last executing test programs: 27m32.443157184s ago: executing program 3 (id=1364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x20008820) r1 = openat(0xffffffffffffffff, 0x0, 0x2, 0x10) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000480)='nfsd.export/channel\x00', 0x2, 0x1) write(r2, &(0x7f0000000f00), 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='base=0x200000 size=0x100000 type=write-combining\n\x00', 0x31) 27m32.04345066s ago: executing program 3 (id=1365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = eventfd2(0x3, 0x800) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="7400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000001000005400128008000100736974004800028014000b00fc00000000000000000000000000000108000300e000000108000100", @ANYBLOB, @ANYRESHEX=0x0], 0x74}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x549081) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) eventfd2(0x3, 0x800) (async) close(0x3) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="7400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000001000005400128008000100736974004800028014000b00fc00000000000000000000000000000108000300e000000108000100", @ANYBLOB, @ANYRESHEX=0x0], 0x74}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) (async) syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x549081) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async) 27m31.72042152s ago: executing program 3 (id=1366): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448dd, &(0x7f0000000940)={0x0, 0x0}) 27m31.601154173s ago: executing program 3 (id=1368): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) close(0xffffffffffffffff) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0xfffe, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040085) 27m30.514821039s ago: executing program 3 (id=1369): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000006c0)=[{0x24, '\x00', @buffer={"1833043b06bac15697cb639ecb31c9c2ba4058731befbf035eadc3c94bebc702", 0x20}, 0x200000}, {0x30, '\x00', @st={0x4, [{0x0, @svalue}, {0x1, @svalue=0x4}, {0x0, @svalue=0x1}, {0x3, @svalue=0x2}]}, 0x100033}, {0x1b, '\x00', @data=0x80000000, 0x9b10}, {0x1c, '\x00', @buffer={"ead7dffb18d982c631d10a62b0ee1278281d6a7d0fd55adc4ed01cc438021276", 0x20}, 0xffffff0f}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000001c0)=0xb0000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@host, 0x4}, {@any, 0x9}, 0x400, "d13ad642d5382677dc7aaee3c309148636fd12844686b60d68642ff501f47509a59565ff01d10219b393662a03e35463ae2ac1c4c1386966dd3e23883a0d172becd74f82264b1a402a36db4830b92b149be1b10dd37e92a988159005a17cad0d47cc095de101c4b45a75c4fb62251f714445fc63492acfe7f32ac46badc3de82646773eba860c67f7719dfe82e44b003ab54376ad8c2765aa2892792f99749af8abc520ecca369b30905bf2ff293aa8f44c32f1cd0c54cd008ee696726b37f28b5e1a4eeee46fe878da6f505dd2aa41e14ca7fbb2cd75206c91adf0454a3ac25255f040f0748624cc5a3195ee7f931c5dfb8338c9d1471b4879733255d226eef09a81b6a2cd2c41f4240821225d00d10d2318932606b97c34fd01b919113fb05dc30b295aea68a73a8db98e236d00fb31856d61c52003bfe9b077b4e46c22eb676430353f3ef83c25b65dd8b8eab53a99dcacd1624d6d20ecc7bcd781f79f92b1fb0821106b8ee4442c8a2dcfe64dbcb83edc7044cc7407f5575a7a4d79a3dd1496a78e364c66d594cc3ba67f66a2263396161390ebf287d91faa89ae67045961dafd7da858efe16e5915617869d4d84907a77bbb90e23be914d02e606fb9df09ee9bb24f729ab783eeb8c6de8f642b3817b36a42971c088ba6b4f13576e25b2194fa324a3abf05644ce681db03538b2757eeda8ac41d6d1f85ef2f4bf2f08ef6328bbcc3b4f324d431479b4b1e31edb32433d9f161fbab24144ced91e162fdc5fe46acf2222d2d28f91d73b14b23df9fcfc24109ede26431b5f51329fd54f0e6af591733f471a657f69c9103d5425cf72164c44d0e74eb1e95f3704386a4724e4730ca34f4a4daf897b5f908233ff30283234c997bcc657a872bda4d0736d8160e9edc9d54fe0f412bba0aa882cfdecfb0a2e391bcd2c4a98704bf5750d950e3a89e38884280053b46d43d8531185e077cfbcaa581737862c7597f89334ab955099d859bc7dc27d345548640c266de2369a4d054fc7119ea302563a31c678a61bf567df04f0f038a19a537d570871d10751ba7ce61a0592e06c6162b5f9e4c26ec78cb94b15f5e0d6b88ee48769bf4db392448c91871f3a3bac7b9f67310cd4bcd7322ce514a64758364aab03c23543a6de9f97a775299bec6e952cdec0d86359000b2c58012aece734be382cd19a2fc79e812e88b1fba1fcb38f2632ac432e778d817817950691f26c715cd4467b19566ea66c0ee70e9d7fa40cf0a37d38dc61dbc7e36f22306f324054f374e02786d7360540c9104d7bfc8e09e66db7e2732ffe5e22299f9088af76fcd9a0c9b732d9089f075e5736cdce81e562514d3ca590fae0c363475b7a4ece51955c6fff2e83189e2520fdfd17f3dbfa20fe49f7b64daf7db1cbbc215d615d6a4ca4532ab2087d2e759f2d6d82324a3439ee9d9e8e"}, 0x418, 0x800}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x400c0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1f9}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe705, 0x80000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3a2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f4c, 0x800, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf748, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) 27m30.146178593s ago: executing program 3 (id=1370): syz_io_uring_setup(0x2e11, &(0x7f00000005c0)={0x0, 0x2000002, 0x40, 0x5, 0xffffffff}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x4, {0x4, 0x8, "83ef"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001"], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/71, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000003c40)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeef0000}) write$dsp(r1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d6c5dd29ad4dd45682836bb322f4300ed206cefdbfcaac1477fd171c018cb9f03141d81bf0d5717b75261fbdb761800fe6161c272ca53cf100ece104edc772075dde5d2a6a02a48e6763c291366b46de1d2c6424d2210a8ffba1dd01c2fff95d758e2af2aa5a2591dfde62a5ac3825a1d38ac203173bd7377078635fd017a6879a32d0cfe932d843ca983a59bec98fd0b6321dfe3689a09bf014fe327600a04101cb539000562fbdffd1c", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 27m14.936822794s ago: executing program 32 (id=1370): syz_io_uring_setup(0x2e11, &(0x7f00000005c0)={0x0, 0x2000002, 0x40, 0x5, 0xffffffff}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x4, {0x4, 0x8, "83ef"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001"], 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/71, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000003c40)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeef0000}) write$dsp(r1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d6c5dd29ad4dd45682836bb322f4300ed206cefdbfcaac1477fd171c018cb9f03141d81bf0d5717b75261fbdb761800fe6161c272ca53cf100ece104edc772075dde5d2a6a02a48e6763c291366b46de1d2c6424d2210a8ffba1dd01c2fff95d758e2af2aa5a2591dfde62a5ac3825a1d38ac203173bd7377078635fd017a6879a32d0cfe932d843ca983a59bec98fd0b6321dfe3689a09bf014fe327600a04101cb539000562fbdffd1c", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 14m11.220361244s ago: executing program 2 (id=2906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xd9}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101}, 0x50) 14m10.908182179s ago: executing program 2 (id=2908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) unshare(0x22020600) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_getevents(r1, 0x1, 0x1, &(0x7f0000000340)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 14m9.417076277s ago: executing program 2 (id=2912): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) 14m8.593439919s ago: executing program 2 (id=2916): socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') 14m8.209260976s ago: executing program 2 (id=2919): r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a00000005000100070000568542734cab4e24f0227a003105000400000000000900420073797a31000000001500683a69702c706f72742c6c6574000c000014000780080006400000570008001389c778ffd81f925e1eeb8b3530ab99700212d3464613af3f5f33d175e0d6c4d4c02c80529de04acd6a90259fa8215dfb00330000"], 0x64}, 0x1, 0x0, 0x0, 0x40890}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) fadvise64(r2, 0x65, 0xf7f, 0x2) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919", 0xe}, {&(0x7f00000004c0)="62c99e05d9", 0x5}], 0x2}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040000, 0x0, 0x2, 0x10004000, 0x7, 0x400, 0x7}}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x453, 0xe10, 0x70bd25, 0x25dfdbff, "90c37fc77da8af20817fbf869cc76a98a2c93e9e1fcf2b916904e8f633ce6cc8e101ed461f9fa1d99d3807aa9bcd717a8e8ac28ad9366fe8e447cc073eb5a68f792506", ["", "", "", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x24000014}, 0x810) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffb, 0x4) 14m6.400523986s ago: executing program 2 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000400012800b0001006272696467650000300002800c002e000300000003000000050007000800040008001a00ff070000050007"], 0x60}}, 0x0) 11m19.201363186s ago: executing program 4 (id=3422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003801c0000840c00018006000100d10300000c000440000000002df31ab30c00008008"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 11m18.936787011s ago: executing program 4 (id=3424): r0 = syz_open_pts(0xffffffffffffffff, 0x280400) ioctl$KDADDIO(r0, 0x4b34, 0x5) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = syz_open_procfs(r3, &(0x7f00000000c0)='net/sctp\x00') r6 = add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9eb5e4b6234f8bcccc7dd1f3b63b99ae9b940df9f0d1bf52710e48847b8d0edc0d21ed7a21067dc62f633d4aeb6a0e15ce0d2ba9a21fa0cf6583196105c7eb4825ee333a8a678582a3a2694caf11ab706e5e017da0440f2f132732f74cbd0d361b3ec5edf98369f31483355b29d7990dcb2eb39c1319721775a4f53162f7a211ac98fc75991e57fbf3b67f", 0x8b, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) connect$unix(r5, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r6, 0x0) splice(r0, &(0x7f00000002c0)=0x5, r1, &(0x7f0000000300)=0x2, 0x5, 0x4) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000380)={0x2c, 0x4, 0x0, {0x5, 0x202, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) write(r5, &(0x7f00000003c0)="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", 0x1000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000013c0), 0x10800) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000001400)=0xb182) quotactl_fd$Q_GETINFO(r0, 0x80000f03, r4, &(0x7f0000001440)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001480), 0x111, 0x9}}, 0x20) keyctl$revoke(0x3, r6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001580)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) add_key$user(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)="817b81179a656179ed880508436e86a122eebd96ec49a330bb54a80508748948696bab85d6520bdd5e52268935cb1441f40da00b93fc1dcc9177e5d31c8db68ca137f4857630eb476d4631f86867c1f9b0f2e9e880aecfe17ebe2e395d9cef0b1be49c9759aa198a280d30c32cd5c8fe1d42e0c8ac6a6899753dfc71f868ab73a61779c1b9bf827762adbf8b754cc4727e7549f95d07213e56cf0cd3a652a0133f44eeac13adf5aa02e20e3bbf84ec2e13", 0xb1, r6) mkdirat(r5, &(0x7f0000001880)='./file0\x00', 0x2a0) 11m18.687856255s ago: executing program 4 (id=3426): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmmsg(r5, &(0x7f00000024c0)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000380)=""/73, 0x49}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000540)=""/246, 0xf6}, {&(0x7f0000000640)=""/225, 0xe1}, {&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000880)=""/139, 0x8b}, {&(0x7f0000000940)=""/64, 0x40}, {&(0x7f0000000980)=""/200, 0xc8}], 0x9, &(0x7f00000014c0)=""/4096, 0x1000}, 0x2}], 0x1, 0x40002001, &(0x7f0000002500)={0x0, 0x989680}) 11m16.320679487s ago: executing program 4 (id=3429): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731a97fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) readlink(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)=""/204, 0xcc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200007404deff00000000000000008500000041000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=@v2={0x3, 0x1, 0x9, 0x2, 0x62, "1680803a37c095b249a229dfa1056f9f8b847bbb1eee56d017bf4a44891cd208b8db66736c20eefa11cd1f8bc39fc8ad2a5dd3a50138634f667772c2cde7b065dc57f3a1eeddde1929484228d3aa532d3ff0642f327bf281dcd2df20e564e08c5a37"}, 0x6b, 0x1) 11m15.15477477s ago: executing program 4 (id=3434): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x2, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2000000, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0xfffffffc, 0x0, 0xa, 0x1, 0x1, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x81, 0x0, 0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) ptrace$pokeuser(0x6, r3, 0x9, 0x80000000) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ppoll(&(0x7f0000000140)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) getdents64(r6, &(0x7f0000003440)=""/92, 0x5c) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) 11m6.328363725s ago: executing program 4 (id=3458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x1}, 0x20) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x57, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000028000000280b1aa0799298ee7c246dc3d11f2d41a935d17971f0673269b95c716b438b4e3826736729dcdcdc"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet(0x2, 0x3, 0x2f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090528bd7080faffffff02186d00", @ANYRES32=r7, @ANYBLOB="08000100a21414280800040064010100120002007f00000108000400ffffffff08000a000400000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@remote, 0x4e23, 0x1, 0x4e21, 0x4, 0x2, 0x60, 0xa0, 0x3b, r7, 0xee01}, {0x9, 0x0, 0x315, 0x300000, 0x2, 0x8, 0x3, 0x6}, {0x3, 0x0, 0x7fffffffffffffff, 0xf}, 0x2, 0x6e6bb1, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x4d6, 0x3c}, 0xa, @in6=@remote, 0x3501, 0x2, 0x3, 0x61, 0xc3b, 0x9, 0x5}}, 0xe8) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x3}, @raw32}], 0x1c) 11m5.581386131s ago: executing program 33 (id=3458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x1}, 0x20) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x57, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000028000000280b1aa0799298ee7c246dc3d11f2d41a935d17971f0673269b95c716b438b4e3826736729dcdcdc"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet(0x2, 0x3, 0x2f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090528bd7080faffffff02186d00", @ANYRES32=r7, @ANYBLOB="08000100a21414280800040064010100120002007f00000108000400ffffffff08000a000400000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@remote, 0x4e23, 0x1, 0x4e21, 0x4, 0x2, 0x60, 0xa0, 0x3b, r7, 0xee01}, {0x9, 0x0, 0x315, 0x300000, 0x2, 0x8, 0x3, 0x6}, {0x3, 0x0, 0x7fffffffffffffff, 0xf}, 0x2, 0x6e6bb1, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x4d6, 0x3c}, 0xa, @in6=@remote, 0x3501, 0x2, 0x3, 0x61, 0xc3b, 0x9, 0x5}}, 0xe8) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x3}, @raw32}], 0x1c) 4m46.171865614s ago: executing program 5 (id=4136): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x2, 0x34005}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 4m40.624674121s ago: executing program 5 (id=4140): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x38}, 0x94) 4m40.226369447s ago: executing program 5 (id=4142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bc29, 0x25dfdbff, {{}, {0x0, 0x400b}, {0x2, 0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x4800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040445}, 0x4808) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000300)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x6, 0x48000000, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000001c0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 4m35.227715903s ago: executing program 5 (id=4146): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20060100e90000a9362bd9ccf61cea0b3db360d2a7218610ff48a8a1efa8f4fc72b319dd41ac0f42c913b829f7dd5ba625e4e6559374afe1aeedf1a7a28030a01ab5aff4fd1afaf7a340fe9b63ad626190e70afe8e0d3ebdad4e2420ce81e111a7ee27285b51b37515badf493be6d1baafbdae92991369"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000008c000000030a01020000000000000000020000030900010073797a30000000006b000300fd7c400f2ffd10ac56a901205b56f46dc2de64dcb0069ea669e6cf1eec5d34ca507432ffb45daca58bd12f2976b2f4a06d08ba45945217113677a2df42a9aa88732a9a4b9d1f9fa8ac"], 0xd4}}, 0x20040040) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000001900000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x103}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x60101, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r9, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d", 0xa6}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc0740", 0x52}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b", 0xd1}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) msgget(0x2, 0x217) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0xe, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000003a40), 0x0, 0xde, 0x6) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m24.346482772s ago: executing program 5 (id=4153): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') r1 = socket(0x1e, 0x805, 0x0) r2 = dup(r1) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}}}, 0x10) read$FUSE(r0, &(0x7f0000001e40)={0x2020}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x1, 0x1, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendto(0xffffffffffffffff, 0x0, 0x0, 0x404c8d5, 0x0, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setns(0xc9, 0x0) syz_ublk_setup_io_uring(0x1b1d, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_bpf={0x40, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0x16, 0x6, "8c5e889680ea699f0286c6926deecbcf795b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x58}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xa242, 0x4000, 0x800, 0x3c6}, 0x0, 0x0, 0x0) 4m20.000956661s ago: executing program 5 (id=4156): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 4m4.616965607s ago: executing program 34 (id=4156): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 10.026162948s ago: executing program 0 (id=4634): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="2a6b00000000000073113900000000008510000002000000b7000000000000009500c20000196154f08d30ad3d12759c0254240000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "bd2f6f33b4548d8a", "58ed0625f2d0239ad8a6dc4e99503a7f3d4198b158327212e2082ccd1a670172", "4a5803dd", "18822161805e9688"}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x33}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400480, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 9.730259128s ago: executing program 0 (id=4637): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x164, &(0x7f0000000000)={@multicast, @random="01800000279f", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x12e, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "65fe990e7d6a42cab919d3119e4e2b0fd71a6f6a968bd2730e235ed2f63c1dccc86c16a3b16b1d8436c5933fbbe0ac37148cf1b38b3721ad616e2d35828bce6a3566769bf839802d882ad12100215b9a15b6c4188afabc4d4faa6bbf1e9fd5d53d13fd634b5a12e4ceb7f6528b76f06e0c402af440eebad5dbc10e8fd776899d846b269fdb07728bdeef79e4de4a901ee14b1c376f66f08ed7476c69cc1c6576845b60e4ff339fc10e81b1d4238327bab7a10234341191d768cf53162d289b5f62928efc6874494e4da7a4aed33cc8596b3647740e9b9539c5b22decf3ef3280dd6c9827cd8aa29adca7ad548a8582e9bbb4fe9d209404612261835e72e7fec746e46aa0a1dd570a57b15ec697815ab07089f6d7669642dc7a3e5c7e6c0919c35efd3b43c038"}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/220, 