660] do_syscall_64+0x174/0x580 [ 1090.179243][T17660] ? trace_irq_disable+0x3b/0x140 [ 1090.179277][T17660] ? clear_bhb_loop+0x40/0x90 [ 1090.179304][T17660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.179326][T17660] RIP: 0033:0x7fddd501e68e [ 1090.179348][T17660] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1090.179367][T17660] RSP: 002b:00007fddd32b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1090.179393][T17660] RAX: ffffffffffffffda RBX: 00007fddd32b66c0 RCX: 00007fddd501e68e [ 1090.179410][T17660] RDX: 000000000000000f RSI: 00007fddd32b60a0 RDI: 0000000000000004 [ 1090.179423][T17660] RBP: 00007fddd32b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.179436][T17660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.179448][T17660] R13: 00007fddd52e6038 R14: 00007fddd52e5fa0 R15: 00007fffafc01b28 [ 1090.179479][T17660] [ 1090.853470][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1091.040543][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1091.088818][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1091.097547][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1091.098474][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1091.385267][ T10] usb 8-1: USB disconnect, device number 13 [ 1091.794002][T17674] CIFS mount error: No usable UNC path provided in device string! [ 1091.794002][T17674] [ 1091.794027][T17674] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1092.054351][T17543] udevd[17543]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.380394][ T4910] Bluetooth: hci0: command tx timeout [ 1093.886476][T17716] random: crng reseeded on system resumption [ 1093.949655][T17718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.949676][T17718] IPv6: NLM_F_CREATE should be set when creating new route [ 1095.488737][ T4910] Bluetooth: hci0: command tx timeout [ 1096.301598][T17741] FAULT_INJECTION: forcing a failure. [ 1096.301598][T17741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.301637][T17741] CPU: 1 UID: 0 PID: 17741 Comm: syz.7.3466 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1096.301667][T17741] Tainted: [L]=SOFTLOCKUP [ 1096.301675][T17741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1096.301688][T17741] Call Trace: [ 1096.301696][T17741] [ 1096.301707][T17741] dump_stack_lvl+0xe8/0x150 [ 1096.301746][T17741] should_fail_ex+0x467/0x600 [ 1096.301780][T17741] _copy_from_user+0x2d/0xb0 [ 1096.301805][T17741] sk_getsockopt+0x1d4/0x2760 [ 1096.301847][T17741] ? __pfx_sk_getsockopt+0x10/0x10 [ 1096.301889][T17741] ? __lock_acquire+0x683/0x2ce0 [ 1096.301918][T17741] ? __might_fault+0xaf/0x130 [ 1096.301941][T17741] ? __might_fault+0xaf/0x130 [ 1096.301982][T17741] do_sock_getsockopt+0x2bd/0x7e0 [ 1096.302022][T17741] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1096.302075][T17741] ? __fget_files+0x3a8/0x420 [ 1096.302097][T17741] ? __fget_files+0x2a/0x420 [ 1096.302125][T17741] __x64_sys_getsockopt+0x1aa/0x250 [ 1096.302154][T17741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.302188][T17741] do_syscall_64+0x174/0x580 [ 1096.302219][T17741] ? trace_irq_disable+0x3b/0x140 [ 1096.302251][T17741] ? clear_bhb_loop+0x40/0x90 [ 1096.302276][T17741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.302297][T17741] RIP: 0033:0x7ff46bc2de59 [ 1096.302319][T17741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.302336][T17741] RSP: 002b:00007ff469e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1096.302361][T17741] RAX: ffffffffffffffda RBX: 00007ff46beb5fa0 RCX: 00007ff46bc2de59 [ 1096.302377][T17741] RDX: 000000000000000a RSI: 0000000000000001 RDI: 0000000000000003 [ 1096.302390][T17741] RBP: 00007ff469e86090 R08: 0000200000000b80 R09: 0000000000000000 [ 1096.302404][T17741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.302418][T17741] R13: 00007ff46beb6038 R14: 00007ff46beb5fa0 R15: 00007fffe9dd20a8 [ 1096.302451][T17741] [ 1096.483241][T17744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3464'. [ 1097.530472][ T4910] Bluetooth: hci0: command tx timeout [ 1097.634366][T17758] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1097.635589][T17758] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1098.101842][T17763] netlink: 'syz.1.3473': attribute type 10 has an invalid length. [ 1098.904849][T17763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.999596][T17763] team0: Port device bond0 added [ 1099.312186][T17764] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1099.312230][T17764] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1099.312275][T17764] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1099.610219][ T4910] Bluetooth: hci0: command tx timeout [ 1099.967587][T17764] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1104.731265][T17822] overlayfs: failed to resolve './file0': -2 [ 1105.117895][T17829] random: crng reseeded on system resumption [ 1110.678527][T17649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.678653][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.678890][T17649] bridge_slave_0: entered allmulticast mode [ 1110.722961][T17649] bridge_slave_0: entered promiscuous mode [ 1110.873717][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1111.030981][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1111.040592][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1111.040624][ T10] usb 3-1: config 0 has no interface number 0 [ 1111.040701][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1111.040727][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1111.040753][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1111.040783][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1111.040829][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1111.040855][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.285017][ T10] usb 3-1: config 0 descriptor?? [ 1111.411178][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1111.895248][ T10] usb 3-1: USB disconnect, device number 96 [ 1112.042200][T17649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.042338][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.042557][T17649] bridge_slave_1: entered allmulticast mode [ 1112.047560][T17649] bridge_slave_1: entered promiscuous mode [ 1112.461896][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1112.689530][T17649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.830320][T16288] bridge_slave_1: left allmulticast mode [ 1112.830360][T16288] bridge_slave_1: left promiscuous mode [ 1112.830659][T16288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.889423][T17897] fuse: Bad value for 'fd' [ 1113.005796][T16288] bridge_slave_0: left allmulticast mode [ 1113.005838][T16288] bridge_slave_0: left promiscuous mode [ 1113.007264][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.148061][T17901] random: crng reseeded on system resumption [ 1113.445853][T17905] 9p: Could not find request transport: fd0x0000000000000003 [ 1115.138719][T17915] FAULT_INJECTION: forcing a failure. [ 1115.138719][T17915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.138758][T17915] CPU: 0 UID: 0 PID: 17915 Comm: syz.2.3506 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1115.138789][T17915] Tainted: [L]=SOFTLOCKUP [ 1115.138797][T17915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1115.138810][T17915] Call Trace: [ 1115.138822][T17915] [ 1115.138834][T17915] dump_stack_lvl+0xe8/0x150 [ 1115.138874][T17915] should_fail_ex+0x467/0x600 [ 1115.138929][T17915] _copy_to_user+0x31/0xb0 [ 1115.138956][T17915] syslog_print_all+0x26b/0x450 [ 1115.139055][T17915] ? __pfx_syslog_print_all+0x10/0x10 [ 1115.139079][T17915] ? smack_privileged_cred+0xb6/0x380 [ 1115.139117][T17915] ? smack_privileged_cred+0xb6/0x380 [ 1115.139146][T17915] ? smack_privileged_cred+0xb6/0x380 [ 1115.139173][T17915] ? smack_privileged_cred+0xb6/0x380 [ 1115.139204][T17915] ? smack_privileged_cred+0x33c/0x380 [ 1115.139237][T17915] ? smack_syslog+0x95/0xf0 [ 1115.139295][T17915] do_syslog+0x3b4/0x7d0 [ 1115.139323][T17915] ? __pfx_do_syslog+0x10/0x10 [ 1115.139358][T17915] ? fput+0xa0/0xd0 [ 1115.139392][T17915] ? ksys_write+0x248/0x270 [ 1115.139420][T17915] ? __pfx_ksys_write+0x10/0x10 [ 1115.139452][T17915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.139476][T17915] __x64_sys_syslog+0x7c/0x90 [ 1115.139504][T17915] do_syscall_64+0x174/0x580 [ 1115.139536][T17915] ? trace_irq_disable+0x3b/0x140 [ 1115.139577][T17915] ? clear_bhb_loop+0x40/0x90 [ 1115.139604][T17915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.139626][T17915] RIP: 0033:0x7fddd505de59 [ 1115.139648][T17915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.139666][T17915] RSP: 002b:00007fddd32b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1115.139690][T17915] RAX: ffffffffffffffda RBX: 00007fddd52e5fa0 RCX: 00007fddd505de59 [ 1115.139706][T17915] RDX: 000000000000005a RSI: 0000200000000200 RDI: 0000000000000003 [ 1115.139721][T17915] RBP: 00007fddd32b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.139736][T17915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.139750][T17915] R13: 00007fddd52e6038 R14: 00007fddd52e5fa0 R15: 00007fffafc01b28 [ 1115.139785][T17915] [ 1115.625886][T16288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.021633][T16288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.564263][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.586173][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.995919][T16288] bond0 (unregistering): Released all slaves [ 1117.172242][T17649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.328084][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1117.328106][ T37] audit: type=1326 audit(1783786332.475:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.328160][ T37] audit: type=1326 audit(1783786332.475:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.328211][ T37] audit: type=1326 audit(1783786332.475:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.328262][ T37] audit: type=1326 audit(1783786332.475:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.328329][ T37] audit: type=1326 audit(1783786332.475:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.328378][ T37] audit: type=1326 audit(1783786332.475:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.328427][ T37] audit: type=1326 audit(1783786332.475:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.328476][ T37] audit: type=1326 audit(1783786332.475:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.328525][ T37] audit: type=1326 audit(1783786332.475:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.328581][ T37] audit: type=1326 audit(1783786332.475:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17936 comm="syz.1.3511" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1117.444631][T17940] random: crng reseeded on system resumption [ 1117.901784][T17649] team0: Port device team_slave_0 added [ 1117.906402][T17649] team0: Port device team_slave_1 added [ 1117.966001][T17649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.966034][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.966064][T17649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.001846][T17649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.001868][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.001898][T17649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.142283][T17649] hsr_slave_0: entered promiscuous mode [ 1121.145548][T17649] hsr_slave_1: entered promiscuous mode [ 1121.146882][T17649] debugfs: 'hsr0' already exists in 'hsr' [ 1121.146911][T17649] Cannot create hsr debugfs directory [ 1121.548317][T16288] hsr_slave_0: left promiscuous mode [ 1121.594150][T16288] hsr_slave_1: left promiscuous mode [ 1121.603540][T16288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.662889][T16288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.524104][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 1122.524126][ T37] audit: type=1326 audit(1783786337.685:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1122.524178][ T37] audit: type=1326 audit(1783786337.685:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1122.525286][ T37] audit: type=1326 audit(1783786337.685:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1122.525336][ T37] audit: type=1326 audit(1783786337.685:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1122.525381][ T37] audit: type=1326 audit(1783786337.685:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1122.531913][ T37] audit: type=1326 audit(1783786337.695:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1122.531975][ T37] audit: type=1326 audit(1783786337.695:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1122.532023][ T37] audit: type=1326 audit(1783786337.695:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1122.533094][ T37] audit: type=1326 audit(1783786337.695:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1122.533163][ T37] audit: type=1326 audit(1783786337.695:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17987 comm="syz.1.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1127.357517][T16288] team0 (unregistering): Port device team_slave_1 removed [ 1127.491032][T16288] team0 (unregistering): Port device team_slave_0 removed [ 1129.159354][T18027] FAULT_INJECTION: forcing a failure. [ 1129.159354][T18027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.159393][T18027] CPU: 1 UID: 0 PID: 18027 Comm: syz.2.3531 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1129.159424][T18027] Tainted: [L]=SOFTLOCKUP [ 1129.159432][T18027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1129.159445][T18027] Call Trace: [ 1129.159456][T18027] [ 1129.159465][T18027] dump_stack_lvl+0xe8/0x150 [ 1129.159517][T18027] should_fail_ex+0x467/0x600 [ 1129.159556][T18027] _copy_from_user+0x2d/0xb0 [ 1129.159583][T18027] kstrtouint_from_user+0xd6/0x180 [ 1129.159616][T18027] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1129.159643][T18027] ? __lock_acquire+0x683/0x2ce0 [ 1129.159687][T18027] proc_fail_nth_write+0x8e/0x210 [ 1129.159713][T18027] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1129.159745][T18027] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1129.159767][T18027] vfs_write+0x29f/0xbb0 [ 1129.159809][T18027] ? __pfx_vfs_write+0x10/0x10 [ 1129.159836][T18027] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1129.159870][T18027] ? lockdep_hardirqs_on+0x7a/0x110 [ 1129.159899][T18027] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1129.159928][T18027] ? mutex_lock_nested+0x152/0x1d0 [ 1129.159950][T18027] ? fdget_pos+0x252/0x320 [ 1129.159982][T18027] ksys_write+0x156/0x270 [ 1129.160011][T18027] ? __pfx_ksys_write+0x10/0x10 [ 1129.160047][T18027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.160070][T18027] do_syscall_64+0x174/0x580 [ 1129.160098][T18027] ? trace_irq_disable+0x3b/0x140 [ 1129.160131][T18027] ? clear_bhb_loop+0x40/0x90 [ 1129.160159][T18027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.160180][T18027] RIP: 0033:0x7fddd501e68e [ 1129.160201][T18027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1129.160220][T18027] RSP: 002b:00007fddd3294fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1129.160244][T18027] RAX: ffffffffffffffda RBX: 00007fddd32956c0 RCX: 00007fddd501e68e [ 1129.160262][T18027] RDX: 0000000000000001 RSI: 00007fddd32950a0 RDI: 0000000000000004 [ 1129.160276][T18027] RBP: 00007fddd3295090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.160290][T18027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.160304][T18027] R13: 00007fddd52e6128 R14: 00007fddd52e6090 R15: 00007fffafc01b28 [ 1129.160341][T18027] [ 1130.579684][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 1130.579707][ T37] audit: type=1326 audit(1783786345.735:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1130.579761][ T37] audit: type=1326 audit(1783786345.735:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1130.585170][ T37] audit: type=1326 audit(1783786345.745:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1130.585221][ T37] audit: type=1326 audit(1783786345.745:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1130.585263][ T37] audit: type=1326 audit(1783786345.745:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1130.588720][ T37] audit: type=1326 audit(1783786345.745:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1130.588771][ T37] audit: type=1326 audit(1783786345.745:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1130.588812][ T37] audit: type=1326 audit(1783786345.745:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1130.589692][ T37] audit: type=1326 audit(1783786345.745:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1130.589737][ T37] audit: type=1326 audit(1783786345.745:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18031 comm="syz.2.3534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1132.470009][ T5739] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1132.600341][ T5739] usb 7-1: device descriptor read/64, error -71 [ 1132.754816][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1132.778168][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1132.788648][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1132.806205][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1132.838318][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1132.840035][ T5739] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1132.983053][ T5739] usb 7-1: device descriptor read/64, error -71 [ 1133.090405][ T5739] usb usb7-port1: attempt power cycle [ 1133.501554][ T5739] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1133.527293][ T5739] usb 7-1: device descriptor read/8, error -71 [ 1133.742534][T18061] 9pnet_fd: Insufficient options for proto=fd [ 1133.849328][ T5739] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1134.003186][ T5739] usb 7-1: device descriptor read/8, error -71 [ 1134.112269][ T5739] usb usb7-port1: unable to enumerate USB device [ 1135.051468][ T5620] Bluetooth: hci3: command tx timeout [ 1136.194551][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 1136.194573][ T37] audit: type=1326 audit(1783786351.355:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1136.195354][ T37] audit: type=1326 audit(1783786351.355:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1136.197933][ T37] audit: type=1326 audit(1783786351.355:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1136.198248][ T37] audit: type=1326 audit(1783786351.355:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1136.212845][ T37] audit: type=1326 audit(1783786351.355:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1136.213187][ T37] audit: type=1326 audit(1783786351.375:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1136.217471][ T37] audit: type=1326 audit(1783786351.375:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1136.220662][ T37] audit: type=1326 audit(1783786351.375:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1136.220956][ T37] audit: type=1326 audit(1783786351.385:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1136.221247][ T37] audit: type=1326 audit(1783786351.385:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18084 comm="syz.6.3545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa096d4de59 code=0x7ffc0000 [ 1137.160928][T18098] 9pnet_fd: Insufficient options for proto=fd [ 1137.292168][ T5620] Bluetooth: hci3: command tx timeout [ 1139.370092][ T5620] Bluetooth: hci3: command tx timeout [ 