0xdc, 0x8d35) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl(r0, 0x40204706, &(0x7f00000000c0)="0100000000000000010000") 8.650824544s ago: executing program 0 (id=4638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x4, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000900)={0x2, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8, 0xc, 0x4, 0x7, 0x9, 0x8, 0x4, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0xa, 0xffffffffffffffff, 0x6}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) lseek(r7, 0x52, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYBLOB="3f00000000000000400012800b0001006272696467650000300002800c002e000300000003000000050007000800040008001a00ff070000050007"], 0x60}}, 0x0) 4.236345095s ago: executing program 0 (id=4641): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xfffe}, {0x6, 0x24, 0x1a, 0x0, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000500)=@ethtool_regs={0x20, 0x5}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0x80, 0x6, @MIDI_NOTEON=@special, 0x60, 0x3}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.635267843s ago: executing program 1 (id=4656): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r4, 0x2, {0x0, 0x7e, 0x4}, 0x1}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$9p_unix(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=unix,cache=re']) 1.088856466s ago: executing program 1 (id=4657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, 0x0, 0x0}, 0x20) sendto$inet6(r5, 0x0, 0x0, 0x8015, 0x0, 0x0) ioctl$TIOCCONS(r4, 0x541d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 1.062052192s ago: executing program 0 (id=4658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 914.135401ms ago: executing program 1 (id=4659): ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000080)={&(0x7f0000000000)='(yA[]!,\x00', &(0x7f0000000040)='[\xac#-\x00', 0xa}) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x7, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000100)={0xa, 0x2, 0x6, 0x6}) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x40, 0x6) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x104, 0x17, 0xa, 0x807, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000810) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req={0xe, 0x6, 0x7, 0x200}, 0x10) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000480)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000500)={{0x5, 0x5, 0x4, 0xa0, 'syz1\x00', 0x1ff}, 0x4, 0x200, 0xfe27, r3, 0x2, 0x200, 'syz1\x00', &(0x7f00000004c0)=['\x00', '(yA[]!,\x00'], 0x9}) (async, rerun: 32) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/warn_count', 0x80000, 0x52) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000080) (async) r6 = openat$cgroup_devices(r1, &(0x7f00000007c0)='devices.allow\x00', 0x2, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000840)) read$FUSE(r2, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x20, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}}, 0x4044855) (async) fsetxattr$security_ima(r1, &(0x7f00000029c0), &(0x7f0000002a00)=@v2={0x5, 0x3, 0x17, 0x9, 0xfb, "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"}, 0x104, 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000002b40)={0x7, r0, 0xc, {0xffff, 0x7fffffff}, 0x2}, 0x1) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f0000003180)={0x7, &(0x7f0000003080)=[{0x6, 0x2, &(0x7f0000002b80)="b798", 0x0, 0x1}, {0x800, 0xeb, &(0x7f0000002bc0)="90774f12268a31060b30470c09f98eb1e45c5546460d811b882681e25825cb2e13ccdec57c66a0189eb42e66d74ae2a78362bfcb6d4cf59b7c56bb3e7f3e772e3a22f2d7ef72d8c69810f07962f7e80818e8574dd1ef97dc29dccb0dceafbf951675dca85daf14e55dfbde7b10868227f97021b60dd2cfdccac76384c8419010d352e52d6b6c113abd03dce3830076e1bd9eedfde7e4ddc21424535ebb6a5af646bffd9256dd31f58c8fcb064dfea15692a23668367e5de4d2b4be690fb38a936c4a6512d61ffa799adf54ae28c888f40b339471d5f2be8791c733601575a384732f825672fabc5a218dd5", 0x1, 0x1}, {0x20, 0xf5, &(0x7f0000002cc0)="ee20b8fa076f537b3ac2cbf144ea017fa3561fa15eac43e3db802b945a91c19e81c200ea606da7f2541193c6620995c8c3c3a60e87a876599c516fb6115154355ff7ec456742981b59485a12a02b1bcc616779207f55afe8f2d623575fada63a2ab0752d61526b222b522c5790c14d3c5c3d42f1856944a61e8ac9224e470517dcf2477a986effb136d57659233d479d9b2d951e26e38fa7c5c34b8a02129fbd0c77bdc295f5043611333e8f143cc7410a6bdad9c511ab81af846f678e02670c8ac7cf4ef60ca85ce14ae46174ab480039a498d9d84aeaa2d607495d6cdfe3f6de85d3f974025e84fa9eef6324b6c0ebbab9359bb6", 0x0, 0x1}, {0xf, 0x65, &(0x7f0000002dc0)="d0895b83993d146541da6371ea11994c07b10d22be281e230e0f1895031e4ed2b8bb2b253189d0aa9d126de279b4881253be6efd71e82a9251ad300e270b113e408d8a5730e17a3cc744c41369534b423784acd1976d382b5d22d792ae862979e461cc4f2c", 0x1, 0x1}, {0x7, 0xf7, &(0x7f0000002e40)="30f1d4f76265db106ca9c8cf4beb29814995909a3ca09332ae86fad6e62dec58c84e4895150d36ab1e0f811dcc97c0ad1b995bf1aa7ce7e843ca9145b49a4c8710e6ecc350ad9e054a55e94b94d27b1fa6267460d143d7522a5417379cb92f333011cde0bd83be3d817b5dd8c0cb5f74f4464451bca60a02d932b4de5d54caba9b81ba02e7b5784a853ce9b417045224fd7cc64ce40a6fd5405563c5ef63f6a6e9ac14345fba7543c5983961d5fbbc41b630fe11e195a1e0c86333c4753c2e5ba887fbca67f833fab71aac749cc034bc21b8608a8b7cfe7355fcf687f8994e8f193334e732b5657d0d70c39ebd724677c3db583aaa0079", 0x0, 0x1}, {0x0, 0x83, &(0x7f0000002f40)="c33c92c42c7872abc8be92fa69bf2529811ef3513f29e83c98375be6e4d09c987f7715c892f24076466b687a64617675b0cb9e643006be6ee4057a47012cd52c5c16a41dfc67e0ec79dea0a83a00adeae1f7cfbf2df1b25d4442f46d7978ad361ecdc3c216e9d38fa68d544e157e58b1535ca75fed80868fabfef659e40ec81dc8c56e", 0x0, 0x1}, {0xc, 0x4d, &(0x7f0000003000)="9436c688c18c8b7e2d586fd23f2336610c21d1aeda085d585d35985f0d1c9de32303ab02069e230fe207c01b75da3d66924970db1ebecc3ebbb622b169956d905a331e87484cee3f8627adfdea", 0x0, 0x1}]}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003600)={&(0x7f0000003200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x338, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_SET_DESC={0x324, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0000000}]}]}, @NFTA_SET_DESC_CONCAT={0x14c, 0x2, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc9e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffe00}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7cf9deab}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff960}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca8e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f5dc5cb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc25}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x286}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24ae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_DESC_CONCAT={0x114, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb16b}]}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0xb03, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x3d8}, 0x1, 0x0, 0x0, 0x40081}, 0x4004000) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x80, 0xe, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) mount$9p_fd(0x0, &(0x7f00000037c0)='./file0\x00', &(0x7f0000003800), 0x4, &(0x7f0000003840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}, {@cache_loose}, {@cache_mmap}, {@afid={'afid', 0x3d, 0x8}}, {@privport}], [{@fowner_eq={'fowner', 0x3d, r8}}, {@smackfstransmute}, {@obj_role={'obj_role', 0x3d, '-'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@smackfshat={'smackfshat', 0x3d, 'mangle\x00'}}, {@seclabel}, {@uid_lt={'uid<', r8}}]}}) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000003980)) (async) r9 = socket$inet6(0xa, 0x6, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000003b40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x2c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003b80)={'wlan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003c00)={0x4, &(0x7f0000003bc0)=[{0x508, 0x80, 0x5, 0x10}, {0xb1, 0x7, 0x9, 0x2}, {0x6, 0xfc, 0x4, 0x10001}, {0x400, 0x5, 0xc}]}) 833.016074ms ago: executing program 0 (id=4660): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000280)=""/206, 0xce}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000600)=""/128, 0x80}], 0x5}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 636.582224ms ago: executing program 1 (id=4661): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x164, &(0x7f0000000000)={@multicast, @random="01800000279f", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x12e, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8d35) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl(r0, 0x40204706, &(0x7f00000000c0)="0100000000000000010000") 494.364483ms ago: executing program 1 (id=4662): socket(0x40000000015, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="bc019500", @ANYRES16=0x0, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x8040}, 0x20000810) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x5cb1, 0x2, 0x4, 0x1e1}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r0, 0x1e76, 0x0, 0x6, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866207d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb96a9acd5261df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03ddbc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005300)={0x0, 0xffffffffffffff32, &(0x7f00000001c0)=[{&(0x7f00000007c0)="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", 0x266}], 0x1, 0x0, 0x14}, 0x200000c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) syz_open_dev$amidi(&(0x7f0000000380), 0x4, 0x414000) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) futex(&(0x7f0000000140)=0x2, 0x6, 0x0, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f00000e7000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, 0xb9, 0x1, &(0x7f0000000a40)=""/4096, 0x1000}, &(0x7f0000001a80)=0x40) 0s ago: executing program 1 (id=4663): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) (fail_nth: 2) kernel console output (not intermixed with test programs): interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 6 [ 2061.059799][T14243] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2061.062113][T14243] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 2061.062132][T14243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.062144][T14243] usb 2-1: Product: syz [ 2061.062153][T14243] usb 2-1: Manufacturer: syz [ 2061.062161][T14243] usb 2-1: SerialNumber: syz [ 2062.981918][T24559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2062.985650][T14243] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2062.985667][T14243] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2062.985696][T14243] usbserial_generic 2-1:1.0: generic converter detected [ 2064.761342][T14243] usb 2-1: generic converter now attached to ttyUSB0 [ 2064.884971][T14243] usb 2-1: USB disconnect, device number 58 [ 2064.976722][T14243] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2064.977340][T14243] usbserial_generic 2-1:1.0: device disconnected [ 2065.111348][ T1964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2065.162618][ T1964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2065.193672][ T1964] bond0 (unregistering): Released all slaves [ 2066.650500][T24420] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.650613][T24420] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.650872][T24420] bridge_slave_0: entered allmulticast mode [ 2066.652520][T24420] bridge_slave_0: entered promiscuous mode [ 2066.751861][T24420] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.751938][T24420] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.752187][T24420] bridge_slave_1: entered allmulticast mode [ 2066.753862][T24420] bridge_slave_1: entered promiscuous mode [ 2067.120803][ T1964] hsr_slave_0: left promiscuous mode [ 2067.121545][ T1964] hsr_slave_1: left promiscuous mode [ 2067.122261][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2067.122808][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2068.362357][ T1964] team0 (unregistering): Port device team_slave_1 removed [ 2068.446853][ T1964] team0 (unregistering): Port device team_slave_0 removed [ 2068.926438][T24420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2069.099121][T24420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2069.323193][T24441] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.323272][T24441] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.323499][T24441] bridge_slave_0: entered allmulticast mode [ 2069.326436][T24441] bridge_slave_0: entered promiscuous mode [ 2069.405539][T24441] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.405620][T24441] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.405804][T24441] bridge_slave_1: entered allmulticast mode [ 2069.422242][T24441] bridge_slave_1: entered promiscuous mode [ 2069.423818][T24360] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2069.533939][T24360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2069.548232][T24420] team0: Port device team_slave_0 added [ 2069.682142][T24360] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2069.690729][T24360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2069.706420][T24420] team0: Port device team_slave_1 added [ 2069.796516][T24360] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2069.812420][T24360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2069.947024][T24441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2069.978983][T24360] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2070.008938][T24360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2070.053763][T24441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2070.196611][T24420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2070.196625][T24420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2070.196643][T24420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2070.217977][ T5868] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2070.359729][T24420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2070.359744][T24420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2070.359762][T24420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2070.369526][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2070.369559][ T5868] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2070.369573][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.396269][ T5868] usb 2-1: config 0 descriptor?? [ 2070.400304][ T5868] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2070.562519][T24441] team0: Port device team_slave_0 added [ 2070.653971][T24441] team0: Port device team_slave_1 added [ 2070.942915][T24441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2070.942938][T24441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2070.942955][T24441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2071.181266][T24441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2071.181280][T24441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2071.181298][T24441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2071.215722][T24420] hsr_slave_0: entered promiscuous mode [ 2071.216836][T24420] hsr_slave_1: entered promiscuous mode [ 2072.469772][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2072.504801][T24441] hsr_slave_0: entered promiscuous mode [ 2072.516729][T24441] hsr_slave_1: entered promiscuous mode [ 2072.529702][T24441] debugfs: 'hsr0' already exists in 'hsr' [ 2072.529724][T24441] Cannot create hsr debugfs directory [ 2072.793610][T18672] usb 2-1: USB disconnect, device number 59 [ 2074.759773][T24360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2074.771875][T24658] can: request_module (can-proto-3) failed. [ 2074.786626][ T1514] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.140269][ T1034] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.142017][T22325] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.142147][T22325] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.291100][T24360] 8021q: adding VLAN 0 to HW filter on device team0 [ 2075.340474][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.345980][ T7325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2075.384592][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.384689][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2075.558079][T24670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4230'. [ 2076.507153][T24420] netdevsim netdevsim6 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.628771][ T5732] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 2076.723649][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2076.780897][ T5732] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2076.780921][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2076.780945][ T5732] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2076.780961][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.850511][ T5732] usb 2-1: config 0 descriptor?? [ 2077.070905][ T5732] ath6kl: Failed to submit usb control message: -71 [ 2077.070941][ T5732] ath6kl: unable to send the bmi data to the device: -71 [ 2077.070950][ T5732] ath6kl: Unable to send get target info: -71 [ 2077.079085][ T5732] ath6kl: Failed to init ath6kl core: -71 [ 2077.079538][ T5732] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2077.206790][ T5732] usb 2-1: USB disconnect, device number 60 [ 2078.802623][T24420] netdevsim netdevsim6 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.907963][T22325] netdevsim netdevsim2 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.627163][T24420] netdevsim netdevsim6 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.953614][ T1034] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.958239][ T7320] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.886909][ T1034] netdevsim netdevsim2 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 2087.984588][T15289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2088.088804][T15289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2088.128977][T15289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2088.129909][T15289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2088.130401][T15289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2088.551735][T24420] netdevsim netdevsim6 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2089.066841][ T1964] bridge_slave_1: left allmulticast mode [ 2089.066869][ T1964] bridge_slave_1: left promiscuous mode [ 2089.067056][ T1964] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.138381][ T1964] bridge_slave_0: left allmulticast mode [ 2089.138409][ T1964] bridge_slave_0: left promiscuous mode [ 2089.141393][ T1964] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.824573][ T1964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2089.837192][ T1964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2089.850008][ T1964] bond0 (unregistering): Released all slaves [ 2089.966878][T24727] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 2090.488322][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2090.583068][T23860] Bluetooth: hci5: command tx timeout [ 2091.044554][ T1964] hsr_slave_0: left promiscuous mode [ 2091.329141][ T1964] hsr_slave_1: left promiscuous mode [ 2091.330039][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2091.338506][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2092.251818][T15289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2092.440145][T15289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2092.533232][T15289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2092.646615][T15289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2092.656939][T15289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2092.669258][T15289] Bluetooth: hci5: command tx timeout [ 2094.014457][ T1964] team0 (unregistering): Port device team_slave_1 removed [ 2094.047327][ T1964] team0 (unregistering): Port device team_slave_0 removed [ 2094.168083][T18672] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2094.353266][T18672] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2094.356966][T18672] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2094.356987][T18672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.356999][T18672] usb 2-1: Product: syz [ 2094.357008][T18672] usb 2-1: Manufacturer: syz [ 2094.357016][T18672] usb 2-1: SerialNumber: syz [ 2094.403807][T18672] usb 2-1: config 0 descriptor?? [ 2094.426846][T18672] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 2094.670285][ T5732] usb 2-1: USB disconnect, device number 61 [ 2094.756975][T23860] Bluetooth: hci5: command tx timeout [ 2095.063723][T23860] Bluetooth: hci3: command tx timeout [ 2095.098655][T24441] netdevsim netdevsim2 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.699594][T18672] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 2095.865338][T18672] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2095.865359][T18672] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2095.870840][T18672] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 2095.870863][T18672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.870875][T18672] usb 2-1: Product: syz [ 2095.870885][T18672] usb 2-1: Manufacturer: syz [ 2095.870894][T18672] usb 2-1: SerialNumber: syz [ 2096.481385][T24788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2096.552537][T18672] usb 2-1: MBOX3: Invalid descriptor size=28. [ 2096.587925][T18672] usb 2-1: USB disconnect, device number 62 [ 2096.837841][T23860] Bluetooth: hci5: command tx timeout [ 2097.072199][T23860] Bluetooth: hci3: command tx timeout [ 2097.344395][T24441] netdevsim netdevsim2 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2098.112611][T24441] netdevsim netdevsim2 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2098.910162][T15289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2098.976640][T15289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2098.997852][T15289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2099.006376][T15289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2099.051823][T15289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2099.152399][T15289] Bluetooth: hci3: command tx timeout [ 2099.542252][T24831] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2099.542288][T24831] Error validating options; rc = [-22] [ 2099.675848][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4255'. [ 2099.885237][T24835] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4256'. [ 2099.959539][T24441] netdevsim netdevsim2 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.953220][T24846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4258'. [ 2101.000281][T24846] loop5: detected capacity change from 0 to 8392703 [ 2101.236177][T23860] Bluetooth: hci3: command tx timeout [ 2101.401751][T23860] Bluetooth: hci6: command tx timeout [ 2102.567719][T18672] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2102.746710][T18672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2102.746743][T18672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2102.746767][T18672] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2102.746782][T18672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.790075][T18672] usb 2-1: config 0 descriptor?? [ 2103.011360][T24857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.017431][T24857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2103.472841][T23860] Bluetooth: hci6: command tx timeout [ 2103.574596][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'. [ 2103.734777][T18672] usbhid 2-1:0.0: can't add hid device: -71 [ 2103.734866][T18672] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2103.754589][T18672] usb 2-1: USB disconnect, device number 63 [ 2104.275414][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.585835][T24733] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.585915][T24733] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.586095][T24733] bridge_slave_0: entered allmulticast mode [ 2104.632798][T24733] bridge_slave_0: entered promiscuous mode [ 2104.709983][T24880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4265'. [ 2104.710000][T24880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4265'. [ 2104.710008][T24880] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4265'. [ 2104.813831][T24733] bridge0: port 2(bridge_slave_1) entered blocking state [ 2104.813908][T24733] bridge0: port 2(bridge_slave_1) entered disabled state [ 2104.814155][T24733] bridge_slave_1: entered allmulticast mode [ 2104.881890][T24733] bridge_slave_1: entered promiscuous mode [ 2105.210021][T24733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2105.259696][T24733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2105.547911][T23860] Bluetooth: hci6: command tx timeout [ 2105.622129][T24733] team0: Port device team_slave_0 added [ 2105.946850][T24733] team0: Port device team_slave_1 added [ 2106.393199][T24899] overlayfs: failed to resolve './file1': -2 [ 2107.114235][T24908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 2107.616088][T24733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2107.616102][T24733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.616120][T24733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2107.647673][T23860] Bluetooth: hci6: command tx timeout [ 2107.721365][ T5868] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2107.889369][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2107.889405][ T5868] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 6 [ 2107.889420][ T5868] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2107.891328][ T5868] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 2107.891347][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.891360][ T5868] usb 2-1: Product: syz [ 2107.891369][ T5868] usb 2-1: Manufacturer: syz [ 2107.891378][ T5868] usb 2-1: SerialNumber: syz [ 2107.982511][T24913] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2107.985004][ T5868] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2107.985021][ T5868] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2107.985049][ T5868] usbserial_generic 2-1:1.0: generic converter detected [ 2108.082785][T24733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2108.082798][T24733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2108.082816][T24733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2108.161683][ T5868] usb 2-1: generic converter now attached to ttyUSB0 [ 2108.264736][ T5868] usb 2-1: USB disconnect, device number 64 [ 2108.311508][ T5868] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2108.312210][ T5868] usbserial_generic 2-1:1.0: device disconnected [ 2108.614930][T24764] bridge0: port 1(bridge_slave_0) entered blocking state [ 2108.615007][T24764] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.615144][T24764] bridge_slave_0: entered allmulticast mode [ 2108.616839][T24764] bridge_slave_0: entered promiscuous mode [ 2108.700594][T24764] bridge0: port 2(bridge_slave_1) entered blocking state [ 2108.700672][T24764] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.700849][T24764] bridge_slave_1: entered allmulticast mode [ 2108.702466][T24764] bridge_slave_1: entered promiscuous mode [ 2108.860959][T24733] hsr_slave_0: entered promiscuous mode [ 2108.861865][T24733] hsr_slave_1: entered promiscuous mode [ 2108.864099][T24733] debugfs: 'hsr0' already exists in 'hsr' [ 2108.864117][T24733] Cannot create hsr debugfs directory [ 2109.034009][T24764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2109.061221][T24764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2112.765355][T24927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 2112.965301][T24927] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 2113.315456][T24764] team0: Port device team_slave_0 added [ 2113.354989][T24764] team0: Port device team_slave_1 added [ 2113.825206][T24764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2113.825221][T24764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.825239][T24764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2113.897756][ T5868] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2113.953398][T24764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2113.953411][T24764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.953429][T24764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2114.050524][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2114.050566][ T5868] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2114.050581][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2114.056203][ T5868] usb 2-1: config 0 descriptor?? [ 2114.303599][ T5868] usbhid 2-1:0.0: can't add hid device: -71 [ 2114.303689][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2114.334465][ T5868] usb 2-1: USB disconnect, device number 65 [ 2114.837657][ T5868] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2114.989399][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2114.989433][ T5868] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2114.989449][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.048503][ T5868] usb 2-1: config 0 descriptor?? [ 2115.581813][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4279'. [ 2115.673832][T24943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2115.674267][T24943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2115.876934][T24764] hsr_slave_0: entered promiscuous mode [ 2115.878786][ T5868] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 2115.880964][ T5868] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 2115.911687][T24764] hsr_slave_1: entered promiscuous mode [ 2115.975384][T24764] debugfs: 'hsr0' already exists in 'hsr' [ 2115.975407][T24764] Cannot create hsr debugfs directory [ 2116.648625][ T5868] usb 2-1: USB disconnect, device number 66 [ 2116.648681][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2120.667911][ T1964] bridge_slave_1: left allmulticast mode [ 2120.667938][ T1964] bridge_slave_1: left promiscuous mode [ 2120.668122][ T1964] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.670355][ T1964] bridge_slave_0: left allmulticast mode [ 2120.670377][ T1964] bridge_slave_0: left promiscuous mode [ 2120.670534][ T1964] bridge0: port 1(bridge_slave_0) entered disabled state [ 2120.769416][ T1964] bridge_slave_1: left allmulticast mode [ 2120.769443][ T1964] bridge_slave_1: left promiscuous mode [ 2120.769615][ T1964] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.777065][ T1964] bridge_slave_0: left allmulticast mode [ 2120.777090][ T1964] bridge_slave_0: left promiscuous mode [ 2120.777231][ T1964] bridge0: port 1(bridge_slave_0) entered disabled state [ 2121.431246][ T1964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2121.451252][ T1964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2121.457654][ T5868] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2121.468619][ T1964] bond0 (unregistering): Released all slaves [ 2121.657800][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 2121.794882][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.794919][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2121.794936][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2121.794949][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2121.794963][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2121.795994][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2121.796012][ T5868] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2121.796024][ T5868] usb 2-1: Manufacturer: syz [ 2121.811638][ T5868] usb 2-1: config 0 descriptor?? [ 2122.217568][ T5868] rc_core: IR keymap rc-hauppauge not found [ 2122.217587][ T5868] Registered IR keymap rc-empty [ 2122.218848][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.237648][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.260147][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2122.333946][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 2122.354568][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.439368][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.450705][ C0] rc rc0: IR event FIFO is full! [ 2122.450721][ C0] rc rc0: IR event FIFO is full! [ 2122.450730][ C0] rc rc0: IR event FIFO is full! [ 2122.450922][ C0] rc rc0: IR event FIFO is full! [ 2122.450931][ C0] rc rc0: IR event FIFO is full! [ 2122.450939][ C0] rc rc0: IR event FIFO is full! [ 2122.450946][ C0] rc rc0: IR event FIFO is full! [ 2122.450953][ C0] rc rc0: IR event FIFO is full! [ 2122.450960][ C0] rc rc0: IR event FIFO is full! [ 2122.450967][ C0] rc rc0: IR event FIFO is full! [ 2122.450974][ C0] rc rc0: IR event FIFO is full! [ 2122.450982][ C0] rc rc0: IR event FIFO is full! [ 2122.450990][ C0] rc rc0: IR event FIFO is full! [ 2122.451178][ C0] rc rc0: IR event FIFO is full! [ 2122.451194][ C0] rc rc0: IR event FIFO is full! [ 2122.451201][ C0] rc rc0: IR event FIFO is full! [ 2122.451209][ C0] rc rc0: IR event FIFO is full! [ 2122.451216][ C0] rc rc0: IR event FIFO is full! [ 2122.451223][ C0] rc rc0: IR event FIFO is full! [ 2122.451230][ C0] rc rc0: IR event FIFO is full! [ 2122.451237][ C0] rc rc0: IR event FIFO is full! [ 2122.451429][ C0] rc rc0: IR event FIFO is full! [ 2122.451440][ C0] rc rc0: IR event FIFO is full! [ 2122.451629][ C0] rc rc0: IR event FIFO is full! [ 2122.451639][ C0] rc rc0: IR event FIFO is full! [ 2122.451646][ C0] rc rc0: IR event FIFO is full! [ 2122.451653][ C0] rc rc0: IR event FIFO is full! [ 2122.451661][ C0] rc rc0: IR event FIFO is full! [ 2122.451668][ C0] rc rc0: IR event FIFO is full! [ 2122.451675][ C0] rc rc0: IR event FIFO is full! [ 2122.451682][ C0] rc rc0: IR event FIFO is full! [ 2122.451690][ C0] rc rc0: IR event FIFO is full! [ 2122.451934][ C0] rc rc0: IR event FIFO is full! [ 2122.451944][ C0] rc rc0: IR event FIFO is full! [ 2122.451951][ C0] rc rc0: IR event FIFO is full! [ 2122.451958][ C0] rc rc0: IR event FIFO is full! [ 2122.451965][ C0] rc rc0: IR event FIFO is full! [ 2122.451972][ C0] rc rc0: IR event FIFO is full! [ 2122.452510][ C0] rc rc0: IR event FIFO is full! [ 2122.452521][ C0] rc rc0: IR event FIFO is full! [ 2122.452536][ C0] rc rc0: IR event FIFO is full! [ 2122.452543][ C0] rc rc0: IR event FIFO is full! [ 2122.452551][ C0] rc rc0: IR event FIFO is full! [ 2122.452558][ C0] rc rc0: IR event FIFO is full! [ 2122.452979][ C0] rc rc0: IR event FIFO is full! [ 2122.452989][ C0] rc rc0: IR event FIFO is full! [ 2122.452996][ C0] rc rc0: IR event FIFO is full! [ 2122.453003][ C0] rc rc0: IR event FIFO is full! [ 2122.453011][ C0] rc rc0: IR event FIFO is full! [ 2122.453018][ C0] rc rc0: IR event FIFO is full! [ 2122.453232][ C0] rc rc0: IR event FIFO is full! [ 2122.453242][ C0] rc rc0: IR event FIFO is full! [ 2122.453249][ C0] rc rc0: IR event FIFO is full! [ 2122.453256][ C0] rc rc0: IR event FIFO is full! [ 2122.453263][ C0] rc rc0: IR event FIFO is full! [ 2122.453270][ C0] rc rc0: IR event FIFO is full! [ 2122.453277][ C0] rc rc0: IR event FIFO is full! [ 2122.453488][ C0] rc rc0: IR event FIFO is full! [ 2122.453498][ C0] rc rc0: IR event FIFO is full! [ 2122.453506][ C0] rc rc0: IR event FIFO is full! [ 2122.453513][ C0] rc rc0: IR event FIFO is full! [ 2122.453529][ C0] rc rc0: IR event FIFO is full! [ 2122.453833][ C0] rc rc0: IR event FIFO is full! [ 2122.453843][ C0] rc rc0: IR event FIFO is full! [ 2122.453850][ C0] rc rc0: IR event FIFO is full! [ 2122.453857][ C0] rc rc0: IR event FIFO is full! [ 2122.453864][ C0] rc rc0: IR event FIFO is full! [ 2122.453871][ C0] rc rc0: IR event FIFO is full! [ 2122.453878][ C0] rc rc0: IR event FIFO is full! [ 2122.454642][ C0] rc rc0: IR event FIFO is full! [ 2122.454652][ C0] rc rc0: IR event FIFO is full! [ 2122.454911][ C0] rc rc0: IR event FIFO is full! [ 2122.455115][ C0] rc rc0: IR event FIFO is full! [ 2122.455125][ C0] rc rc0: IR event FIFO is full! [ 2122.455132][ C0] rc rc0: IR event FIFO is full! [ 2122.455139][ C0] rc rc0: IR event FIFO is full! [ 2122.455345][ C0] rc rc0: IR event FIFO is full! [ 2122.455355][ C0] rc rc0: IR event FIFO is full! [ 2122.455362][ C0] rc rc0: IR event FIFO is full! [ 2122.455369][ C0] rc rc0: IR event FIFO is full! [ 2122.455376][ C0] rc rc0: IR event FIFO is full! [ 2122.455383][ C0] rc rc0: IR event FIFO is full! [ 2122.455390][ C0] rc rc0: IR event FIFO is full! [ 2122.455581][ C0] rc rc0: IR event FIFO is full! [ 2122.455591][ C0] rc rc0: IR event FIFO is full! [ 2122.455598][ C0] rc rc0: IR event FIFO is full! [ 2122.455605][ C0] rc rc0: IR event FIFO is full! [ 2122.455612][ C0] rc rc0: IR event FIFO is full! [ 2122.455619][ C0] rc rc0: IR event FIFO is full! [ 2122.455809][ C0] rc rc0: IR event FIFO is full! [ 2122.456000][ C0] rc rc0: IR event FIFO is full! [ 2122.456009][ C0] rc rc0: IR event FIFO is full! [ 2122.456016][ C0] rc rc0: IR event FIFO is full! [ 2122.456023][ C0] rc rc0: IR event FIFO is full! [ 2122.456031][ C0] rc rc0: IR event FIFO is full! [ 2122.456037][ C0] rc rc0: IR event FIFO is full! [ 2122.456044][ C0] rc rc0: IR event FIFO is full! [ 2122.456052][ C0] rc rc0: IR event FIFO is full! [ 2122.456059][ C0] rc rc0: IR event FIFO is full! [ 2122.456244][ C0] rc rc0: IR event FIFO is full! [ 2122.456254][ C0] rc rc0: IR event FIFO is full! [ 2122.456261][ C0] rc rc0: IR event FIFO is full! [ 2122.456268][ C0] rc rc0: IR event FIFO is full! [ 2122.456275][ C0] rc rc0: IR event FIFO is full! [ 2122.456282][ C0] rc rc0: IR event FIFO is full! [ 2122.456468][ C0] rc rc0: IR event FIFO is full! [ 2122.456477][ C0] rc rc0: IR event FIFO is full! [ 2122.456484][ C0] rc rc0: IR event FIFO is full! [ 2122.456491][ C0] rc rc0: IR event FIFO is full! [ 2122.456499][ C0] rc rc0: IR event FIFO is full! [ 2122.456505][ C0] rc rc0: IR event FIFO is full! [ 2122.456513][ C0] rc rc0: IR event FIFO is full! [ 2122.456520][ C0] rc rc0: IR event FIFO is full! [ 2122.456535][ C0] rc rc0: IR event FIFO is full! [ 2122.456899][ C0] rc rc0: IR event FIFO is full! [ 2122.456908][ C0] rc rc0: IR event FIFO is full! [ 2122.456916][ C0] rc rc0: IR event FIFO is full! [ 2122.456923][ C0] rc rc0: IR event FIFO is full! [ 2122.456930][ C0] rc rc0: IR event FIFO is full! [ 2122.456937][ C0] rc rc0: IR event FIFO is full! [ 2122.457121][ C0] rc rc0: IR event FIFO is full! [ 2122.457130][ C0] rc rc0: IR event FIFO is full! [ 2122.457137][ C0] rc rc0: IR event FIFO is full! [ 2122.457144][ C0] rc rc0: IR event FIFO is full! [ 2122.457151][ C0] rc rc0: IR event FIFO is full! [ 2122.457159][ C0] rc rc0: IR event FIFO is full! [ 2122.457369][ C0] rc rc0: IR event FIFO is full! [ 2122.457701][ C0] rc rc0: IR event FIFO is