1139.679775][T18106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.687700][T18106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.698530][T18106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.698707][T18106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.000190][T15238] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1141.091279][T18133] 9pnet_fd: Insufficient options for proto=fd [ 1141.157112][T15238] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1141.158985][T15238] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.159015][T15238] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1141.191514][T15238] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1141.191550][T15238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.191573][T15238] usb 7-1: Product: syz [ 1141.191597][T15238] usb 7-1: Manufacturer: syz [ 1141.191613][T15238] usb 7-1: SerialNumber: syz [ 1141.452796][ T5620] Bluetooth: hci3: command tx timeout [ 1141.767426][T18130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.768258][T18130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.866519][T18137] netlink: 'syz.6.3559': attribute type 1 has an invalid length. [ 1141.866544][T18137] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3559'. [ 1142.619311][T16288] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.662197][T16376] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1143.745225][T15807] usb 7-1: USB disconnect, device number 18 [ 1143.903062][T16376] usb 3-1: Using ep0 maxpacket: 32 [ 1143.934084][T16376] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1143.934118][T16376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.934138][T16376] usb 3-1: Product: syz [ 1143.934154][T16376] usb 3-1: Manufacturer: syz [ 1143.934169][T16376] usb 3-1: SerialNumber: syz [ 1143.942239][T16376] usb 3-1: config 0 descriptor?? [ 1144.008359][T16376] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1144.724922][T16288] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.588467][T16376] gspca_ov534_9: reg_r err -71 [ 1147.020029][T16376] gspca_ov534_9: Unknown sensor 0000 [ 1147.020144][T16376] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1147.030808][T16376] usb 3-1: USB disconnect, device number 97 [ 1147.506879][T18202] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1149.157293][T16288] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.099538][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1150.977481][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1151.021757][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1151.029727][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1151.034579][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1151.151625][T16288] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.499971][ T4923] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1152.660011][ T4923] usb 7-1: Using ep0 maxpacket: 8 [ 1152.662517][ T4923] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1152.667878][ T4923] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1152.667899][ T4923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.667911][ T4923] usb 7-1: Product: syz [ 1152.667920][ T4923] usb 7-1: Manufacturer: syz [ 1152.667928][ T4923] usb 7-1: SerialNumber: syz [ 1152.718313][ T4923] usb 7-1: config 0 descriptor?? [ 1152.742212][ T4923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1152.742297][ T4923] usb 7-1: setting power ON [ 1152.742987][ T4923] dvb-usb: bulk message failed: -22 (2/0) [ 1152.757296][T18048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.757421][T18048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.757671][T18048] bridge_slave_0: entered allmulticast mode [ 1152.760486][T18048] bridge_slave_0: entered promiscuous mode [ 1152.763446][T18048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.763575][T18048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.763747][T18048] bridge_slave_1: entered allmulticast mode [ 1152.766914][T18048] bridge_slave_1: entered promiscuous mode [ 1152.869445][ T4923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1152.880734][ T4923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1152.880802][ T4923] usb 7-1: media controller created [ 1152.949445][ T4923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1153.080670][ T4923] usb 7-1: selecting invalid altsetting 6 [ 1153.080697][ T4923] usb 7-1: digital interface selection failed (-22) [ 1153.080714][ T4923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1153.082020][ T4923] usb 7-1: setting power OFF [ 1153.082339][ T4923] dvb-usb: bulk message failed: -22 (2/0) [ 1153.082360][ T4923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1153.082375][ T4923] (NULL device *): no alternate interface [ 1153.140043][ T5620] Bluetooth: hci5: command tx timeout [ 1153.266132][T18250] random: crng reseeded on system resumption [ 1153.705829][T18259] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1154.436604][T18048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.518811][T18048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.676779][T18048] team0: Port device team_slave_0 added [ 1154.688659][T18048] team0: Port device team_slave_1 added [ 1154.761150][T18048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.761171][T18048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.761200][T18048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.765576][T18048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.765594][T18048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.765624][T18048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.255596][ T5620] Bluetooth: hci5: command tx timeout [ 1155.433675][T18048] hsr_slave_0: entered promiscuous mode [ 1155.435798][T18048] hsr_slave_1: entered promiscuous mode [ 1155.436732][T18048] debugfs: 'hsr0' already exists in 'hsr' [ 1155.436758][T18048] Cannot create hsr debugfs directory [ 1155.581677][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'. [ 1156.303786][T18282] RDS: rds_bind could not find a transport for 0:0:400::, load rds_tcp or rds_rdma? [ 1157.463580][ T5620] Bluetooth: hci5: command tx timeout [ 1158.195890][T16288] bridge_slave_1: left allmulticast mode [ 1158.196109][T16288] bridge_slave_1: left promiscuous mode [ 1158.201046][T16288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.461919][T16288] bridge_slave_0: left allmulticast mode [ 1158.461945][T16288] bridge_slave_0: left promiscuous mode [ 1158.462128][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.290634][T16288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.340602][T16288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.364422][T16288] bond0 (unregistering): Released all slaves [ 1159.552968][ T5620] Bluetooth: hci5: command tx timeout [ 1159.807395][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 1159.807417][ T37] audit: type=1326 audit(1783786374.965:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1159.909440][ T37] audit: type=1326 audit(1783786374.965:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1159.909496][ T37] audit: type=1326 audit(1783786374.965:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1159.909536][ T37] audit: type=1326 audit(1783786374.965:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1159.909576][ T37] audit: type=1326 audit(1783786374.975:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1159.909616][ T37] audit: type=1326 audit(1783786374.975:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1159.909658][ T37] audit: type=1326 audit(1783786374.975:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1159.909694][ T37] audit: type=1326 audit(1783786374.975:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1159.909736][ T37] audit: type=1326 audit(1783786374.975:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1159.909776][ T37] audit: type=1326 audit(1783786374.975:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.2.3597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd505de59 code=0x7ffc0000 [ 1161.133378][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3602'. [ 1165.716119][T16288] hsr_slave_0: left promiscuous mode [ 1165.780019][T16288] hsr_slave_1: left promiscuous mode [ 1165.781331][T16288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.781359][T16288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.941289][T18391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3615'. [ 1166.773559][T16288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.773591][T16288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.156056][T16288] veth1_macvtap: left promiscuous mode [ 1167.156173][T16288] veth0_macvtap: left promiscuous mode [ 1167.156552][T16288] veth1_vlan: left promiscuous mode [ 1167.158113][T16288] veth0_vlan: left promiscuous mode [ 1167.298834][ T4910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1167.413362][ T4910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1167.416809][ T4910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1167.477225][ T4910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1167.487286][ T4910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1169.452735][T18423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1169.453476][T18423] netlink: 'syz.1.3626': attribute type 25 has an invalid length. [ 1169.453492][T18423] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1169.551678][ T5620] Bluetooth: hci0: command tx timeout [ 1171.011574][T16288] team0 (unregistering): Port device team_slave_1 removed [ 1171.070652][T16288] team0 (unregistering): Port device team_slave_0 removed [ 1171.510144][T18423] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1171.573308][T18215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.573540][T18215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.573795][T18215] bridge_slave_0: entered allmulticast mode [ 1171.586368][T18215] bridge_slave_0: entered promiscuous mode [ 1171.610160][ T5620] Bluetooth: hci0: command tx timeout [ 1171.631066][T18215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.633073][T18215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.634889][T18215] bridge_slave_1: entered allmulticast mode [ 1171.653219][T18215] bridge_slave_1: entered promiscuous mode [ 1171.670728][T18048] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1171.760460][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1171.909377][T18048] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1171.996266][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1172.064986][T18048] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1172.162386][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1172.235979][T18215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.249413][T18048] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1172.276938][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1172.300627][T18215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.862984][T18462] overlayfs: failed to clone lowerpath [ 1173.662921][T18215] team0: Port device team_slave_0 added [ 1173.774260][T18215] team0: Port device team_slave_1 added [ 1173.976796][ T5620] Bluetooth: hci0: command tx timeout [ 1174.467473][T18215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.467493][T18215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.467523][T18215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.630998][T18215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.631018][T18215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.631050][T18215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.951753][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1175.051735][T18215] hsr_slave_0: entered promiscuous mode [ 1175.058530][T18215] hsr_slave_1: entered promiscuous mode [ 1175.059702][T18215] debugfs: 'hsr0' already exists in 'hsr' [ 1175.059730][T18215] Cannot create hsr debugfs directory [ 1176.010210][ T4910] Bluetooth: hci0: command tx timeout [ 1176.974889][T18524] openvswitch: netlink: Flow actions attr not present in new flow. [ 1177.196643][T18523] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1177.226198][T18048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.544237][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1178.314437][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.314518][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.767512][T18398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.767748][T18398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.768388][T18398] bridge_slave_0: entered allmulticast mode [ 1178.779729][T18398] bridge_slave_0: entered promiscuous mode [ 1178.842182][T18398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.842284][T18398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.842488][T18398] bridge_slave_1: entered allmulticast mode [ 1178.846413][T18398] bridge_slave_1: entered promiscuous mode [ 1179.747906][T18048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.815929][T18398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.945250][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.945551][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.952288][T18398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.622282][ T2000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.625801][ T2000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.325712][T18398] team0: Port device team_slave_0 added [ 1181.541861][T18567] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1181.645241][T18398] team0: Port device team_slave_1 added [ 1181.814848][T18572] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3656'. [ 1182.849637][T18398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.849657][T18398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.849688][T18398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.907817][T18398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.907837][T18398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.907867][T18398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.913343][T18578] atomic_op ffff888062317a18 conn xmit_atomic 0000000000000000 [ 1183.231061][T16288] bridge_slave_1: left allmulticast mode [ 1183.231088][T16288] bridge_slave_1: left promiscuous mode [ 1183.231263][T16288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.383556][T18589] sctp: [Deprecated]: syz.1.3659 (pid 18589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1183.383556][T18589] Use struct sctp_sack_info instead [ 1183.413592][T16288] bridge_slave_0: left allmulticast mode [ 1183.413631][T16288] bridge_slave_0: left promiscuous mode [ 1183.413920][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.710642][T16288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.771059][T16288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.824034][T16288] bond0 (unregistering): Released all slaves [ 1185.097851][ T5257] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1185.952520][T18398] hsr_slave_0: entered promiscuous mode [ 1185.956320][T18398] hsr_slave_1: entered promiscuous mode [ 1185.957326][T18398] debugfs: 'hsr0' already exists in 'hsr' [ 1185.957354][T18398] Cannot create hsr debugfs directory [ 1186.181550][T16288] hsr_slave_0: left promiscuous mode [ 1186.220124][T16288] hsr_slave_1: left promiscuous mode [ 1186.221238][T16288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.275287][T16288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.221524][T16288] team0 (unregistering): Port device team_slave_1 removed [ 1187.290989][T16288] team0 (unregistering): Port device team_slave_0 removed [ 1187.428259][T18635] 9p: Bad value for 'rfdno' [ 1187.428924][T18635] tmpfs: Bad value for 'mpol' [ 1187.575665][T18638] netlink: 'syz.2.3670': attribute type 10 has an invalid length. [ 1187.594410][T18617] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1187.643990][T18638] syz_tun: entered promiscuous mode [ 1187.665557][T18638] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1192.946915][T18716] fuse: Bad value for 'fd' [ 1193.426527][T18707] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1194.203829][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1194.253182][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1194.256562][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1194.283382][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1194.285725][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1196.503541][ T5620] Bluetooth: hci6: command tx timeout [ 1197.999481][T18398] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1198.044280][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1198.069109][T18398] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1198.115025][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1198.116582][T18398] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1198.464176][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1198.936856][ T5620] Bluetooth: hci6: command tx timeout [ 1199.440163][T18398] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1200.550851][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1200.977039][ T4910] Bluetooth: hci6: command tx timeout [ 1201.617192][T18805] netlink: 'syz.2.3706': attribute type 5 has an invalid length. [ 1201.617218][T18805] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1202.834139][ T5257] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1203.051053][ T4910] Bluetooth: hci6: command tx timeout [ 1205.103446][T18834] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3712'. [ 1206.148298][T18215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1206.242650][T18215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1206.974579][T18847] autofs: Bad value for 'fd' [ 1208.111981][T18215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1208.239679][T18215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1208.257245][T18215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1208.324983][T18215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1208.362052][T18215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1208.614918][T18215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1210.854024][T18398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.395328][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1211.458725][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1211.497741][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1211.498996][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1211.516443][ T1553] bridge_slave_1: left allmulticast mode [ 1211.516483][ T1553] bridge_slave_1: left promiscuous mode [ 1211.516772][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.334106][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1212.611768][ T1553] bridge_slave_0: left allmulticast mode [ 1212.611808][ T1553] bridge_slave_0: left promiscuous mode [ 1212.612103][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.612483][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3725'. [ 1213.350540][ T1553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1213.402216][ T1553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.422526][ T1553] bond0 (unregistering): Released all slaves [ 1214.155371][T18723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.155593][T18723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.155827][T18723] bridge_slave_0: entered allmulticast mode [ 1214.172814][T18723] bridge_slave_0: entered promiscuous mode [ 1214.391391][ T1553] hsr_slave_0: left promiscuous mode [ 1214.453117][ T1553] hsr_slave_1: left promiscuous mode [ 1214.455130][ T1553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.494483][ T1553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.570394][ T4910] Bluetooth: hci3: command tx timeout [ 1215.258539][ T1553] team0 (unregistering): Port device team_slave_1 removed [ 1215.568608][ T4962] udevd[4962]: worker [18043] /devices/platform/dummy_hcd.6/usb7/7-1 is taking a long time [ 1216.030747][ T1553] team0 (unregistering): Port device team_slave_0 removed [ 1216.262508][T18398] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.321244][T18723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.321405][T18723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.321648][T18723] bridge_slave_1: entered allmulticast mode [ 1216.324718][T18723] bridge_slave_1: entered promiscuous mode [ 1216.528767][T18723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.582094][T17414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.582199][T17414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.586990][T18723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.650191][ T4910] Bluetooth: hci3: command tx timeout [ 1217.526667][T17405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.526820][T17405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.592657][T18723] team0: Port device team_slave_0 added [ 1217.710025][T18723] team0: Port device team_slave_1 added [ 1217.827278][T18723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.827298][T18723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.827337][T18723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.956134][T18723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.956154][T18723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.956184][T18723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.129545][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1218.129566][ T37] audit: type=1326 audit(1783786433.285:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.129725][ T37] audit: type=1326 audit(1783786433.285:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.144678][ T37] audit: type=1326 audit(1783786433.305:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.144737][ T37] audit: type=1326 audit(1783786433.305:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.144786][ T37] audit: type=1326 audit(1783786433.305:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.147663][ T37] audit: type=1326 audit(1783786433.305:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.147713][ T37] audit: type=1326 audit(1783786433.305:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.147763][ T37] audit: type=1326 audit(1783786433.305:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.148552][ T37] audit: type=1326 audit(1783786433.305:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.148612][ T37] audit: type=1326 audit(1783786433.305:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18960 comm="syz.1.3744" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748dacde59 code=0x7ffc0000 [ 1218.778251][ T4910] Bluetooth: hci3: command tx timeout [ 1219.944956][T18723] hsr_slave_0: entered promiscuous mode [ 1219.946445][T18723] hsr_slave_1: entered promiscuous mode [ 1219.947498][T18723] debugfs: 'hsr0' already exists in 'hsr' [ 1219.947526][T18723] Cannot create hsr debugfs directory [ 1220.811081][ T4910] Bluetooth: hci3: command tx timeout [ 1221.154009][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1223.986577][T19053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1225.934237][ T5257] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1225.983772][T19072] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1226.087093][T18398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.305879][T18888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.306075][T18888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.306262][T18888] bridge_slave_0: entered allmulticast mode [ 1226.308258][T18888] bridge_slave_0: entered promiscuous mode [ 1226.605416][T18888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.607025][T18888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.607257][T18888] bridge_slave_1: entered allmulticast mode [ 1226.609044][T18888] bridge_slave_1: entered promiscuous mode [ 1227.185437][T18888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.452099][T19096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1227.806042][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1227.896963][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1227.904447][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1227.919510][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1227.932202][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1228.365964][T18888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.872739][ T4910] Bluetooth: hci5: command tx timeout [ 1231.217753][T19117] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1231.535194][T18888] team0: Port device team_slave_0 added [ 1231.573874][T19126] CIFS mount error: No usable UNC path provided in device string! [ 1231.573874][T19126] [ 1231.573892][T19126] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1231.812788][T18888] team0: Port device team_slave_1 added [ 1232.192202][T18888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.192222][T18888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.192262][T18888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.111865][ T4910] Bluetooth: hci5: command tx timeout [ 1233.266869][T18888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.266889][T18888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.266919][T18888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.751485][T18888] hsr_slave_0: entered promiscuous mode [ 1233.753008][T18888] hsr_slave_1: entered promiscuous mode [ 1233.754012][T18888] debugfs: 'hsr0' already exists in 'hsr' [ 1233.754040][T18888] Cannot create hsr debugfs directory [ 1234.632423][T19150] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1235.139942][ T4910] Bluetooth: hci5: command tx timeout [ 1235.315874][ T1553] bridge_slave_1: left allmulticast mode [ 1235.315916][ T1553] bridge_slave_1: left promiscuous mode [ 1235.316203][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.442233][T19171] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3792'. [ 1235.442253][T19171] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3792'. [ 1235.513934][ T1553] bridge_slave_0: left allmulticast mode [ 1235.513973][ T1553] bridge_slave_0: left promiscuous mode [ 1235.514370][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.011105][ T1553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.091434][ T1553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.156218][ T1553] bond0 (unregistering): Released all slaves [ 1236.230584][T18723] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1236.328368][T18723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1236.328890][T19180] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1236.444934][T18723] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1236.530131][T18723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1236.554006][T18723] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1236.618300][T18723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1236.702864][T18723] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1236.744229][T18723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1236.967462][ T1553] hsr_slave_0: left promiscuous mode [ 1236.984052][ T1553] hsr_slave_1: left promiscuous mode [ 1236.984871][ T1553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.011611][ T1553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.210400][ T4910] Bluetooth: hci5: command tx timeout [ 1237.604763][ T1553] team0 (unregistering): Port device team_slave_1 removed [ 1237.661661][ T1553] team0 (unregistering): Port device team_slave_0 removed [ 1238.019557][T19202] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1239.164186][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.164277][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.958040][T19245] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1241.692616][T18723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.845358][T19097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.845567][T19097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.845805][T19097] bridge_slave_0: entered allmulticast mode [ 1241.849173][T19097] bridge_slave_0: entered promiscuous mode [ 1241.897617][T19097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.897762][T19097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.898006][T19097] bridge_slave_1: entered allmulticast mode [ 1241.924158][T19097] bridge_slave_1: entered promiscuous mode [ 1241.981821][T18723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.086509][T17412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.086704][T17412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.132692][T15861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.132935][T15861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.139633][T19097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.140474][T19251] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1242.246067][T19097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.484932][T19097] team0: Port device team_slave_0 added [ 1242.505248][T19097] team0: Port device team_slave_1 added [ 