full! [ 2122.457711][ C0] rc rc0: IR event FIFO is full! [ 2122.457718][ C0] rc rc0: IR event FIFO is full! [ 2122.457725][ C0] rc rc0: IR event FIFO is full! [ 2122.457733][ C0] rc rc0: IR event FIFO is full! [ 2122.457740][ C0] rc rc0: IR event FIFO is full! [ 2122.457747][ C0] rc rc0: IR event FIFO is full! [ 2122.457754][ C0] rc rc0: IR event FIFO is full! [ 2122.457944][ C0] rc rc0: IR event FIFO is full! [ 2122.457953][ C0] rc rc0: IR event FIFO is full! [ 2122.457960][ C0] rc rc0: IR event FIFO is full! [ 2122.458052][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.458146][ C0] rc rc0: IR event FIFO is full! [ 2122.458155][ C0] rc rc0: IR event FIFO is full! [ 2122.458162][ C0] rc rc0: IR event FIFO is full! [ 2122.458602][T24998] rc rc0: two consecutive events of type space [ 2122.477575][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.497607][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.517888][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.537726][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.557751][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2122.577893][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2125.968548][ T5868] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2126.704718][ T5868] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2126.704778][ T5868] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2126.920709][ T5868] usb 2-1: USB disconnect, device number 67 [ 2127.563944][ T1964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2127.567048][ T1964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2127.616395][ T1964] bond0 (unregistering): Released all slaves [ 2128.868803][T14243] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2128.999682][T14243] usb 2-1: device descriptor read/64, error -71 [ 2129.237668][T14243] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2129.430017][T14243] usb 2-1: device descriptor read/64, error -71 [ 2129.664163][T14243] usb usb2-port1: attempt power cycle [ 2130.747459][T24826] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.747550][T24826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.747718][T24826] bridge_slave_0: entered allmulticast mode [ 2130.749384][T24826] bridge_slave_0: entered promiscuous mode [ 2131.344227][T24826] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.344304][T24826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.344566][T24826] bridge_slave_1: entered allmulticast mode [ 2131.354683][T24826] bridge_slave_1: entered promiscuous mode [ 2131.417719][T14243] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2131.438469][T14243] usb 2-1: device descriptor read/8, error -71 [ 2131.643348][ T1964] hsr_slave_0: left promiscuous mode [ 2131.643991][ T1964] hsr_slave_1: left promiscuous mode [ 2131.644550][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2131.645063][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2131.682954][ T1964] hsr_slave_0: left promiscuous mode [ 2131.684035][ T1964] hsr_slave_1: left promiscuous mode [ 2131.684661][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2131.685167][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2132.099247][T25038] program syz.1.4301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2132.395792][T25040] binder: 25037:25040 ioctl 4020ae46 200000000080 returned -22 [ 2132.901405][ T1964] team0 (unregistering): Port device team_slave_1 removed [ 2132.959463][ T1964] team0 (unregistering): Port device team_slave_0 removed [ 2133.684283][ T1964] team0 (unregistering): Port device team_slave_1 removed [ 2133.723228][ T1964] team0 (unregistering): Port device team_slave_0 removed [ 2134.561032][T24826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2134.663019][T24826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2135.067605][ T5732] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 2135.113289][T24826] team0: Port device team_slave_0 added [ 2135.289300][ T5732] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 2135.289322][ T5732] usb 2-1: config 0 has no interface number 0 [ 2135.289349][ T5732] usb 2-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 2135.289366][ T5732] usb 2-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2135.291193][ T5732] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 2135.291213][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.291224][ T5732] usb 2-1: Product: syz [ 2135.291233][ T5732] usb 2-1: Manufacturer: syz [ 2135.291242][ T5732] usb 2-1: SerialNumber: syz [ 2135.294774][ T5732] usb 2-1: config 0 descriptor?? [ 2135.301831][ T5732] kobil_sct 2-1:0.148: KOBIL USB smart card terminal converter detected [ 2135.400701][ T5732] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2135.426230][T24826] team0: Port device team_slave_1 added [ 2136.530163][T25055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4306'. [ 2136.530182][T25055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4306'. [ 2136.565933][T25055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4306'. [ 2138.878687][ T5868] usb 2-1: USB disconnect, device number 72 [ 2138.885206][ T5868] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2138.885808][ T5868] kobil_sct 2-1:0.148: device disconnected [ 2139.627157][T24826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2139.627171][T24826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2139.627188][T24826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2139.745151][T24826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2139.745165][T24826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2139.745183][T24826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2140.049541][T24826] hsr_slave_0: entered promiscuous mode [ 2140.088068][T24826] hsr_slave_1: entered promiscuous mode [ 2140.246522][ T5868] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2140.421429][ T5868] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2140.421466][ T5868] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 2140.423300][ T5868] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2140.423319][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.423338][ T5868] usb 2-1: Product: syz [ 2140.423348][ T5868] usb 2-1: Manufacturer: syz [ 2140.423356][ T5868] usb 2-1: SerialNumber: syz [ 2140.426932][ T5868] usb 2-1: config 0 descriptor?? [ 2140.913733][ T1964] bridge_slave_1: left allmulticast mode [ 2140.913759][ T1964] bridge_slave_1: left promiscuous mode [ 2140.913936][ T1964] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.917379][ T1964] bridge_slave_0: left allmulticast mode [ 2140.917591][ T1964] bridge_slave_0: left promiscuous mode [ 2140.917761][ T1964] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.238847][ T1964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2141.278270][ T5732] usb 2-1: USB disconnect, device number 73 [ 2141.390825][ T1964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2141.398813][ T1964] bond0 (unregistering): Released all slaves [ 2142.239695][ T1964] hsr_slave_0: left promiscuous mode [ 2142.244132][ T1964] hsr_slave_1: left promiscuous mode [ 2142.244822][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2142.255035][ T1964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2143.118015][T14243] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2143.360745][T14243] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.360783][T14243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2143.360797][T14243] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2143.360818][T14243] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2143.362595][T14243] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 2143.362612][T14243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.362624][T14243] usb 2-1: Product: syz [ 2143.362633][T14243] usb 2-1: Manufacturer: syz [ 2143.362643][T14243] usb 2-1: SerialNumber: syz [ 2143.373782][T14243] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2143.373798][T14243] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2143.373826][T14243] usbserial_generic 2-1:1.0: generic converter detected [ 2143.518036][T14243] usb 2-1: generic converter now attached to ttyUSB0 [ 2143.579645][T14243] usb 2-1: USB disconnect, device number 74 [ 2143.608869][T14243] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2143.609388][T14243] usbserial_generic 2-1:1.0: device disconnected [ 2143.612640][ T1964] team0 (unregistering): Port device team_slave_1 removed [ 2143.741172][ T1964] team0 (unregistering): Port device team_slave_0 removed [ 2144.605631][T23860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2144.724496][T23860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2144.744487][T23860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2144.766978][T23860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2144.770585][T23860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2146.869930][T24764] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2147.094630][T24764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2147.097038][T24764] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2147.111909][T15289] Bluetooth: hci1: command tx timeout [ 2147.152116][T24764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2147.162344][T24764] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2147.173992][T24764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2147.232380][T24764] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2147.281821][T24764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2147.283267][ T5868] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2147.499075][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.499116][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2147.499131][ T5868] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2147.499145][ T5868] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2147.501639][ T5868] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 2147.501660][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.501672][ T5868] usb 2-1: Product: syz [ 2147.501681][ T5868] usb 2-1: Manufacturer: syz [ 2147.501690][ T5868] usb 2-1: SerialNumber: syz [ 2147.509291][ T5868] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2147.509308][ T5868] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2147.509336][ T5868] usbserial_generic 2-1:1.0: generic converter detected [ 2147.512088][ T5868] usb 2-1: generic converter now attached to ttyUSB0 [ 2147.783294][T22181] usb 2-1: USB disconnect, device number 75 [ 2147.954443][T22181] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2147.954956][T22181] usbserial_generic 2-1:1.0: device disconnected [ 2149.200252][T15289] Bluetooth: hci1: command tx timeout [ 2151.229866][T15289] Bluetooth: hci1: command tx timeout [ 2151.568132][T14243] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2151.697505][T14243] usb 2-1: device descriptor read/64, error -71 [ 2151.939503][T14243] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2152.067725][T14243] usb 2-1: device descriptor read/64, error -71 [ 2152.177908][T14243] usb usb2-port1: attempt power cycle [ 2152.521314][T14243] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2152.538393][T14243] usb 2-1: device descriptor read/8, error -71 [ 2152.685307][T23860] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2152.769921][T23860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2152.789976][T23860] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2152.817584][T14243] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2152.839460][T14243] usb 2-1: device descriptor read/8, error -71 [ 2152.845307][T23860] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2152.870357][T23860] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2152.951369][T14243] usb usb2-port1: unable to enumerate USB device [ 2153.171085][T25125] bridge0: port 1(bridge_slave_0) entered blocking state [ 2153.172750][T25125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.172966][T25125] bridge_slave_0: entered allmulticast mode [ 2153.176241][T25125] bridge_slave_0: entered promiscuous mode [ 2153.317200][T23860] Bluetooth: hci1: command tx timeout [ 2154.023455][T25125] bridge0: port 2(bridge_slave_1) entered blocking state [ 2154.023535][T25125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.023782][T25125] bridge_slave_1: entered allmulticast mode [ 2154.025465][T25125] bridge_slave_1: entered promiscuous mode [ 2154.622503][T25206] bridge_slave_0: left allmulticast mode [ 2154.622530][T25206] bridge_slave_0: left promiscuous mode [ 2154.622781][T25206] bridge0: port 1(bridge_slave_0) entered disabled state [ 2154.652234][T25206] bridge_slave_1: left allmulticast mode [ 2154.652259][T25206] bridge_slave_1: left promiscuous mode [ 2154.652422][T25206] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.696751][T25206] team0: Port device team_slave_0 removed [ 2154.721276][T25206] team0: Port device team_slave_1 removed [ 2154.724039][T25206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2154.724062][T25206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2154.770535][T25206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2154.770564][T25206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2154.772737][T25206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2154.980438][T25125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2155.022540][T25125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2155.069848][T23860] Bluetooth: hci7: command tx timeout [ 2155.325325][T25214] FAULT_INJECTION: forcing a failure. [ 2155.325325][T25214] name failslab, interval 1, probability 100, space 0, times 0 [ 2155.325357][T25214] CPU: 0 UID: 0 PID: 25214 Comm: syz.0.4336 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2155.325376][T25214] Tainted: [L]=SOFTLOCKUP [ 2155.325381][T25214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2155.325388][T25214] Call Trace: [ 2155.325394][T25214] [ 2155.325400][T25214] dump_stack_lvl+0xe8/0x150 [ 2155.325436][T25214] should_fail_ex+0x467/0x600 [ 2155.325464][T25214] should_failslab+0xa8/0x100 [ 2155.325488][T25214] __kmalloc_cache_noprof+0xa0/0x6b0 [ 2155.325503][T25214] ? io_ring_ctx_alloc+0x53/0xc60 [ 2155.325516][T25214] ? io_ring_ctx_alloc+0x53/0xc60 [ 2155.325535][T25214] io_ring_ctx_alloc+0x53/0xc60 [ 2155.325548][T25214] ? io_prepare_config+0x8c8/0xc70 [ 2155.325572][T25214] io_uring_create+0x50/0x990 [ 2155.325591][T25214] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 2155.325608][T25214] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2155.325629][T25214] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 2155.325658][T25214] ? __pfx_ksys_write+0x10/0x10 [ 2155.325684][T25214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2155.325700][T25214] do_syscall_64+0x174/0x580 [ 2155.325720][T25214] ? trace_irq_disable+0x3b/0x140 [ 2155.325738][T25214] ? clear_bhb_loop+0x40/0x90 [ 2155.325753][T25214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2155.325765][T25214] RIP: 0033:0x7fe6249fe019 [ 2155.325778][T25214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2155.325788][T25214] RSP: 002b:00007fe622c55ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2155.325803][T25214] RAX: ffffffffffffffda RBX: 0000200000000548 RCX: 00007fe6249fe019 [ 2155.325812][T25214] RDX: 00002000000005c8 RSI: 0000200000000548 RDI: 00000000000003c9 [ 2155.325820][T25214] RBP: 0000200000000540 R08: 0000000000000000 R09: 0000000000000000 [ 2155.325828][T25214] R10: 00002000000005d0 R11: 0000000000000206 R12: 00002000000005c8 [ 2155.325836][T25214] R13: 00002000000005d0 R14: 00007fe622c55fd8 R15: 0000000000000000 [ 2155.325854][T25214] [ 2157.147775][T23860] Bluetooth: hci7: command tx timeout [ 2158.317580][T22181] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2158.451517][T22181] usb 2-1: device descriptor read/64, error -71 [ 2158.688224][T22181] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2158.824259][T22181] usb 2-1: device descriptor read/64, error -71 [ 2158.844932][T23860] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2158.891345][T25125] team0: Port device team_slave_0 added [ 2158.926315][T25125] team0: Port device team_slave_1 added [ 2158.928347][T22181] usb usb2-port1: attempt power cycle [ 2159.235842][T23860] Bluetooth: hci7: command tx timeout [ 2159.312784][T22181] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2159.328398][T22181] usb 2-1: device descriptor read/8, error -71 [ 2159.623360][T25125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2159.623373][T25125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2159.623390][T25125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2159.646095][T25125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2159.646109][T25125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2159.646127][T25125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2159.647529][T22181] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2159.668358][T22181] usb 2-1: device descriptor read/8, error -71 [ 2159.844879][T22181] usb usb2-port1: unable to enumerate USB device [ 2160.032511][T25125] hsr_slave_0: entered promiscuous mode [ 2160.033563][T25125] hsr_slave_1: entered promiscuous mode [ 2160.035810][T25125] debugfs: 'hsr0' already exists in 'hsr' [ 2160.035828][T25125] Cannot create hsr debugfs directory [ 2160.078828][T25246] overlayfs: missing 'lowerdir' [ 2161.009722][T15289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2161.087170][T15289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2161.129033][T15289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2161.133428][T15289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2161.133971][T15289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2161.312643][T23862] Bluetooth: hci7: command tx timeout [ 2161.907596][ T5725] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 2162.059721][ T5725] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2162.059745][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2162.059769][ T5725] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2162.059784][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.063023][ T5725] usb 2-1: config 0 descriptor?? [ 2162.288098][ T5725] ath6kl: Failed to submit usb control message: -71 [ 2162.288139][ T5725] ath6kl: unable to send the bmi data to the device: -71 [ 2162.288149][ T5725] ath6kl: Unable to send get target info: -71 [ 2162.292091][ T5725] ath6kl: Failed to init ath6kl core: -71 [ 2162.292493][ T5725] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2162.465463][ T5725] usb 2-1: USB disconnect, device number 84 [ 2163.475928][T15289] Bluetooth: hci3: command tx timeout [ 2163.799208][ T7321] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.843683][T25291] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 2165.536360][T25296] netlink: 'syz.0.4355': attribute type 1 has an invalid length. [ 2165.547860][T15289] Bluetooth: hci3: command tx timeout [ 2165.724517][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.097694][T22181] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2166.249295][T22181] usb 2-1: config index 0 descriptor too short (expected 65535, got 32) [ 2166.249316][T22181] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2166.249329][T22181] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2166.249341][T22181] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2166.251110][T22181] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 2166.251135][T22181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.251147][T22181] usb 2-1: Product: syz [ 2166.251156][T22181] usb 2-1: Manufacturer: syz [ 2166.251165][T22181] usb 2-1: SerialNumber: syz [ 2166.609383][T22181] usb 2-1: USB disconnect, device number 85 [ 2167.627845][T15289] Bluetooth: hci3: command tx timeout [ 2169.707595][T15289] Bluetooth: hci3: command tx timeout [ 2169.980083][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2170.019729][T25319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4360'. [ 2170.757626][T14277] bridge_slave_1: left allmulticast mode [ 2170.757653][T14277] bridge_slave_1: left promiscuous mode [ 2170.757827][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 2170.975507][T14277] bridge_slave_0: left allmulticast mode [ 2170.975533][T14277] bridge_slave_0: left promiscuous mode [ 2170.975712][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 2171.428490][T25332] FAULT_INJECTION: forcing a failure. [ 2171.428490][T25332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2171.428517][T25332] CPU: 0 UID: 0 PID: 25332 Comm: syz.1.4365 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2171.428536][T25332] Tainted: [L]=SOFTLOCKUP [ 2171.428540][T25332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2171.428548][T25332] Call Trace: [ 2171.428554][T25332] [ 2171.428559][T25332] dump_stack_lvl+0xe8/0x150 [ 2171.428585][T25332] should_fail_ex+0x467/0x600 [ 2171.428610][T25332] _copy_from_user+0x2d/0xb0 [ 2171.428627][T25332] do_sock_getsockopt+0x462/0x7e0 [ 2171.428650][T25332] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2171.428674][T25332] ? __fget_files+0x3a8/0x420 [ 2171.428688][T25332] ? __fget_files+0x2a/0x420 [ 2171.428705][T25332] __x64_sys_getsockopt+0x1aa/0x250 [ 2171.428724][T25332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2171.428737][T25332] do_syscall_64+0x174/0x580 [ 2171.428754][T25332] ? trace_irq_disable+0x3b/0x140 [ 2171.428766][T25332] ? clear_bhb_loop+0x40/0x90 [ 2171.428781][T25332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2171.428793][T25332] RIP: 0033:0x7f59b024e019 [ 2171.428807][T25332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2171.428818][T25332] RSP: 002b:00007f59ae485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2171.428832][T25332] RAX: ffffffffffffffda RBX: 00007f59b04d6090 RCX: 00007f59b024e019 [ 2171.428842][T25332] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 2171.428850][T25332] RBP: 00007f59ae485090 R08: 0000200000000400 R09: 0000000000000000 [ 2171.428858][T25332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2171.428865][T25332] R13: 00007f59b04d6128 R14: 00007f59b04d6090 R15: 00007ffc2d1bddc8 [ 2171.428884][T25332] [ 2172.006949][T25338] loop7: detected capacity change from 16384 to 16320 [ 2172.067582][ T5732] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2172.319873][ T5732] usb 2-1: config index 0 descriptor too short (expected 65535, got 32) [ 2172.319895][ T5732] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2172.319908][ T5732] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.319919][ T5732] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2172.323190][ T5732] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 2172.323210][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.323222][ T5732] usb 2-1: Product: syz [ 2172.323230][ T5732] usb 2-1: Manufacturer: syz [ 2172.323239][ T5732] usb 2-1: SerialNumber: syz [ 2172.916002][ T5732] usb 2-1: USB disconnect, device number 86 [ 2172.936203][T14277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2172.952512][T14277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2172.974197][T14277] bond0 (unregistering): Released all slaves [ 2173.250515][T25343] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 2173.529231][T25196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2173.529340][T25196] bridge0: port 1(bridge_slave_0) entered disabled state [ 2173.529575][T25196] bridge_slave_0: entered allmulticast mode [ 2173.531771][T25196] bridge_slave_0: entered promiscuous mode [ 2173.651889][T14277] hsr_slave_0: left promiscuous mode [ 2173.652500][T14277] hsr_slave_1: left promiscuous mode [ 2173.653166][T14277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2173.654997][T14277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2173.942033][T25347] FAULT_INJECTION: forcing a failure. [ 2173.942033][T25347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2173.942062][T25347] CPU: 0 UID: 0 PID: 25347 Comm: syz.1.4372 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2173.942081][T25347] Tainted: [L]=SOFTLOCKUP [ 2173.942093][T25347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2173.942101][T25347] Call Trace: [ 2173.942107][T25347] [ 2173.942112][T25347] dump_stack_lvl+0xe8/0x150 [ 2173.942138][T25347] should_fail_ex+0x467/0x600 [ 2173.942162][T25347] _copy_to_user+0x31/0xb0 [ 2173.942179][T25347] simple_read_from_buffer+0xe1/0x170 [ 2173.942197][T25347] proc_fail_nth_read+0x1be/0x230 [ 2173.942215][T25347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2173.942231][T25347] ? rw_verify_area+0x250/0x4d0 [ 2173.942248][T25347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2173.942262][T25347] vfs_read+0x219/0xa90 [ 2173.942282][T25347] ? __pfx_vfs_read+0x10/0x10 [ 2173.942298][T25347] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2173.942316][T25347] ? lockdep_hardirqs_on+0x7a/0x110 [ 2173.942332][T25347] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2173.942348][T25347] ? mutex_lock_nested+0x152/0x1d0 [ 2173.942360][T25347] ? fdget_pos+0x252/0x320 [ 2173.942378][T25347] ksys_read+0x156/0x270 [ 2173.942396][T25347] ? __pfx_ksys_read+0x10/0x10 [ 2173.942416][T25347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2173.942429][T25347] do_syscall_64+0x174/0x580 [ 2173.942445][T25347] ? trace_irq_disable+0x3b/0x140 [ 2173.942458][T25347] ? clear_bhb_loop+0x40/0x90 [ 2173.942473][T25347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2173.942486][T25347] RIP: 0033:0x7f59b020e84e [ 2173.942498][T25347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2173.942509][T25347] RSP: 002b:00007f59ae4a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2173.942524][T25347] RAX: ffffffffffffffda RBX: 00007f59ae4a66c0 RCX: 00007f59b020e84e [ 2173.942533][T25347] RDX: 000000000000000f RSI: 00007f59ae4a60a0 RDI: 0000000000000004 [ 2173.942541][T25347] RBP: 00007f59ae4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 2173.942549][T25347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2173.942557][T25347] R13: 00007f59b04d6038 R14: 00007f59b04d5fa0 R15: 00007ffc2d1bddc8 [ 2173.942576][T25347] [ 2175.075920][T14277] team0 (unregistering): Port device team_slave_1 removed [ 2175.164314][T14277] team0 (unregistering): Port device team_slave_0 removed [ 2175.490196][T25196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2175.490280][T25196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2175.490514][T25196] bridge_slave_1: entered allmulticast mode [ 2175.492400][T25196] bridge_slave_1: entered promiscuous mode [ 2175.691348][T25196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2175.763587][T25196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2176.331993][T25196] team0: Port device team_slave_0 added [ 2176.374928][T25196] team0: Port device team_slave_1 added [ 2177.858994][T25196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2177.859008][T25196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2177.859025][T25196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2177.904519][T25196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2177.904531][T25196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2177.904549][T25196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2178.057850][ T7320] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.059327][T25004] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.059432][T25004] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.059456][T25004] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.059479][T25004] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.059501][T25004] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.059523][T25004] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.461795][T25196] hsr_slave_0: entered promiscuous mode [ 2178.462742][T25196] hsr_slave_1: entered promiscuous mode [ 2178.474745][T25196] debugfs: 'hsr0' already exists in 'hsr' [ 2178.474766][T25196] Cannot create hsr debugfs directory [ 2178.544892][T25376] trusted_key: syz.1.4380 sent an empty control message without MSG_MORE. [ 2181.476202][T25397] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 2183.354029][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2183.384473][T25417] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2183.384511][T25417] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2185.555950][T25251] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.556044][T25251] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.556298][T25251] bridge_slave_0: entered allmulticast mode [ 2185.580038][T25251] bridge_slave_0: entered promiscuous mode [ 2185.678321][T25441] FAULT_INJECTION: forcing a failure. [ 2185.678321][T25441] name failslab, interval 1, probability 100, space 0, times 0 [ 2185.678349][T25441] CPU: 0 UID: 0 PID: 25441 Comm: syz.1.4391 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2185.678368][T25441] Tainted: [L]=SOFTLOCKUP [ 2185.678373][T25441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2185.678380][T25441] Call Trace: [ 2185.678386][T25441] [ 2185.678391][T25441] dump_stack_lvl+0xe8/0x150 [ 2185.678417][T25441] should_fail_ex+0x467/0x600 [ 2185.678441][T25441] should_failslab+0xa8/0x100 [ 2185.678458][T25441] __kmalloc_noprof+0xfe/0x780 [ 2185.678472][T25441] ? tomoyo_encode+0x2ad/0x570 [ 2185.678493][T25441] ? tomoyo_encode+0x2ad/0x570 [ 2185.678516][T25441] tomoyo_encode+0x2ad/0x570 [ 2185.678540][T25441] tomoyo_realpath_from_path+0x5fa/0x640 [ 2185.678563][T25441] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2185.678577][T25441] tomoyo_path_number_perm+0x246/0x5f0 [ 2185.678593][T25441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2185.678606][T25441] ? __lock_acquire+0x683/0x2ce0 [ 2185.678630][T25441] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2185.678647][T25441] ? hook_file_ioctl+0x1f3/0x600 [ 2185.678666][T25441] ? lockdep_hardirqs_on+0x7a/0x110 [ 2185.678697][T25441] ? __fget_files+0x2a/0x420 [ 2185.678713][T25441] ? __fget_files+0x2a/0x420 [ 2185.678725][T25441] ? __fget_files+0x3a8/0x420 [ 2185.678737][T25441] ? __fget_files+0x2a/0x420 [ 2185.678753][T25441] security_file_ioctl+0xc3/0x2a0 [ 2185.678769][T25441] __se_sys_ioctl+0x47/0x170 [ 2185.678786][T25441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.678800][T25441] do_syscall_64+0x174/0x580 [ 2185.678816][T25441] ? trace_irq_disable+0x3b/0x140 [ 2185.678829][T25441] ? clear_bhb_loop+0x40/0x90 [ 2185.678845][T25441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.678857][T25441] RIP: 0033:0x7f59b024e019 [ 2185.678871][T25441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2185.678882][T25441] RSP: 002b:00007f59ae4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2185.678897][T25441] RAX: ffffffffffffffda RBX: 00007f59b04d5fa0 RCX: 00007f59b024e019 [ 2185.678907][T25441] RDX: 0000200000000780 RSI: 000000004048aecb RDI: 0000000000000005 [ 2185.678916][T25441] RBP: 00007f59ae4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 2185.678924][T25441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.678931][T25441] R13: 00007f59b04d6038 R14: 00007f59b04d5fa0 R15: 00007ffc2d1bddc8 [ 2185.678951][T25441] [ 2185.679076][T25441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2185.972892][T25251] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.972970][T25251] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.973167][T25251] bridge_slave_1: entered allmulticast mode [ 2186.002426][T25251] bridge_slave_1: entered promiscuous mode [ 2186.279647][T25447] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2186.279685][T25447] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2186.694272][T25251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2186.695088][T25454] tipc: Started in network mode [ 2186.695102][T25454] tipc: Node identity 4, cluster identity 4711 [ 2186.695110][T25454] tipc: Node number set to 4 [ 2186.766036][T25125] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2186.835759][T25125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2186.904625][T25251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2187.161125][T25125] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2187.182914][T25125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2187.320269][T25125] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2187.338072][ T5725] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2187.399763][T25125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2187.480438][T25125] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2187.484105][T25125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2187.489312][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2187.489339][ T5725] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2187.521025][ T5725] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 2187.521053][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.521066][ T5725] usb 2-1: Product: syz [ 2187.521076][ T5725] usb 2-1: Manufacturer: syz [ 2187.521085][ T5725] usb 2-1: SerialNumber: syz [ 2187.580421][ T5725] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2187.580454][ T5725] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2187.580486][ T5725] usbserial_generic 2-1:1.0: device has no bulk endpoints [ 2187.792762][ T5725] usb 2-1: USB disconnect, device number 87 [ 2187.831542][T25251] team0: Port device team_slave_0 added [ 2188.002740][T25251] team0: Port device team_slave_1 added [ 2188.236038][T25251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2188.236052][T25251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2188.236069][T25251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2188.507183][T25483] FAULT_INJECTION: forcing a failure. [ 2188.507183][T25483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2188.507210][T25483] CPU: 0 UID: 0 PID: 25483 Comm: syz.1.4401 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2188.507229][T25483] Tainted: [L]=SOFTLOCKUP [ 2188.507233][T25483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2188.507241][T25483] Call Trace: [ 2188.507246][T25483] [ 2188.507252][T25483] dump_stack_lvl+0xe8/0x150 [ 2188.507277][T25483] should_fail_ex+0x467/0x600 [ 2188.507301][T25483] _copy_from_user+0x2d/0xb0 [ 2188.507317][T25483] ___sys_recvmsg+0x173/0x5a0 [ 2188.507335][T25483] ? ktime_get_ts64+0xa9/0x410 [ 2188.507351][T25483] ? __pfx____sys_recvmsg+0x10/0x10 [ 2188.507373][T25483] ? __fget_files+0x2a/0x420 [ 2188.507397][T25483] ? __fget_files+0x3a8/0x420 [ 2188.507416][T25483] do_recvmmsg+0x320/0x7f0 [ 2188.507438][T25483] ? __pfx_do_recvmmsg+0x10/0x10 [ 2188.507467][T25483] ? get_timespec64+0x119/0x1b0 [ 2188.507482][T25483] ? __pfx_get_timespec64+0x10/0x10 [ 2188.507502][T25483] __x64_sys_recvmmsg+0x1b7/0x250 [ 2188.507521][T25483] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2188.507543][T25483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2188.507557][T25483] do_syscall_64+0x174/0x580 [ 2188.507574][T25483] ? trace_irq_disable+0x3b/0x140 [ 2188.507587][T25483] ? clear_bhb_loop+0x40/0x90 [ 2188.507602][T25483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2188.507614][T25483] RIP: 0033:0x7f59b024e019 [ 2188.507627][T25483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2188.507638][T25483] RSP: 002b:00007f59ae4a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2188.507653][T25483] RAX: ffffffffffffffda RBX: 00007f59b04d5fa0 RCX: 00007f59b024e019 [ 2188.507663][T25483] RDX: 00000000040001f5 RSI: 00002000000008c0 RDI: 0000000000000004 [ 2188.507671][T25483] RBP: 00007f59ae4a6090 R08: 0000200000008000 R09: 0000000000000000 [ 2188.507679][T25483] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 2188.507687][T25483] R13: 00007f59b04d6038 R14: 00007f59b04d5fa0 R15: 00007ffc2d1bddc8 [ 2188.507706][T25483] [ 2188.911381][T25487] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4402'. [ 2188.912433][T25488] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4402'. [ 2189.297216][T25196] netdevsim netdevsim6 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.491058][T25251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2189.491072][T25251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2189.491099][T25251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2189.626835][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2189.936167][T25251] hsr_slave_0: entered promiscuous mode [ 2189.937115][T25251] hsr_slave_1: entered promiscuous mode [ 2189.951602][T25251] debugfs: 'hsr0' already exists in 'hsr' [ 2189.951622][T25251] Cannot create hsr debugfs directory [ 2189.993362][T25498] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2189.993465][T25498] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2190.584931][T25196] netdevsim netdevsim6 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.639166][T22181] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2190.790713][T22181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2190.790737][T22181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2190.790762][T22181] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2190.790777][T22181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.841600][T22181] usb 2-1: config 0 descriptor?? [ 2191.417318][T25196] netdevsim netdevsim6 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.496378][T25502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.498683][T25502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2192.789844][T22181] usbhid 2-1:0.0: can't add hid device: -71 [ 2192.789931][T22181] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2192.826893][T22181] usb 2-1: USB disconnect, device number 88 [ 2193.429475][T25196] netdevsim netdevsim6 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.057669][T22181] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2194.211999][T22181] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2194.212027][T22181] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2194.235863][T22181] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 2194.235885][T22181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.235898][T22181] usb 2-1: Product: syz [ 2194.235907][T22181] usb 2-1: Manufacturer: syz [ 2194.235915][T22181] usb 2-1: SerialNumber: syz [ 2194.322953][T22181] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2194.322982][T22181] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2194.323012][T22181] usbserial_generic 2-1:1.0: device has