1242.897919][T19097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.897938][T19097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.897966][T19097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.011745][T19097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.011760][T19097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.011777][T19097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.438679][T19097] hsr_slave_0: entered promiscuous mode [ 1244.451957][T19097] hsr_slave_1: entered promiscuous mode [ 1244.471137][T19097] debugfs: 'hsr0' already exists in 'hsr' [ 1244.471167][T19097] Cannot create hsr debugfs directory [ 1244.987887][T19304] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1246.773925][T19352] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1247.133069][T19358] openvswitch: netlink: Flow key attribute not present in set flow. [ 1247.205129][T19358] xfrm0: entered promiscuous mode [ 1247.205161][T19358] xfrm0: entered allmulticast mode [ 1247.723064][T19367] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1247.802861][T18888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1247.868586][T18888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1248.048310][T18888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1248.076628][T18888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1248.125308][T18888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1248.335861][T18888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.376837][T18888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1248.449239][T18888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1251.141637][T18723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.333292][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3842'. [ 1251.702077][ T1553] bridge_slave_1: left allmulticast mode [ 1251.702117][ T1553] bridge_slave_1: left promiscuous mode [ 1251.702407][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.926589][ T1553] bridge_slave_0: left allmulticast mode [ 1251.926629][ T1553] bridge_slave_0: left promiscuous mode [ 1251.926959][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.838987][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1253.917925][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1253.919614][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1253.942069][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1253.944393][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1254.160900][ T1553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.200937][ T1553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.223488][ T1553] bond0 (unregistering): Released all slaves [ 1254.370902][T19435] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1256.722679][ T4910] Bluetooth: hci0: command tx timeout [ 1257.354971][T19475] netlink: 1012 bytes leftover after parsing attributes in process `syz.1.3853'. [ 1257.361605][ T1553] hsr_slave_0: left promiscuous mode [ 1257.402911][ T1553] hsr_slave_1: left promiscuous mode [ 1257.404110][ T1553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.440870][ T1553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.942925][ T1553] team0 (unregistering): Port device team_slave_1 removed [ 1258.000894][ T1553] team0 (unregistering): Port device team_slave_0 removed [ 1258.406913][T19482] netlink: 'syz.2.3855': attribute type 83 has an invalid length. [ 1258.707628][T19486] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1258.730656][ T4910] Bluetooth: hci0: command tx timeout [ 1260.386544][T18888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.443853][T18888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.455336][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.455542][ T7879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.474752][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.475544][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.809925][ T4910] Bluetooth: hci0: command tx timeout [ 1263.082822][ T4910] Bluetooth: hci0: command tx timeout [ 1263.988793][T19448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.989137][T19448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.989374][T19448] bridge_slave_0: entered allmulticast mode [ 1264.015923][T19448] bridge_slave_0: entered promiscuous mode [ 1264.035285][T19448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.035469][T19448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.035727][T19448] bridge_slave_1: entered allmulticast mode [ 1264.080487][T19448] bridge_slave_1: entered promiscuous mode [ 1265.813979][T19555] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1265.819228][T19448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.905003][T19448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.958155][T19097] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1266.007279][T19097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1266.047600][T19097] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1266.100549][T19097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1266.106897][T19448] team0: Port device team_slave_0 added [ 1266.333917][T19097] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1266.353019][T19097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1266.356706][T19448] team0: Port device team_slave_1 added [ 1266.357534][T19097] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1266.406126][T19097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1266.515227][T18888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.852002][T19448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.852016][T19448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.852032][T19448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.972148][T19448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.972161][T19448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.972179][T19448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.198137][T19448] hsr_slave_0: entered promiscuous mode [ 1267.200283][T19448] hsr_slave_1: entered promiscuous mode [ 1267.201455][T19448] debugfs: 'hsr0' already exists in 'hsr' [ 1267.201481][T19448] Cannot create hsr debugfs directory [ 1270.064347][T18888] veth0_vlan: entered promiscuous mode [ 1270.380043][ T1553] bridge_slave_1: left allmulticast mode [ 1270.380091][ T1553] bridge_slave_1: left promiscuous mode [ 1270.380375][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.571855][ T1553] bridge_slave_0: left allmulticast mode [ 1270.571896][ T1553] bridge_slave_0: left promiscuous mode [ 1270.572214][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.560641][ T1553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.650489][ T1553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.672022][ T1553] bond0 (unregistering): Released all slaves [ 1271.792853][T19626] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1272.675864][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1272.737611][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1272.753162][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1272.805110][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1272.819277][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1273.602283][T19097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.058048][ T5620] Bluetooth: hci6: command tx timeout [ 1276.299952][ T1553] hsr_slave_0: left promiscuous mode [ 1276.340031][ T1553] hsr_slave_1: left promiscuous mode [ 1276.340800][ T1553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.392825][ T1553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.813339][ T1553] team0 (unregistering): Port device team_slave_1 removed [ 1276.851188][ T1553] team0 (unregistering): Port device team_slave_0 removed [ 1277.127050][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1277.204314][T19097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.261675][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.261978][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.285126][ T5620] Bluetooth: hci6: command tx timeout [ 1277.695947][T17414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.696097][T17414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.950060][ T5620] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1279.291677][ T5620] Bluetooth: hci6: command tx timeout [ 1281.384666][ T5620] Bluetooth: hci6: command tx timeout [ 1286.280256][T19635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.280513][T19635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.280771][T19635] bridge_slave_0: entered allmulticast mode [ 1286.284317][T19635] bridge_slave_0: entered promiscuous mode [ 1286.300846][T19635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.301001][T19635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.301253][T19635] bridge_slave_1: entered allmulticast mode [ 1286.306034][T19635] bridge_slave_1: entered promiscuous mode [ 1287.567509][T19635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.919452][ T4910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1288.139645][ T4910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1288.200265][ T4910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1288.204398][ T4910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1288.578919][ T4910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1289.184822][T19635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.187028][T19448] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1289.249492][T19448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1289.368024][T19448] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1289.421900][T19448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.488246][T19448] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1289.525149][T19448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1289.541557][T19635] team0: Port device team_slave_0 added [ 