no bulk endpoints [ 2194.515812][T22181] usb 2-1: USB disconnect, device number 89 [ 2195.174942][T25125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2195.197619][ T7318] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.197849][ T7318] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.197883][ T7318] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.197905][ T7318] netdevsim netdevsim2 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.320360][T25125] 8021q: adding VLAN 0 to HW filter on device team0 [ 2195.360165][T14277] bridge_slave_1: left allmulticast mode [ 2195.360192][T14277] bridge_slave_1: left promiscuous mode [ 2195.360382][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.362467][T14277] bridge_slave_0: left allmulticast mode [ 2195.362489][T14277] bridge_slave_0: left promiscuous mode [ 2195.362638][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.434817][T14277] bridge_slave_1: left allmulticast mode [ 2195.434846][T14277] bridge_slave_1: left promiscuous mode [ 2195.435027][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.626644][T14277] bridge_slave_0: left allmulticast mode [ 2195.626672][T14277] bridge_slave_0: left promiscuous mode [ 2195.626839][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.619482][T14277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2196.648235][T14277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2196.680788][T14277] bond0 (unregistering): Released all slaves [ 2197.099961][T25579] FAULT_INJECTION: forcing a failure. [ 2197.099961][T25579] name failslab, interval 1, probability 100, space 0, times 0 [ 2197.099988][T25579] CPU: 0 UID: 0 PID: 25579 Comm: syz.1.4429 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2197.100010][T25579] Tainted: [L]=SOFTLOCKUP [ 2197.100015][T25579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2197.100023][T25579] Call Trace: [ 2197.100028][T25579] [ 2197.100034][T25579] dump_stack_lvl+0xe8/0x150 [ 2197.100060][T25579] should_fail_ex+0x467/0x600 [ 2197.100085][T25579] should_failslab+0xa8/0x100 [ 2197.100102][T25579] __kmalloc_noprof+0xfe/0x780 [ 2197.100116][T25579] ? tomoyo_encode+0x2ad/0x570 [ 2197.100132][T25579] ? tomoyo_encode+0x2ad/0x570 [ 2197.100152][T25579] tomoyo_encode+0x2ad/0x570 [ 2197.100172][T25579] tomoyo_realpath_from_path+0x5fa/0x640 [ 2197.100194][T25579] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2197.100209][T25579] tomoyo_path_number_perm+0x246/0x5f0 [ 2197.100224][T25579] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2197.100237][T25579] ? __lock_acquire+0x683/0x2ce0 [ 2197.100260][T25579] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2197.100277][T25579] ? hook_file_ioctl+0x1f3/0x600 [ 2197.100295][T25579] ? lockdep_hardirqs_on+0x7a/0x110 [ 2197.100322][T25579] ? __fget_files+0x2a/0x420 [ 2197.100337][T25579] ? __fget_files+0x2a/0x420 [ 2197.100349][T25579] ? __fget_files+0x3a8/0x420 [ 2197.100361][T25579] ? __fget_files+0x2a/0x420 [ 2197.100377][T25579] security_file_ioctl+0xc3/0x2a0 [ 2197.100392][T25579] __se_sys_ioctl+0x47/0x170 [ 2197.100409][T25579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.100422][T25579] do_syscall_64+0x174/0x580 [ 2197.100439][T25579] ? trace_irq_disable+0x3b/0x140 [ 2197.100453][T25579] ? clear_bhb_loop+0x40/0x90 [ 2197.100467][T25579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.100480][T25579] RIP: 0033:0x7f59b024e019 [ 2197.100493][T25579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2197.100504][T25579] RSP: 002b:00007f59ae4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2197.100520][T25579] RAX: ffffffffffffffda RBX: 00007f59b04d5fa0 RCX: 00007f59b024e019 [ 2197.100530][T25579] RDX: 0000000000000000 RSI: 00000000000007a8 RDI: 0000000000000003 [ 2197.100538][T25579] RBP: 00007f59ae4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 2197.100545][T25579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2197.100553][T25579] R13: 00007f59b04d6038 R14: 00007f59b04d5fa0 R15: 00007ffc2d1bddc8 [ 2197.100573][T25579] [ 2197.100718][T25579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2197.390872][T14277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2197.413402][T14277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2197.432101][T14277] bond0 (unregistering): Released all slaves [ 2197.653490][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 2197.653624][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2198.225016][T25251] netdevsim netdevsim2 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2202.403736][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.403823][ T7321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2202.502864][T14277] hsr_slave_0: left promiscuous mode [ 2202.503667][T14277] hsr_slave_1: left promiscuous mode [ 2202.504251][T14277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2202.508149][T14277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2202.652398][T14277] hsr_slave_0: left promiscuous mode [ 2202.661553][T14277] hsr_slave_1: left promiscuous mode [ 2202.662388][T14277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2202.678272][T14277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2203.648679][T14277] team0 (unregistering): Port device team_slave_1 removed [ 2203.765900][T14277] team0 (unregistering): Port device team_slave_0 removed [ 2204.147847][ T5732] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2204.236764][T14277] team0 (unregistering): Port device team_slave_1 removed [ 2204.262134][T14277] team0 (unregistering): Port device team_slave_0 removed [ 2204.308324][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.308362][ T5732] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2204.310149][ T5732] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 2204.310168][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.310180][ T5732] usb 2-1: Product: syz [ 2204.310190][ T5732] usb 2-1: Manufacturer: syz [ 2204.310198][ T5732] usb 2-1: SerialNumber: syz [ 2204.389281][ T5732] sisusb 2-1:1.0: Invalid USB2VGA device [ 2204.389305][ T5732] sisusb 2-1:1.0: probe with driver sisusb failed with error -22 [ 2205.006635][T25251] netdevsim netdevsim2 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.138423][T14243] usb 2-1: USB disconnect, device number 90 [ 2205.321819][T23860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2205.383258][T23860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2205.386501][T23860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2205.441100][T23860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2205.441611][T23860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2206.242917][T25251] netdevsim netdevsim2 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.909063][T25251] netdevsim netdevsim2 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.780392][T23860] Bluetooth: hci5: command tx timeout [ 2209.903284][T23860] Bluetooth: hci5: command tx timeout [ 2213.470135][T25701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4470'. [ 2213.500220][T23860] Bluetooth: hci5: command tx timeout [ 2215.557001][T23860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2215.592613][T23862] Bluetooth: hci5: command tx timeout [ 2215.723186][T23860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2215.770690][T23860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2215.772450][T23860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2215.772954][T23860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2217.521956][T25751] FAULT_INJECTION: forcing a failure. [ 2217.521956][T25751] name failslab, interval 1, probability 100, space 0, times 0 [ 2217.521983][T25751] CPU: 0 UID: 0 PID: 25751 Comm: syz.0.4480 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2217.522002][T25751] Tainted: [L]=SOFTLOCKUP [ 2217.522007][T25751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2217.522014][T25751] Call Trace: [ 2217.522019][T25751] [ 2217.522025][T25751] dump_stack_lvl+0xe8/0x150 [ 2217.522051][T25751] should_fail_ex+0x467/0x600 [ 2217.522075][T25751] should_failslab+0xa8/0x100 [ 2217.522093][T25751] kmem_cache_alloc_noprof+0xa4/0x650 [ 2217.522107][T25751] ? do_fcntl_add_lease+0x320/0x480 [ 2217.522191][T25751] ? do_fcntl_add_lease+0x320/0x480 [ 2217.522206][T25751] ? __init_waitqueue_head+0xad/0x160 [ 2217.522228][T25751] do_fcntl_add_lease+0x320/0x480 [ 2217.522242][T25751] ? get_pid_task+0x20/0x1f0 [ 2217.522264][T25751] ? __pfx_do_fcntl_add_lease+0x10/0x10 [ 2217.522287][T25751] fcntl_setlease+0x126/0x180 [ 2217.522303][T25751] ? __pfx_fcntl_setlease+0x10/0x10 [ 2217.522324][T25751] do_fcntl+0x8d6/0x19e0 [ 2217.522342][T25751] ? smack_file_fcntl+0x150/0x320 [ 2217.522356][T25751] ? __pfx_do_fcntl+0x10/0x10 [ 2217.522372][T25751] ? __pfx_smack_file_fcntl+0x10/0x10 [ 2217.522390][T25751] ? __fget_files+0x2a/0x420 [ 2217.522408][T25751] ? bpf_lsm_file_fcntl+0x9/0x20 [ 2217.522423][T25751] __se_sys_fcntl+0xcb/0x160 [ 2217.522439][T25751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.522452][T25751] do_syscall_64+0x174/0x580 [ 2217.522469][T25751] ? trace_irq_disable+0x3b/0x140 [ 2217.522482][T25751] ? clear_bhb_loop+0x40/0x90 [ 2217.522497][T25751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.522509][T25751] RIP: 0033:0x7fe6249fe019 [ 2217.522522][T25751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2217.522533][T25751] RSP: 002b:00007fe622c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 2217.522549][T25751] RAX: ffffffffffffffda RBX: 00007fe624c85fa0 RCX: 00007fe6249fe019 [ 2217.522558][T25751] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000004 [ 2217.522566][T25751] RBP: 00007fe622c56090 R08: 0000000000000000 R09: 0000000000000000 [ 2217.522574][T25751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2217.522582][T25751] R13: 00007fe624c86038 R14: 00007fe624c85fa0 R15: 00007fffe197da88 [ 2217.522600][T25751] [ 2218.051903][T15289] Bluetooth: hci1: command tx timeout [ 2219.255643][T25765] FAULT_INJECTION: forcing a failure. [ 2219.255643][T25765] name failslab, interval 1, probability 100, space 0, times 0 [ 2219.255670][T25765] CPU: 0 UID: 0 PID: 25765 Comm: syz.1.4485 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2219.255689][T25765] Tainted: [L]=SOFTLOCKUP [ 2219.255694][T25765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2219.255701][T25765] Call Trace: [ 2219.255707][T25765] [ 2219.255712][T25765] dump_stack_lvl+0xe8/0x150 [ 2219.255746][T25765] should_fail_ex+0x467/0x600 [ 2219.255770][T25765] should_failslab+0xa8/0x100 [ 2219.255791][T25765] __kmalloc_noprof+0xfe/0x780 [ 2219.255805][T25765] ? tomoyo_encode+0x2ad/0x570 [ 2219.255820][T25765] ? tomoyo_encode+0x2ad/0x570 [ 2219.255840][T25765] tomoyo_encode+0x2ad/0x570 [ 2219.255860][T25765] tomoyo_realpath_from_path+0x5fa/0x640 [ 2219.255882][T25765] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2219.255897][T25765] tomoyo_path_number_perm+0x246/0x5f0 [ 2219.255913][T25765] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2219.255926][T25765] ? __lock_acquire+0x683/0x2ce0 [ 2219.255949][T25765] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2219.255966][T25765] ? hook_file_ioctl+0x1f3/0x600 [ 2219.255984][T25765] ? lockdep_hardirqs_on+0x7a/0x110 [ 2219.256012][T25765] ? __fget_files+0x2a/0x420 [ 2219.256027][T25765] ? __fget_files+0x2a/0x420 [ 2219.256039][T25765] ? __fget_files+0x3a8/0x420 [ 2219.256051][T25765] ? __fget_files+0x2a/0x420 [ 2219.256067][T25765] security_file_ioctl+0xc3/0x2a0 [ 2219.256083][T25765] __se_sys_ioctl+0x47/0x170 [ 2219.256099][T25765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2219.256113][T25765] do_syscall_64+0x174/0x580 [ 2219.256129][T25765] ? trace_irq_disable+0x3b/0x140 [ 2219.256143][T25765] ? clear_bhb_loop+0x40/0x90 [ 2219.256158][T25765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2219.256170][T25765] RIP: 0033:0x7f59b024e019 [ 2219.256183][T25765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2219.256194][T25765] RSP: 002b:00007f59ae4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2219.256209][T25765] RAX: ffffffffffffffda RBX: 00007f59b04d5fa0 RCX: 00007f59b024e019 [ 2219.256219][T25765] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2219.256227][T25765] RBP: 00007f59ae4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 2219.256235][T25765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2219.256242][T25765] R13: 00007f59b04d6038 R14: 00007f59b04d5fa0 R15: 00007ffc2d1bddc8 [ 2219.256262][T25765] [ 2219.256289][T25765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2220.196458][T15289] Bluetooth: hci1: command tx timeout [ 2221.573601][T25780] FAULT_INJECTION: forcing a failure. [ 2221.573601][T25780] name failslab, interval 1, probability 100, space 0, times 0 [ 2221.573630][T25780] CPU: 0 UID: 0 PID: 25780 Comm: syz.0.4481 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2221.573649][T25780] Tainted: [L]=SOFTLOCKUP [ 2221.573654][T25780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2221.573662][T25780] Call Trace: [ 2221.573667][T25780] [ 2221.573673][T25780] dump_stack_lvl+0xe8/0x150 [ 2221.573707][T25780] should_fail_ex+0x467/0x600 [ 2221.573731][T25780] should_failslab+0xa8/0x100 [ 2221.573748][T25780] __kmalloc_noprof+0xfe/0x780 [ 2221.573763][T25780] ? tomoyo_encode+0x2ad/0x570 [ 2221.573779][T25780] ? tomoyo_encode+0x2ad/0x570 [ 2221.573799][T25780] tomoyo_encode+0x2ad/0x570 [ 2221.573819][T25780] tomoyo_realpath_from_path+0x5fa/0x640 [ 2221.573841][T25780] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2221.573855][T25780] tomoyo_path_number_perm+0x246/0x5f0 [ 2221.573871][T25780] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2221.573884][T25780] ? __lock_acquire+0x683/0x2ce0 [ 2221.573907][T25780] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2221.573923][T25780] ? hook_file_ioctl+0x1f3/0x600 [ 2221.573940][T25780] ? lockdep_hardirqs_on+0x7a/0x110 [ 2221.573967][T25780] ? __fget_files+0x2a/0x420 [ 2221.573983][T25780] ? __fget_files+0x2a/0x420 [ 2221.573995][T25780] ? __fget_files+0x3a8/0x420 [ 2221.574007][T25780] ? __fget_files+0x2a/0x420 [ 2221.574022][T25780] security_file_ioctl+0xc3/0x2a0 [ 2221.574038][T25780] __se_sys_ioctl+0x47/0x170 [ 2221.574055][T25780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.574073][T25780] do_syscall_64+0x174/0x580 [ 2221.574089][T25780] ? trace_irq_disable+0x3b/0x140 [ 2221.574103][T25780] ? clear_bhb_loop+0x40/0x90 [ 2221.574118][T25780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.574130][T25780] RIP: 0033:0x7fe6249fe019 [ 2221.574149][T25780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2221.574160][T25780] RSP: 002b:00007fe622c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2221.574174][T25780] RAX: ffffffffffffffda RBX: 00007fe624c85fa0 RCX: 00007fe6249fe019 [ 2221.574184][T25780] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 0000000000000005 [ 2221.574192][T25780] RBP: 00007fe622c56090 R08: 0000000000000000 R09: 0000000000000000 [ 2221.574200][T25780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2221.574208][T25780] R13: 00007fe624c86038 R14: 00007fe624c85fa0 R15: 00007fffe197da88 [ 2221.574227][T25780] [ 2221.574240][T25780] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2221.574253][T25780] program syz.0.4481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2222.268996][T15289] Bluetooth: hci1: command tx timeout [ 2222.487234][T23860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2222.565752][T23860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2222.613145][T23860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2222.613894][T23860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2222.642923][T23860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2224.353402][T15289] Bluetooth: hci1: command tx timeout [ 2224.769906][T25641] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.769985][T25641] bridge0: port 1(bridge_slave_0) entered disabled state [ 2224.770441][T25641] bridge_slave_0: entered allmulticast mode [ 2224.814669][T25641] bridge_slave_0: entered promiscuous mode [ 2224.827525][T15289] Bluetooth: hci6: command tx timeout [ 2224.874859][T25641] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.874938][T25641] bridge0: port 2(bridge_slave_1) entered disabled state [ 2224.875356][T25641] bridge_slave_1: entered allmulticast mode [ 2224.952036][T25641] bridge_slave_1: entered promiscuous mode [ 2225.336170][T25641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2225.395460][T25641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2225.793502][T25641] team0: Port device team_slave_0 added [ 2226.050650][T25641] team0: Port device team_slave_1 added [ 2226.067413][T14243] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 2226.231787][T14243] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2226.231809][T14243] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2226.231822][T14243] usb 2-1: Product: syz [ 2226.231831][T14243] usb 2-1: Manufacturer: syz [ 2226.231840][T14243] usb 2-1: SerialNumber: syz [ 2226.239394][T14243] usb 2-1: config 0 descriptor?? [ 2226.911465][T15289] Bluetooth: hci6: command tx timeout [ 2227.292910][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 2228.114147][T25868] binder: BINDER_SET_CONTEXT_MGR already set [ 2228.114160][T25868] binder: 25867:25868 ioctl 4018620d 200000000100 returned -16 [ 2228.116354][T25868] binder: BINDER_SET_CONTEXT_MGR already set [ 2228.116363][T25868] binder: 25867:25868 ioctl 4018620d 200000001000 returned -16 [ 2228.156419][T25869] FAULT_INJECTION: forcing a failure. [ 2228.156419][T25869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2228.156445][T25869] CPU: 0 UID: 0 PID: 25869 Comm: syz.1.4509 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2228.156464][T25869] Tainted: [L]=SOFTLOCKUP [ 2228.156469][T25869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2228.156476][T25869] Call Trace: [ 2228.156482][T25869] [ 2228.156488][T25869] dump_stack_lvl+0xe8/0x150 [ 2228.156515][T25869] should_fail_ex+0x467/0x600 [ 2228.156538][T25869] _copy_from_user+0x2d/0xb0 [ 2228.156555][T25869] ___sys_recvmsg+0x173/0x5a0 [ 2228.156573][T25869] ? ktime_get_ts64+0xa9/0x410 [ 2228.156589][T25869] ? __pfx____sys_recvmsg+0x10/0x10 [ 2228.156608][T25869] ? __fget_files+0x2a/0x420 [ 2228.156632][T25869] ? __fget_files+0x3a8/0x420 [ 2228.156651][T25869] do_recvmmsg+0x320/0x7f0 [ 2228.156673][T25869] ? __pfx_do_recvmmsg+0x10/0x10 [ 2228.156696][T25869] ? get_timespec64+0x119/0x1b0 [ 2228.156711][T25869] ? __pfx_get_timespec64+0x10/0x10 [ 2228.156731][T25869] __x64_sys_recvmmsg+0x1b7/0x250 [ 2228.156750][T25869] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2228.156772][T25869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2228.156786][T25869] do_syscall_64+0x174/0x580 [ 2228.156803][T25869] ? trace_irq_disable+0x3b/0x140 [ 2228.156816][T25869] ? clear_bhb_loop+0x40/0x90 [ 2228.156832][T25869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2228.156844][T25869] RIP: 0033:0x7f59b024e019 [ 2228.156857][T25869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2228.156868][T25869] RSP: 002b:00007f59ae485028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2228.156882][T25869] RAX: ffffffffffffffda RBX: 00007f59b04d6090 RCX: 00007f59b024e019 [ 2228.156892][T25869] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 2228.156901][T25869] RBP: 00007f59ae485090 R08: 0000200000003700 R09: 0000000000000000 [ 2228.156909][T25869] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 2228.156917][T25869] R13: 00007f59b04d6128 R14: 00007f59b04d6090 R15: 00007ffc2d1bddc8 [ 2228.156936][T25869] [ 2228.730161][T14243] usb 2-1: USB disconnect, device number 91 [ 2228.987586][T15289] Bluetooth: hci6: command tx timeout [ 2229.092969][T25641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2229.092983][T25641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2229.093001][T25641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2229.600853][T25641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2229.600866][T25641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2229.600884][T25641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2231.067588][T15289] Bluetooth: hci6: command tx timeout [ 2231.088174][T25900] FAULT_INJECTION: forcing a failure. [ 2231.088174][T25900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2231.088209][T25900] CPU: 0 UID: 0 PID: 25900 Comm: syz.0.4523 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2231.088228][T25900] Tainted: [L]=SOFTLOCKUP [ 2231.088232][T25900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2231.088240][T25900] Call Trace: [ 2231.088245][T25900] [ 2231.088252][T25900] dump_stack_lvl+0xe8/0x150 [ 2231.088277][T25900] should_fail_ex+0x467/0x600 [ 2231.088301][T25900] _copy_from_user+0x2d/0xb0 [ 2231.088317][T25900] ___sys_recvmsg+0x173/0x5a0 [ 2231.088338][T25900] ? ktime_get_ts64+0xa9/0x410 [ 2231.088354][T25900] ? __pfx____sys_recvmsg+0x10/0x10 [ 2231.088373][T25900] ? __fget_files+0x2a/0x420 [ 2231.088398][T25900] ? __fget_files+0x3a8/0x420 [ 2231.088417][T25900] do_recvmmsg+0x320/0x7f0 [ 2231.088439][T25900] ? __pfx_do_recvmmsg+0x10/0x10 [ 2231.088463][T25900] ? get_timespec64+0x119/0x1b0 [ 2231.088477][T25900] ? __pfx_get_timespec64+0x10/0x10 [ 2231.088498][T25900] __x64_sys_recvmmsg+0x1b7/0x250 [ 2231.088517][T25900] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2231.088539][T25900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2231.088553][T25900] do_syscall_64+0x174/0x580 [ 2231.088570][T25900] ? trace_irq_disable+0x3b/0x140 [ 2231.088582][T25900] ? clear_bhb_loop+0x40/0x90 [ 2231.088597][T25900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2231.088609][T25900] RIP: 0033:0x7fe6249fe019 [ 2231.088622][T25900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2231.088633][T25900] RSP: 002b:00007fe622c35028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2231.088648][T25900] RAX: ffffffffffffffda RBX: 00007fe624c86090 RCX: 00007fe6249fe019 [ 2231.088665][T25900] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 2231.088674][T25900] RBP: 00007fe622c35090 R08: 0000200000003700 R09: 0000000000000000 [ 2231.088682][T25900] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 2231.088690][T25900] R13: 00007fe624c86128 R14: 00007fe624c86090 R15: 00007fffe197da88 [ 2231.088709][T25900] [ 2231.361315][T25641] hsr_slave_0: entered promiscuous mode [ 2231.366870][T25641] hsr_slave_1: entered promiscuous mode [ 2232.045602][T25917] Bluetooth: MGMT ver 1.23 [ 2236.977799][T25735] bridge0: port 1(bridge_slave_0) entered blocking state [ 2236.977886][T25735] bridge0: port 1(bridge_slave_0) entered disabled state [ 2236.978073][T25735] bridge_slave_0: entered allmulticast mode [ 2236.984670][T25735] bridge_slave_0: entered promiscuous mode [ 2237.054707][T26014] FAULT_INJECTION: forcing a failure. [ 2237.054707][T26014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2237.054734][T26014] CPU: 0 UID: 0 PID: 26014 Comm: syz.1.4568 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2237.054753][T26014] Tainted: [L]=SOFTLOCKUP [ 2237.054757][T26014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2237.054765][T26014] Call Trace: [ 2237.054770][T26014] [ 2237.054775][T26014] dump_stack_lvl+0xe8/0x150 [ 2237.054801][T26014] should_fail_ex+0x467/0x600 [ 2237.054824][T26014] _copy_from_iter+0x1d3/0x1660 [ 2237.054838][T26014] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2237.054856][T26014] ? __pfx_policy_nodemask+0x10/0x10 [ 2237.054873][T26014] ? unwind_next_frame+0x8f/0x2550 [ 2237.054889][T26014] ? __pfx__copy_from_iter+0x10/0x10 [ 2237.054904][T26014] ? alloc_pages_mpol+0x115/0x280 [ 2237.054928][T26014] copy_page_from_iter+0x219/0x2d0 [ 2237.054944][T26014] tun_get_user+0x1b68/0x4380 [ 2237.055020][T26014] ? is_bpf_text_address+0x292/0x2b0 [ 2237.055036][T26014] ? tun_get_user+0x6e7/0x4380 [ 2237.055060][T26014] ? __pfx_tun_get_user+0x10/0x10 [ 2237.055073][T26014] ? __lock_acquire+0x683/0x2ce0 [ 2237.055095][T26014] ? ref_tracker_alloc+0x353/0x4c0 [ 2237.055109][T26014] ? get_pid_task+0x20/0x1f0 [ 2237.055130][T26014] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2237.055143][T26014] ? tun_get+0x1c/0x2f0 [ 2237.055155][T26014] ? tun_get+0x1c/0x2f0 [ 2237.055169][T26014] ? tun_get+0x1c/0x2f0 [ 2237.055180][T26014] ? tun_get+0x1c/0x2f0 [ 2237.055194][T26014] tun_chr_write_iter+0x119/0x200 [ 2237.055230][T26014] vfs_write+0x61e/0xbb0 [ 2237.055251][T26014] ? __pfx_vfs_write+0x10/0x10 [ 2237.055273][T26014] ? __fget_files+0x2a/0x420 [ 2237.055292][T26014] ksys_write+0x156/0x270 [ 2237.055309][T26014] ? __pfx_ksys_write+0x10/0x10 [ 2237.055330][T26014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2237.055344][T26014] do_syscall_64+0x174/0x580 [ 2237.055361][T26014] ? trace_irq_disable+0x3b/0x140 [ 2237.055374][T26014] ? clear_bhb_loop+0x40/0x90 [ 2237.055389][T26014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2237.055402][T26014] RIP: 0033:0x7f59b020e84e [ 2237.055415][T26014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2237.055426][T26014] RSP: 002b:00007f59ae4a5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2237.055441][T26014] RAX: ffffffffffffffda RBX: 00007f59ae4a66c0 RCX: 00007f59b020e84e [ 2237.055450][T26014] RDX: 0000000000000072 RSI: 0000200000000040 RDI: 00000000000000c8 [ 2237.055458][T26014] RBP: 00007f59ae4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 2237.055466][T26014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2237.055474][T26014] R13: 00007f59b04d6038 R14: 00007f59b04d5fa0 R15: 00007ffc2d1bddc8 [ 2237.055493][T26014] [ 2237.644942][T25735] bridge0: port 2(bridge_slave_1) entered blocking state [ 2237.645020][T25735] bridge0: port 2(bridge_slave_1) entered disabled state [ 2237.645485][T25735] bridge_slave_1: entered allmulticast mode [ 2237.673545][T25735] bridge_slave_1: entered promiscuous mode [ 2237.889863][T25789] bridge0: port 1(bridge_slave_0) entered blocking state [ 2237.889942][T25789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2237.890191][T25789] bridge_slave_0: entered allmulticast mode [ 2237.894746][T25789] bridge_slave_0: entered promiscuous mode [ 2237.985645][T25789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2237.985723][T25789] bridge0: port 2(bridge_slave_1) entered disabled state [ 2237.986084][T25789] bridge_slave_1: entered allmulticast mode [ 2238.021048][T25789] bridge_slave_1: entered promiscuous mode [ 2238.054262][T25735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2238.488452][T25735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2239.270913][ T7321] bridge_slave_1: left allmulticast mode [ 2239.270941][ T7321] bridge_slave_1: left promiscuous mode [ 2239.271128][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2239.320010][ T7321] bridge_slave_0: left allmulticast mode [ 2239.320038][ T7321] bridge_slave_0: left promiscuous mode [ 2239.320213][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2242.876189][T26068] fuse: Unknown parameter 'use00000000000000000000' [ 2246.444091][T26084] FAULT_INJECTION: forcing a failure. [ 2246.444091][T26084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2246.444119][T26084] CPU: 0 UID: 0 PID: 26084 Comm: syz.1.4600 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2246.444137][T26084] Tainted: [L]=SOFTLOCKUP [ 2246.444142][T26084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2246.444150][T26084] Call Trace: [ 2246.444155][T26084] [ 2246.444161][T26084] dump_stack_lvl+0xe8/0x150 [ 2246.444190][T26084] should_fail_ex+0x467/0x600 [ 2246.444217][T26084] _copy_from_user+0x2d/0xb0 [ 2246.444233][T26084] ___sys_recvmsg+0x173/0x5a0 [ 2246.444253][T26084] ? ktime_get_ts64+0xa9/0x410 [ 2246.444270][T26084] ? __pfx____sys_recvmsg+0x10/0x10 [ 2246.444290][T26084] ? __fget_files+0x2a/0x420 [ 2246.444314][T26084] ? __fget_files+0x3a8/0x420 [ 2246.444333][T26084] do_recvmmsg+0x320/0x7f0 [ 2246.444354][T26084] ? __pfx_do_recvmmsg+0x10/0x10 [ 2246.444378][T26084] ? get_timespec64+0x119/0x1b0 [ 2246.444393][T26084] ? __pfx_get_timespec64+0x10/0x10 [ 2246.444413][T26084] __x64_sys_recvmmsg+0x1b7/0x250 [ 2246.444433][T26084] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2246.444455][T26084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2246.444470][T26084] do_syscall_64+0x174/0x580 [ 2246.444489][T26084] ? trace_irq_disable+0x3b/0x140 [ 2246.444503][T26084] ? clear_bhb_loop+0x40/0x90 [ 2246.444519][T26084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2246.444539][T26084] RIP: 0033:0x7f59b024e019 [ 2246.444553][T26084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2246.444564][T26084] RSP: 002b:00007f59ae485028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2246.444578][T26084] RAX: ffffffffffffffda RBX: 00007f59b04d6090 RCX: 00007f59b024e019 [ 2246.444588][T26084] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 2246.444596][T26084] RBP: 00007f59ae485090 R08: 0000200000003700 R09: 0000000000000000 [ 2246.444605][T26084] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 2246.444613][T26084] R13: 00007f59b04d6128 R14: 00007f59b04d6090 R15: 00007ffc2d1bddc8 [ 2246.444631][T26084] [ 2247.198742][ T7321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2247.202263][ T7321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2247.204121][ T7321] bond0 (unregistering): Released all slaves [ 2247.401806][T26088] FAULT_INJECTION: forcing a failure. [ 2247.401806][T26088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2247.401848][T26088] CPU: 0 UID: 0 PID: 26088 Comm: syz.0.4601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2247.401867][T26088] Tainted: [L]=SOFTLOCKUP [ 2247.401872][T26088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2247.401880][T26088] Call Trace: [ 2247.401885][T26088] [ 2247.401891][T26088] dump_stack_lvl+0xe8/0x150 [ 2247.401917][T26088] should_fail_ex+0x467/0x600 [ 2247.401941][T26088] _copy_from_user+0x2d/0xb0 [ 2247.401957][T26088] ___sys_recvmsg+0x173/0x5a0 [ 2247.401975][T26088] ? ktime_get_ts64+0xa9/0x410 [ 2247.401991][T26088] ? __pfx____sys_recvmsg+0x10/0x10 [ 2247.402011][T26088] ? __fget_files+0x2a/0x420 [ 2247.402039][T26088] ? __fget_files+0x3a8/0x420 [ 2247.402066][T26088] do_recvmmsg+0x320/0x7f0 [ 2247.402088][T26088] ? __pfx_do_recvmmsg+0x10/0x10 [ 2247.402113][T26088] ? get_timespec64+0x119/0x1b0 [ 2247.402127][T26088] ? __pfx_get_timespec64+0x10/0x10 [ 2247.402148][T26088] __x64_sys_recvmmsg+0x1b7/0x250 [ 2247.402167][T26088] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2247.402190][T26088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2247.402203][T26088] do_syscall_64+0x174/0x580 [ 2247.402220][T26088] ? trace_irq_disable+0x3b/0x140 [ 2247.402233][T26088] ? clear_bhb_loop+0x40/0x90 [ 2247.402249][T26088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2247.402261][T26088] RIP: 0033:0x7fe6249fe019 [ 2247.402274][T26088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2247.402286][T26088] RSP: 002b:00007fe622c35028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2247.402300][T26088] RAX: ffffffffffffffda RBX: 00007fe624c86090 RCX: 00007fe6249fe019 [ 2247.402310][T26088] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 2247.402318][T26088] RBP: 00007fe622c35090 R08: 0000200000003700 R09: 0000000000000000 [ 2247.402326][T26088] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 2247.402334][T26088] R13: 00007fe624c86128 R14: 00007fe624c86090 R15: 00007fffe197da88 [ 2247.402353][T26088] [ 2247.676277][T25789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2247.820148][T25789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2247.959010][T26090] netlink: 'syz.1.4602': attribute type 10 has an invalid length. [ 2248.970810][T26113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4611'. [ 2249.195674][T26116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4613'. [ 2249.497894][T25735] team0: Port device team_slave_0 added [ 2249.603368][T25735] team0: Port device team_slave_1 added [ 2249.702849][ T7321] hsr_slave_0: left promiscuous mode [ 2249.703608][ T7321] hsr_slave_1: left promiscuous mode [ 2249.704235][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2249.704766][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2250.195552][T26136] 0x000000000010-0x000000000020 : "" [ 2250.293174][T26136] ftl_cs: FTL header corrupt! [ 2254.221735][ T7321] team0 (unregistering): Port device team_slave_1 removed [ 2254.273749][ T7321] team0 (unregistering): Port device team_slave_0 removed [ 2254.714528][T26137] 0x000000000010-0x000000000020 : "" [ 2254.815120][T25789] team0: Port device team_slave_0 added [ 2254.831734][T25789] team0: Port device team_slave_1 added [ 2254.852136][T26137] ftl_cs: FTL header corrupt! [ 2255.966460][T25735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2255.966474][T25735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2255.966492][T25735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2256.151707][T25735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2256.151722][T25735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2256.151739][T25735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2256.289887][T25789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2256.289901][T25789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2256.289919][T25789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2256.381201][T25789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2256.381215][T25789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2256.381232][T25789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2257.032539][T25735] hsr_slave_0: entered promiscuous mode [ 2257.033518][T25735] hsr_slave_1: entered promiscuous mode [ 2257.065794][T25735] debugfs: 'hsr0' already exists in 'hsr' [ 2257.065815][T25735] Cannot create hsr debugfs directory [ 2257.285384][T26193] FAULT_INJECTION: forcing a failure. [ 2257.285384][T26193] name failslab, interval 1, probability 100, space 0, times 0 [ 2257.285411][T26193] CPU: 0 UID: 0 PID: 26193 Comm: syz.1.4636 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2257.285430][T26193] Tainted: [L]=SOFTLOCKUP [ 2257.285434][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2257.285442][T26193] Call Trace: [ 2257.285448][T26193] [ 2257.285453][T26193] dump_stack_lvl+0xe8/0x150 [ 2257.285490][T26193] should_fail_ex+0x467/0x600 [ 2257.285514][T26193] should_failslab+0xa8/0x100 [ 2257.285531][T26193] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 2257.285546][T26193] ? __get_vm_area_node+0x136/0x300 [ 2257.285566][T26193] ? __get_vm_area_node+0x136/0x300 [ 2257.285588][T26193] __get_vm_area_node+0x136/0x300 [ 2257.285610][T26193] __vmalloc_node_range_noprof+0x358/0x1730 [ 2257.285624][T26193] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 2257.285643][T26193] ? is_bpf_text_address+0x26/0x2b0 [ 2257.285668][T26193] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2257.285680][T26193] ? is_bpf_text_address+0x26/0x2b0 [ 2257.285696][T26193] ? kernel_text_address+0xa5/0xe0 [ 2257.285713][T26193] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 2257.285725][T26193] __vmalloc_noprof+0xd2/0x120 [ 2257.285738][T26193] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 2257.285753][T26193] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 2257.285766][T26193] ? bpf_prog_alloc+0x2a/0x1a0 [ 2257.285780][T26193] bpf_prog_alloc+0x3c/0x1a0 [ 2257.285795][T26193] bpf_prog_load+0x7f8/0x1c00 [ 2257.285815][T26193] ? __pfx_bpf_prog_load+0x10/0x10 [ 2257.285843][T26193] __sys_bpf+0xd0d/0xd90 [ 2257.285860][T26193] ? __pfx___sys_bpf+0x10/0x10 [ 2257.285875][T26193] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2257.285896][T26193] ? rt_mutex_slowunlock+0x219/0x460 [ 2257.285919][T26193] ? ksys_write+0x248/0x270 [ 2257.285937][T26193] ? __pfx_ksys_write+0x10/0x10 [ 2257.285956][T26193] __x64_sys_bpf+0xba/0xd0 [ 2257.285976][T26193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.285989][T26193] do_syscall_64+0x174/0x580 [ 2257.286006][T26193] ? trace_irq_disable+0x3b/0x140 [ 2257.286019][T26193] ? clear_bhb_loop+0x40/0x90 [ 2257.286034][T26193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.286046][T26193] RIP: 0033:0x7f59b024e019 [ 2257.286060][T26193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2257.286071][T26193] RSP: 002b:00007f59ae485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2257.286086][T26193] RAX: ffffffffffffffda RBX: 00007f59b04d6090 RCX: 00007f59b024e019 [ 2257.286095][T26193] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 2257.286103][T26193] RBP: 00007f59ae485090 R08: 0000000000000000 R09: 0000000000000000 [ 2257.286111][T26193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2257.286118][T26193] R13: 00007f59b04d6128 R14: 00007f59b04d6090 R15: 00007ffc2d1bddc8 [ 2257.286155][T26193] [ 2257.286171][T26193] syz.1.4636: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2257.286216][T26193] CPU: 0 UID: 0 PID: 26193 Comm: syz.1.4636 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2257.286233][T26193] Tainted: [L]=SOFTLOCKUP [ 2257.286237][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2257.286244][T26193] Call Trace: [ 2257.286249][T26193] [ 2257.286253][T26193] dump_stack_lvl+0xe8/0x150 [ 2257.286272][T26193] warn_alloc+0x24c/0x270 [ 2257.286290][T26193] ? __pfx_warn_alloc+0x10/0x10 [ 2257.286308][T26193] ? __get_vm_area_node+0x2af/0x300 [ 2257.286331][T26193] __vmalloc_node_range_noprof+0x37d/0x1730 [ 2257.286348][T26193] ? is_bpf_text_address+0x26/0x2b0 [ 2257.286377][T26193] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2257.286389][T26193] ? is_bpf_text_address+0x26/0x2b0 [ 2257.286405][T26193] ? kernel_text_address+0xa5/0xe0 [ 2257.286421][T26193] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 2257.286433][T26193] __vmalloc_noprof+0xd2/0x120 [ 2257.286445][T26193] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 2257.286460][T26193] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 2257.286506][T26193] ? bpf_prog_alloc+0x2a/0x1a0 [ 2257.286521][T26193] bpf_prog_alloc+0x3c/0x1a0 [ 2257.286536][T26193] bpf_prog_load+0x7f8/0x1c00 [ 2257.286556][T26193] ? __pfx_bpf_prog_load+0x10/0x10 [ 2257.286584][T26193] __sys_bpf+0xd0d/0xd90 [ 2257.286602][T26193] ? __pfx___sys_bpf+0x10/0x10 [ 2257.286617][T26193] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2257.286636][T26193] ? rt_mutex_slowunlock+0x219/0x460 [ 2257.286660][T26193] ? ksys_write+0x248/0x270 [ 2257.286677][T26193] ? __pfx_ksys_write+0x10/0x10 [ 2257.286695][T26193] __x64_sys_bpf+0xba/0xd0 [ 