1289.543989][T19448] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1289.645965][T19448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1289.667297][T19635] team0: Port device team_slave_1 added [ 1290.907359][ T5620] Bluetooth: hci3: command tx timeout [ 1292.969948][ T5620] Bluetooth: hci3: command tx timeout [ 1293.244733][T19635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.244752][T19635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.244782][T19635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.260425][T19635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.260442][T19635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.260468][T19635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.370696][T19635] hsr_slave_0: entered promiscuous mode [ 1295.372244][T19635] hsr_slave_1: entered promiscuous mode [ 1295.373285][T19635] debugfs: 'hsr0' already exists in 'hsr' [ 1295.373311][T19635] Cannot create hsr debugfs directory [ 1295.396516][ T5620] Bluetooth: hci3: command tx timeout [ 1297.454524][ T5620] Bluetooth: hci3: command tx timeout [ 1297.989519][T19881] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1298.059254][T19877] syz.2.3931 (19877) used greatest stack depth: 16080 bytes left [ 1298.112913][ T1553] bridge_slave_1: left allmulticast mode [ 1298.112955][ T1553] bridge_slave_1: left promiscuous mode [ 1298.113248][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.252843][ T1553] bridge_slave_0: left allmulticast mode [ 1298.252884][ T1553] bridge_slave_0: left promiscuous mode [ 1298.253157][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.776630][T19886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3934'. [ 1300.330819][ T1553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.370651][ T1553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.392049][ T1553] bond0 (unregistering): Released all slaves [ 1300.572565][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.572649][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.714666][T19886] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1300.790312][T19886] bond1 (unregistering): Released all slaves [ 1301.210774][ T38] INFO: task kworker/0:3:4923 blocked for more than 144 seconds. [ 1301.210774][ T38] INFO: task kworker/0:3:4923 blocked for more than 144 seconds. [ 1301.210805][ T38] Tainted: G L syzkaller #0 [ 1301.210818][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1301.210829][ T38] task:kworker/0:3 state:D stack:20712 pid:4923 tgid:4923 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1301.210897][ T38] Workqueue: usb_hub_wq hub_event [ 1301.211021][ T38] Call Trace: [ 1301.211029][ T38] [ 1301.211044][ T38] __schedule+0x16dc/0x5500 [ 1301.211094][ T38] ? __driver_probe_device+0x1e8/0x360 [ 1301.211147][ T38] ? driver_probe_device+0x4f/0x240 [ 1301.211180][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1301.211217][ T38] ? __pfx___schedule+0x10/0x10 [ 1301.211256][ T38] ? schedule+0x90/0x2b0 [ 1301.211289][ T38] schedule+0x164/0x2b0 [ 1301.211318][ T38] schedule_timeout+0xc0/0x2c0 [ 1301.211346][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1301.211373][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1301.211412][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1301.211443][ T38] ? wait_for_completion+0x272/0x5e0 [ 1301.211474][ T38] wait_for_completion+0x2ca/0x5e0 [ 1301.211516][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1301.211552][ T38] ? kobject_put+0x50f/0x550 [ 1301.211581][ T38] i2c_del_adapter+0x281/0x430 [ 1301.211682][ T38] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1301.211711][ T38] ? kfree+0x4d/0x6c0 [ 1301.211754][ T38] dvb_usb_i2c_exit+0x64/0xb0 [ 1301.211844][ T38] dvb_usb_device_exit+0x1cb/0x350 [ 1301.211888][ T38] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1301.211940][ T38] cxusb_probe+0x60f/0x710 [ 1301.211982][ T38] ? rt_spin_unlock+0x163/0x200 [ 1301.212009][ T38] ? __pfx_cxusb_probe+0x10/0x10 [ 1301.212032][ T38] ? __pm_runtime_set_status+0x977/0xc40 [ 1301.212090][ T38] usb_probe_interface+0x653/0xc60 [ 1301.212181][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 1301.212203][ T38] really_probe+0x254/0xae0 [ 1301.212237][ T38] __driver_probe_device+0x1e8/0x360 [ 1301.212266][ T38] driver_probe_device+0x4f/0x240 [ 1301.212296][ T38] __device_attach_driver+0x270/0x410 [ 1301.212331][ T38] bus_for_each_drv+0x25b/0x2f0 [ 1301.212362][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 1301.212391][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1301.212424][ T38] ? rt_spin_unlock+0x163/0x200 [ 1301.212460][ T38] __device_attach+0x2c7/0x450 [ 1301.212484][ T38] ? rt_spin_unlock+0x157/0x200 [ 1301.212513][ T38] ? __pfx___device_attach+0x10/0x10 [ 1301.212551][ T38] device_initial_probe+0xa1/0xd0 [ 1301.212581][ T38] bus_probe_device+0x12d/0x220 [ 1301.212619][ T38] device_add+0x7d7/0xb80 [ 1301.212648][ T38] usb_set_configuration+0x1ad8/0x2180 [ 1301.212714][ T38] usb_generic_driver_probe+0x8d/0x150 [ 1301.212799][ T38] usb_probe_device+0x1c3/0x3b0 [ 1301.212827][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 1301.212848][ T38] really_probe+0x254/0xae0 [ 1301.212890][ T38] __driver_probe_device+0x1e8/0x360 [ 1301.212922][ T38] driver_probe_device+0x4f/0x240 [ 1301.212956][ T38] __device_attach_driver+0x270/0x410 [ 1301.212989][ T38] bus_for_each_drv+0x25b/0x2f0 [ 1301.213023][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 1301.213052][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1301.213086][ T38] ? rt_spin_unlock+0x163/0x200 [ 1301.213120][ T38] __device_attach+0x2c7/0x450 [ 1301.213151][ T38] ? __pfx___device_attach+0x10/0x10 [ 1301.213193][ T38] device_initial_probe+0xa1/0xd0 [ 1301.213223][ T38] bus_probe_device+0x12d/0x220 [ 1301.213261][ T38] device_add+0x7d7/0xb80 [ 1301.213290][ T38] usb_new_device+0x98d/0x1610 [ 1301.213318][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1301.213357][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1301.213384][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 1301.213425][ T38] hub_event+0x28cf/0x4cf0 [ 1301.213517][ T38] ? __pfx_hub_event+0x10/0x10 [ 1301.213549][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 1301.213585][ T38] ? rcu_is_watching+0x15/0xb0 [ 1301.213616][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 1301.213642][ T38] process_scheduled_works+0xa8e/0x14e0 [ 1301.213701][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1301.213736][ T38] ? assign_work+0x3cf/0x5d0 [ 1301.213768][ T38] worker_thread+0xa47/0xfb0 [ 1301.213812][ T38] ? __kthread_parkme+0x71/0x1f0 [ 1301.213852][ T38] kthread+0x388/0x470 [ 1301.213892][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1301.213917][ T38] ? __pfx_kthread+0x10/0x10 [ 1301.213950][ T38] ret_from_fork+0x514/0xb70 [ 1301.213989][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.214021][ T38] ? __switch_to+0xc89/0x1420 [ 1301.214054][ T38] ? __pfx_kthread+0x10/0x10 [ 1301.214086][ T38] ret_from_fork_asm+0x1a/0x30 [ 1301.214130][ T38] [ 1301.214193][ T38] INFO: task syz.6.3583:18247 blocked for more than 144 seconds. [ 1301.214213][ T38] Tainted: G L syzkaller #0 [ 1301.214227][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1301.214237][ T38] task:syz.6.3583 state:D stack:28424 pid:18247 tgid:18229 ppid:15016 task_flags:0x400040 flags:0x00080002 [ 1301.214307][ T38] Call Trace: [ 1301.214315][ T38] [ 1301.214329][ T38] __schedule+0x16dc/0x5500 [ 1301.214390][ T38] ? __pfx___schedule+0x10/0x10 [ 1301.214417][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1301.214461][ T38] rt_mutex_schedule+0x76/0xf0 [ 1301.214556][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1301.214593][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1301.214622][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1301.214652][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1301.214679][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1301.214719][ T38] ? usbdev_open+0x151/0x790 [ 1301.214749][ T38] ? usbdev_open+0x151/0x790 [ 1301.214787][ T38] ? usbdev_open+0x151/0x790 [ 1301.214810][ T38] mutex_lock_nested+0x168/0x1d0 [ 1301.214843][ T38] usbdev_open+0x151/0x790 [ 1301.214883][ T38] ? __pfx_usbdev_open+0x10/0x10 [ 1301.214906][ T38] ? rt_spin_unlock+0x157/0x200 [ 1301.214936][ T38] ? rt_spin_unlock+0x163/0x200 [ 1301.214966][ T38] chrdev_open+0x4dc/0x600 [ 1301.215001][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 1301.215029][ T38] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1301.215089][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 1301.215118][ T38] do_dentry_open+0x849/0x1420 [ 1301.215184][ T38] vfs_open+0x3b/0x350 [ 1301.215213][ T38] ? path_openat+0x2e49/0x3850 [ 1301.215244][ T38] path_openat+0x2e60/0x3850 [ 1301.215281][ T38] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1301.215315][ T38] ? __x64_sys_openat+0x138/0x170 [ 1301.215335][ T38] ? do_syscall_64+0x174/0x580 [ 1301.215365][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.215410][ T38] do_file_open+0x23e/0x4a0 [ 1301.215436][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1301.215473][ T38] ? __pfx_do_file_open+0x10/0x10 [ 1301.215528][ T38] ? alloc_fd+0x654/0x6d0 [ 1301.215575][ T38] do_sys_openat2+0x115/0x200 [ 1301.215596][ T38] ? __se_sys_futex+0x3a8/0x450 [ 1301.215627][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1301.215656][ T38] ? rcu_is_watching+0x15/0xb0 [ 1301.215689][ T38] __x64_sys_openat+0x138/0x170 [ 1301.215715][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.215740][ T38] do_syscall_64+0x174/0x580 [ 1301.215770][ T38] ? trace_irq_disable+0x3b/0x140 [ 1301.215805][ T38] ? clear_bhb_loop+0x40/0x90 [ 1301.215834][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.215857][ T38] RIP: 0033:0x7fa096d0e68e [ 1301.215885][ T38] RSP: 002b:00007fa094f84b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1301.215909][ T38] RAX: ffffffffffffffda RBX: 00007fa094f856c0 RCX: 00007fa096d0e68e [ 1301.215927][ T38] RDX: 0000000000002581 RSI: 00007fa094f84c00 RDI: ffffffffffffff9c [ 1301.215943][ T38] RBP: 00007fa094f84c00 R08: 0000000000000000 R09: 0000000000000000 [ 1301.215958][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1301.215974][ T38] R13: 00007fa096fd6128 R14: 00007fa096fd6090 R15: 00007ffeb4b37668 [ 1301.216011][ T38] [ 1301.216047][ T38] [ 1301.216047][ T38] Showing all locks held in the system: [ 1301.216060][ T38] 1 lock held by khungtaskd/38: [ 1301.216073][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1301.216173][ T38] 4 locks held by kworker/u8:11/1553: [ 1301.216209][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1301.216265][ T38] #1: ffffc90006e3fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1301.216320][ T38] #2: ffffffff8f5a1c60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1301.216379][ T38] #3: ffffffff8f5b07f8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0x9e0 [ 1301.216497][ T38] 5 locks held by kworker/0:3/4923: [ 1301.216510][ T38] #0: ffff8880222da538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1301.216564][ T38] #1: ffffc9001132fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1301.216619][ T38] #2: ffff88802178a210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1301.216678][ T38] #3: ffff888035706210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1301.216734][ T38] #4: ffff8880335fd1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1301.216789][ T38] 2 locks held by dhcpcd/5257: [ 1301.216802][ T38] #0: ffff8880367da928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 1301.216894][ T38] #1: ffffffff8f5b07f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1301.217000][ T38] 2 locks held by getty/5350: [ 1301.217014][ T38] #0: ffff888033d630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1301.217101][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1301.217189][ T38] 3 locks held by kworker/0:0/14766: [ 1301.217202][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1301.217255][ T38] #1: ffffc90006ebfc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1301.217309][ T38] #2: ffffffff8f5b07f8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 1301.217393][ T38] 3 locks held by kworker/u8:25/17405: [ 1301.217406][ T38] 3 locks held by kworker/u8:33/17414: [ 1301.217418][ T38] #0: ffff888032407938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1301.217468][ T38] #1: ffffc900047f7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1301.217516][ T38] #2: ffffffff8f5b07f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 1301.217574][ T38] 4 locks held by udevd/18043: [ 1301.217587][ T38] #0: ffff888026d03608 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 1301.217643][ T38] #1: ffff888063346878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1301.217709][ T38] #2: ffff88803304b788 (kn->active#27){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1301.217771][ T38] #3: ffff888035706210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1301.217832][ T38] 1 lock held by syz.6.3583/18247: [ 1301.217845][ T38] #0: ffff88802178a210 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x790 [ 1301.217916][ T38] 1 lock held by syz-executor/19448: [ 1301.217928][ T38] #0: ffffffff8f5b07f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1301.217989][ T38] 7 locks held by syz-executor/19635: [ 1301.218001][ T38] #0: ffff8880368f2500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1301.218059][ T38] #1: ffff88803c75b478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1301.218115][ T38] #2: ffff88802904e878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1301.218176][ T38] #3: ffffffff8ee261b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1301.218283][ T38] #4: ffff888035169160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1301.218341][ T38] #5: ffff88806f2a6310 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1301.218394][ T38] #6: ffffffff8f5b07f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1301.218475][ T38] 1 lock held by syz-executor/19786: [ 1301.218487][ T38] #0: ffffffff8f5b07f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1301.218546][ T38] 4 locks held by syz.2.3938/19902: [ 1301.218559][ T38] [ 1301.218565][ T38] ============================================= [ 1301.218565][ T38] [ 1301.218576][ T38] NMI backtrace for cpu 1 [ 1301.218594][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1301.218624][ T38] Tainted: [L]=SOFTLOCKUP [ 1301.218631][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1301.218642][ T38] Call Trace: [ 1301.218649][ T38] [ 1301.218658][ T38] dump_stack_lvl+0xe8/0x150 [ 1301.218692][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1301.218720][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1301.218796][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1301.218825][ T38] sys_info+0x135/0x170 [ 1301.218848][ T38] watchdog+0xfd7/0x1030 [ 1301.218918][ T38] ? watchdog+0x1c7/0x1030 [ 1301.218956][ T38] kthread+0x388/0x470 [ 1301.218987][ T38] ? __pfx_watchdog+0x10/0x10 [ 1301.219016][ T38] ? __pfx_kthread+0x10/0x10 [ 1301.219048][ T38] ret_from_fork+0x514/0xb70 [ 1301.219083][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.219114][ T38] ? __switch_to+0xc89/0x1420 [ 1301.219145][ T38] ? __pfx_kthread+0x10/0x10 [ 1301.219177][ T38] ret_from_fork_asm+0x1a/0x30 [ 1301.219216][ T38] [ 1301.219225][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1301.219255][ C0] NMI backtrace for cpu 0 [ 1301.219272][ C0] CPU: 0 UID: 0 PID: 17405 Comm: kworker/u8:25 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1301.219297][ C0] Tainted: [L]=SOFTLOCKUP [ 1301.219303][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1301.219314][ C0] Workqueue: bat_events batadv_dat_purge [ 1301.219392][ C0] RIP: 0010:check_preemption_disabled+0x0/0xe0 [ 1301.219411][ C0] Code: c7 20 5f ca 8b 48 c7 c6 60 5f ca 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 53 65 8b 05 d7 7d 5b 07 65 8b 0d cc 7d 5b 07 f7 c1 [ 1301.219425][ C0] RSP: 0018:ffffc90004fdf8f8 EFLAGS: 00000002 [ 1301.219440][ C0] RAX: 0000000000000001 RBX: ffffffff8b4560ba RCX: 0000000000000046 [ 1301.219453][ C0] RDX: 0000000034801bac RSI: ffffffff8d88186f RDI: ffffffff8bca5f80 [ 1301.219465][ C0] RBP: ffffc90004fdfa40 R08: ffffffff8b4429a0 R09: 0000000000000000 [ 1301.219478][ C0] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 1301.219489][ C0] R13: 1ffff920009fbf30 R14: ffff88802e6a5d00 R15: dffffc0000000000 [ 1301.219503][ C0] FS: 0000000000000000(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 1301.219517][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1301.219530][ C0] CR2: 00007fddd50ca398 CR3: 000000003333e000 CR4: 00000000003526f0 [ 1301.219547][ C0] Call Trace: [ 1301.219554][ C0] [ 1301.219561][ C0] lockdep_hardirqs_off+0x56/0xd0 [ 1301.219583][ C0] ? _raw_spin_lock_irqsave+0x1a/0x60 [ 1301.219604][ C0] trace_hardirqs_off+0x12/0x40 [ 1301.219621][ C0] _raw_spin_lock_irqsave+0x1a/0x60 [ 1301.219642][ C0] rt_mutex_slowunlock+0xbf/0xa20 [ 1301.219664][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1301.219682][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1301.219706][ C0] ? __batadv_dat_purge+0x334/0x400 [ 1301.219728][ C0] rt_spin_unlock+0x10d/0x200 [ 1301.219747][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1301.219769][ C0] __batadv_dat_purge+0x334/0x400 [ 1301.219792][ C0] ? __batadv_dat_purge+0xae/0x400 [ 1301.219809][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1301.219830][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1301.219849][ C0] batadv_dat_purge+0x20/0x70 [ 1301.219867][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1301.219898][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1301.219919][ C0] ? assign_work+0x3cf/0x5d0 [ 1301.219939][ C0] worker_thread+0xa47/0xfb0 [ 1301.219970][ C0] kthread+0x388/0x470 [ 1301.219992][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1301.220009][ C0] ? __pfx_kthread+0x10/0x10 [ 1301.220031][ C0] ret_from_fork+0x514/0xb70 [ 1301.220055][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.220078][ C0] ? __switch_to+0xc89/0x1420 [ 1301.220099][ C0] ? __pfx_kthread+0x10/0x10 [ 1301.220121][ C0] ret_from_fork_asm+0x1a/0x30 [ 1301.220145][ C0] [ 1301.228374][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1301.228399][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1301.228430][ T38] Tainted: [L]=SOFTLOCKUP [ 1301.228438][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1301.228452][ T38] Call Trace: [ 1301.228461][ T38] [ 1301.228471][ T38] vpanic+0x56c/0xa60 [ 1301.228500][ T38] ? __pfx___schedule+0x10/0x10 [ 1301.228530][ T38] ? __pfx_vpanic+0x10/0x10 [ 1301.228562][ T38] panic+0xc5/0xd0 [ 1301.228582][ T38] ? __pfx_panic+0x10/0x10 [ 1301.228602][ T38] ? preempt_schedule_common+0x82/0xd0 [ 1301.228632][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1301.228659][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1301.228687][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1301.228718][ T38] watchdog+0x1030/0x1030 [ 1301.228757][ T38] ? watchdog+0x1c7/0x1030 [ 1301.228795][ T38] kthread+0x388/0x470 [ 1301.228825][ T38] ? __pfx_watchdog+0x10/0x10 [ 1301.228852][ T38] ? __pfx_kthread+0x10/0x10 [ 1301.228893][ T38] ret_from_fork+0x514/0xb70 [ 1301.228927][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.228959][ T38] ? __switch_to+0xc89/0x1420 [ 1301.228990][ T38] ? __pfx_kthread+0x10/0x10 [ 1301.229021][ T38] ret_from_fork_asm+0x1a/0x30 [ 1301.229058][ T38] [ 1301.229339][ T38] Kernel Offset: disabled