2257.286714][T26193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.286727][T26193] do_syscall_64+0x174/0x580 [ 2257.286743][T26193] ? trace_irq_disable+0x3b/0x140 [ 2257.286755][T26193] ? clear_bhb_loop+0x40/0x90 [ 2257.286770][T26193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.286782][T26193] RIP: 0033:0x7f59b024e019 [ 2257.286792][T26193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2257.286803][T26193] RSP: 002b:00007f59ae485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2257.286815][T26193] RAX: ffffffffffffffda RBX: 00007f59b04d6090 RCX: 00007f59b024e019 [ 2257.286824][T26193] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 2257.286832][T26193] RBP: 00007f59ae485090 R08: 0000000000000000 R09: 0000000000000000 [ 2257.286840][T26193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2257.286847][T26193] R13: 00007f59b04d6128 R14: 00007f59b04d6090 R15: 00007ffc2d1bddc8 [ 2257.286866][T26193] [ 2257.313275][T26193] Mem-Info: [ 2257.313286][T26193] active_anon:218 inactive_anon:7230 isolated_anon:0 [ 2257.313286][T26193] active_file:28569 inactive_file:6573 isolated_file:0 [ 2257.313286][T26193] unevictable:768 dirty:153 writeback:0 [ 2257.313286][T26193] slab_reclaimable:9136 slab_unreclaimable:113493 [ 2257.313286][T26193] mapped:30926 shmem:1970 pagetables:2512 [ 2257.313286][T26193] sec_pagetables:0 bounce:0 [ 2257.313286][T26193] kernel_misc_reclaimable:0 [ 2257.313286][T26193] free:1315832 free_pcp:2426 free_cma:0 [ 2257.313321][T26193] Node 0 active_anon:872kB inactive_anon:28920kB active_file:106636kB inactive_file:24520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123356kB dirty:612kB writeback:0kB shmem:6344kB kernel_stack:13504kB pagetables:9916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2257.313353][T26193] Node 1 active_anon:0kB inactive_anon:0kB active_file:7640kB inactive_file:1772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:348kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2257.313383][T26193] Node 0 DMA free:15332kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 2257.313420][T26193] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 2257.313441][T26193] Node 0 DMA32 free:1321928kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:872kB inactive_anon:28920kB active_file:106636kB inactive_file:24520kB unevictable:1536kB writepending:612kB zspages:264kB present:3129332kB managed:2560536kB mlocked:0kB bounce:0kB free_pcp:9664kB local_pcp:9664kB free_cma:0kB [ 2257.313486][T26193] lowmem_reserve[]: 0 0 1 1 1 [ 2257.313505][T26193] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2257.313609][T26193] lowmem_reserve[]: 0 0 0 0 0 [ 2257.313630][T26193] Node 1 Normal free:3926068kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:7640kB inactive_file:1772kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2257.313667][T26193] lowmem_reserve[]: 0 0 0 0 0 [ 2257.313686][T26193] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 3*4096kB (UM) = 15332kB [ 2257.313775][T26193] Node 0 DMA32: 4493*4kB (UM) 1755*8kB (UME) 1501*16kB (UME) 616*32kB (UME) 1223*64kB (UME) 904*128kB (UME) 550*256kB (UM) 356*512kB (UME) 228*1024kB (UME) 112*2048kB (UME) 65*4096kB (UM) = 1321884kB [ 2257.313867][T26193] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2257.313924][T26193] Node 1 Normal: 91*4kB (UME) 125*8kB (UM) 98*16kB (UME) 126*32kB (UME) 112*64kB (UME) 80*128kB (UME) 67*256kB (UME) 35*512kB (UME) 26*1024kB (UM) 27*2048kB (UME) 924*4096kB (UM) = 3926068kB [ 2257.314016][T26193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2257.314027][T26193] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2257.314037][T26193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2257.314046][T26193] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2257.314056][T26193] 37110 total pagecache pages [ 2257.314061][T26193] 0 pages in swap cache [ 2257.314066][T26193] Free swap = 124880kB [ 2257.314070][T26193] Total swap = 124996kB [ 2257.314075][T26193] 2097051 pages RAM [ 2257.314080][T26193] 0 pages HighMem/MovableOnly [ 2257.314084][T26193] 424839 pages reserved [ 2257.314088][T26193] 0 pages cma reserved [ 2262.859376][T25789] hsr_slave_0: entered promiscuous mode [ 2262.860472][T25789] hsr_slave_1: entered promiscuous mode [ 2262.884006][T25789] debugfs: 'hsr0' already exists in 'hsr' [ 2262.884027][T25789] Cannot create hsr debugfs directory [ 2264.140259][T26229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4649'. [ 2266.376704][T23860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2266.450401][T23860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2266.454883][T23860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2266.482859][T23860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2266.519957][T23860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2266.915724][T26275] [ 2266.915733][T26275] ====================================================== [ 2266.915803][T26275] WARNING: possible circular locking dependency detected [ 2266.915817][T26275] syzkaller #0 Tainted: G L [ 2266.915825][T26275] ------------------------------------------------------ [ 2266.915846][T26275] syz.1.4663/26275 is trying to acquire lock: [ 2266.915854][T26275] ffff8880234f21e8 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: configfs_depend_item_unlocked+0x153/0x420 [ 2266.915940][T26275] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2266.915940][T26275] but task is already holding lock: [ 2266.915944][T26275] ffff888060dded10 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590 [ 2266.916001][T26275] [ 2266.916001][T26275] which lock already depends on the new lock. [ 2266.916001][T26275] [ 2266.916006][T26275] [ 2266.916006][T26275] the existing dependency chain (in reverse order) is: [ 2266.916010][T26275] [ 2266.916010][T26275] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 2266.916032][T26275] mutex_lock_nested+0x5a/0x1d0 [ 2266.916045][T26275] tcm_set_name+0x2b/0xd0 [ 2266.916061][T26275] function_make+0x1a8/0x360 [ 2266.916094][T26275] configfs_mkdir+0x4f6/0x9e0 [ 2266.916107][T26275] vfs_mkdir+0x402/0x620 [ 2266.916123][T26275] filename_mkdirat+0x289/0x520 [ 2266.916138][T26275] __se_sys_mkdir+0x34/0x150 [ 2266.916153][T26275] do_syscall_64+0x174/0x580 [ 2266.916168][T26275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.916180][T26275] [ 2266.916180][T26275] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 2266.916196][T26275] mutex_lock_nested+0x5a/0x1d0 [ 2266.916207][T26275] configfs_rmdir+0x5f0/0x950 [ 2266.916220][T26275] vfs_rmdir+0x3e9/0x6b0 [ 2266.916235][T26275] filename_rmdir+0x292/0x520 [ 2266.916250][T26275] __se_sys_rmdir+0x2e/0x140 [ 2266.916265][T26275] do_syscall_64+0x174/0x580 [ 2266.916279][T26275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.916291][T26275] [ 2266.916291][T26275] -> #0 (&sb->s_type->i_mutex_key#29){++++}-{4:4}: [ 2266.916309][T26275] __lock_acquire+0x1520/0x2ce0 [ 2266.916322][T26275] lock_acquire+0x106/0x350 [ 2266.916333][T26275] down_write+0x3a/0x50 [ 2266.916348][T26275] configfs_depend_item_unlocked+0x153/0x420 [ 2266.916363][T26275] usbg_make_tpg+0x1f6/0x590 [ 2266.916378][T26275] target_fabric_make_tpg+0xa8/0x6d0 [ 2266.916442][T26275] configfs_mkdir+0x4f6/0x9e0 [ 2266.916461][T26275] vfs_mkdir+0x402/0x620 [ 2266.916476][T26275] filename_mkdirat+0x289/0x520 [ 2266.916490][T26275] __se_sys_mkdir+0x34/0x150 [ 2266.916505][T26275] do_syscall_64+0x174/0x580 [ 2266.916519][T26275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.916530][T26275] [ 2266.916530][T26275] other info that might help us debug this: [ 2266.916530][T26275] [ 2266.916535][T26275] Chain exists of: [ 2266.916535][T26275] &sb->s_type->i_mutex_key#29 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 2266.916535][T26275] [ 2266.916562][T26275] Possible unsafe locking scenario: [ 2266.916562][T26275] [ 2266.916567][T26275] CPU0 CPU1 [ 2266.916571][T26275] ---- ---- [ 2266.916579][T26275] lock(&opts->dep_lock); [ 2266.916587][T26275] lock(gadget_subsys.su_mutex); [ 2266.916596][T26275] lock(&opts->dep_lock); [ 2266.916608][T26275] lock(&sb->s_type->i_mutex_key#29); [ 2266.916619][T26275] [ 2266.916619][T26275] *** DEADLOCK *** [ 2266.916619][T26275] [ 2266.916622][T26275] 5 locks held by syz.1.4663/26275: [ 2266.916629][T26275] #0: ffff88801bb80500 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2266.916663][T26275] #1: ffff88803ce0b788 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 2266.916699][T26275] #2: ffffffff8ec979e0 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b0/0x9e0 [ 2266.916728][T26275] #3: ffffffff8efcd918 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf7/0x590 [ 2266.916760][T26275] #4: ffff888060dded10 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590 [ 2266.916790][T26275] [ 2266.916790][T26275] stack backtrace: [ 2266.916800][T26275] CPU: 0 UID: 0 PID: 26275 Comm: syz.1.4663 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2266.916818][T26275] Tainted: [L]=SOFTLOCKUP [ 2266.916822][T26275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2266.916830][T26275] Call Trace: [ 2266.916835][T26275] [ 2266.916841][T26275] dump_stack_lvl+0xe8/0x150 [ 2266.916859][T26275] print_circular_bug+0x2e1/0x300 [ 2266.916876][T26275] check_noncircular+0x12e/0x150 [ 2266.916892][T26275] __lock_acquire+0x1520/0x2ce0 [ 2266.916910][T26275] ? configfs_depend_item_unlocked+0x153/0x420 [ 2266.916925][T26275] lock_acquire+0x106/0x350 [ 2266.916936][T26275] ? configfs_depend_item_unlocked+0x153/0x420 [ 2266.916954][T26275] down_write+0x3a/0x50 [ 2266.916970][T26275] ? configfs_depend_item_unlocked+0x153/0x420 [ 2266.916984][T26275] configfs_depend_item_unlocked+0x153/0x420 [ 2266.917000][T26275] usbg_make_tpg+0x1f6/0x590 [ 2266.917017][T26275] ? __pfx_usbg_make_tpg+0x10/0x10 [ 2266.917035][T26275] ? lockdep_hardirqs_on+0x7a/0x110 [ 2266.917051][T26275] target_fabric_make_tpg+0xa8/0x6d0 [ 2266.917070][T26275] configfs_mkdir+0x4f6/0x9e0 [ 2266.917086][T26275] ? __pfx_configfs_mkdir+0x10/0x10 [ 2266.917100][T26275] ? generic_permission+0x2bf/0x670 [ 2266.917113][T26275] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 2266.917132][T26275] vfs_mkdir+0x402/0x620 [ 2266.917148][T26275] filename_mkdirat+0x289/0x520 [ 2266.917165][T26275] ? __pfx_filename_mkdirat+0x10/0x10 [ 2266.917182][T26275] ? do_getname+0x151/0x250 [ 2266.917200][T26275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.917211][T26275] __se_sys_mkdir+0x34/0x150 [ 2266.917227][T26275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.917239][T26275] do_syscall_64+0x174/0x580 [ 2266.917254][T26275] ? trace_irq_disable+0x3b/0x140 [ 2266.917266][T26275] ? clear_bhb_loop+0x40/0x90 [ 2266.917279][T26275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.917291][T26275] RIP: 0033:0x7f59b024e019 [ 2266.917304][T26275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2266.917315][T26275] RSP: 002b:00007f59ae4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2266.917328][T26275] RAX: ffffffffffffffda RBX: 00007f59b04d5fa0 RCX: 00007f59b024e019 [ 2266.917337][T26275] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 2266.917346][T26275] RBP: 00007f59b02e500c R08: 0000000000000000 R09: 0000000000000000 [ 2266.917353][T26275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2266.917361][T26275] R13: 00007f59b04d6038 R14: 00007f59b04d5fa0 R15: 00007ffc2d1bddc8 [ 2266.917374][T26275] [ 2267.283868][T26277] FAULT_INJECTION: forcing a failure. [ 2267.283868][T26277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2267.283894][T26277] CPU: 0 UID: 0 PID: 26277 Comm: syz.1.4663 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2267.283912][T26277] Tainted: [L]=SOFTLOCKUP [ 2267.283917][T26277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2267.283925][T26277] Call Trace: [ 2267.283930][T26277] [ 2267.283935][T26277] dump_stack_lvl+0xe8/0x150 [ 2267.283958][T26277] should_fail_ex+0x467/0x600 [ 2267.283978][T26277] _copy_from_user+0x2d/0xb0 [ 2267.284002][T26277] kstrtouint_from_user+0xd6/0x180 [ 2267.284014][T26277] ? __might_fault+0xaf/0x130 [ 2267.284028][T26277] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2267.284047][T26277] ? btrfs_lookup_extent_info+0xf10/0xfc0 [ 2267.284158][T26277] ? vfs_write+0x231/0xbb0 [ 2267.284173][T26277] ? rcu_is_watching+0x15/0xb0 [ 2267.284190][T26277] proc_fail_nth_write+0x8e/0x210 [ 2267.284204][T26277] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2267.284218][T26277] ? preempt_count_add+0x91/0x190 [ 2267.284234][T26277] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2267.284246][T26277] vfs_write+0x29f/0xbb0 [ 2267.284262][T26277] ? __pfx_vfs_write+0x10/0x10 [ 2267.284276][T26277] ? rcu_is_watching+0x15/0xb0 [ 2267.284291][T26277] ? trace_irq_enable+0x3b/0x140 [ 2267.284303][T26277] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2267.284320][T26277] ? mutex_lock_nested+0x152/0x1d0 [ 2267.284331][T26277] ? fdget_pos+0x252/0x320 [ 2267.284347][T26277] ksys_write+0x156/0x270 [ 2267.284362][T26277] ? __pfx_ksys_write+0x10/0x10 [ 2267.284377][T26277] ? rcu_is_watching+0x15/0xb0 [ 2267.284392][T26277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2267.284404][T26277] do_syscall_64+0x174/0x580 [ 2267.284420][T26277] ? trace_irq_disable+0x3b/0x140 [ 2267.284432][T26277] ? clear_bhb_loop+0x40/0x90 [ 2267.284445][T26277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2267.284457][T26277] RIP: 0033:0x7f59b020e84e [ 2267.284470][T26277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2267.284481][T26277] RSP: 002b:00007f59ae484fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2267.284496][T26277] RAX: ffffffffffffffda RBX: 00007f59ae4856c0 RCX: 00007f59b020e84e [ 2267.284506][T26277] RDX: 0000000000000001 RSI: 00007f59ae4850a0 RDI: 0000000000000005 [ 2267.284514][T26277] RBP: 00007f59ae485090 R08: 0000000000000000 R09: 0000000000000000 [ 2267.284521][T26277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2267.284529][T26277] R13: 00007f59b04d6128 R14: 00007f59b04d6090 R15: 00007ffc2d1bddc8 [ 2267.284542][T26277] [ 2268.277255][T22324] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.277301][T22324] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.327203][T22324] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.337234][T22325] netdevsim netdevsim2 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.579158][ T7321] bridge_slave_1: left allmulticast mode [ 2268.579181][ T7321] bridge_slave_1: left promiscuous mode [ 2268.579304][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2268.640860][ T7321] bridge_slave_0: left allmulticast mode [ 2268.640883][ T7321] bridge_slave_0: left promiscuous mode [ 2268.641028][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2268.762315][T15289] Bluetooth: hci3: command tx timeout [ 2268.856598][ T7321] bridge_slave_1: left allmulticast mode [ 2268.856618][ T7321] bridge_slave_1: left promiscuous mode [ 2268.856732][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2268.859141][ T7321] bridge_slave_0: left allmulticast mode [ 2268.859159][ T7321] bridge_slave_0: left promiscuous mode [ 2268.859244][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.035053][ T7321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2269.036384][ T7321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2269.037928][ T7321] bond0 (unregistering): Released all slaves [ 2269.153086][ T7321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2269.154384][ T7321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2269.155299][ T7321] bond0 (unregistering): Released all slaves [ 2269.199412][T25789] netdevsim netdevsim2 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2269.354709][T25789] netdevsim netdevsim2 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2269.383392][ T7321] hsr_slave_0: left promiscuous mode [ 2269.383724][ T7321] hsr_slave_1: left promiscuous mode [ 2269.384082][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2269.384374][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2269.429454][ T7321] hsr_slave_0: left promiscuous mode [ 2269.429784][ T7321] hsr_slave_1: left promiscuous mode [ 2269.430102][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2269.430399][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2269.741995][ T7321] team0 (unregistering): Port device team_slave_1 removed [ 2269.746919][ T7321] team0 (unregistering): Port device team_slave_0 removed [ 2269.995386][ T7321] team0 (unregistering): Port device team_slave_1 removed [ 2270.002448][ T7321] team0 (unregistering): Port device team_slave_0 removed [ 2270.171211][T25789] netdevsim netdevsim2 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.191400][T25789] netdevsim netdevsim2 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.427185][T22324] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.457425][ T7321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.467183][T22324] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.477399][T22324] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.477435][T22324] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.507411][ T7321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.514978][ T7321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.544398][ T7321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2271.637262][T22324] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.647242][T22325] netdevsim netdevsim0 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.647272][T22325] netdevsim netdevsim0 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.647292][T22325] netdevsim netdevsim0 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.737595][T22325] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.737633][T22325] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 2271.780085][ T7321] bridge_slave_1: left allmulticast mode [ 2271.780105][ T7321] bridge_slave_1: left promiscuous mode [ 2271.780213][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.781446][ T7321] bridge_slave_0: left allmulticast mode [ 2271.781461][ T7321] bridge_slave_0: left promiscuous mode [ 2271.781561][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.827953][ T7321] bridge_slave_1: left promiscuous mode [ 2271.828072][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.829083][ T7321] bridge_slave_0: left allmulticast mode [ 2271.829099][ T7321] bridge_slave_0: left promiscuous mode [ 2271.829182][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.831482][ T7321] dvmrp0: left allmulticast mode [ 2271.877630][ T7321] bridge_slave_1: left allmulticast mode [ 2271.877650][ T7321] bridge_slave_1: left promiscuous mode [ 2271.877767][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.879522][ T7321] bridge_slave_0: left allmulticast mode [ 2271.879539][ T7321] bridge_slave_0: left promiscuous mode [ 2271.879627][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2272.431517][ T7321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2272.432776][ T7321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2272.433641][ T7321] bond0 (unregistering): Released all slaves [ 2272.509364][ T7321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2272.510234][ T7321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2272.511171][ T7321] bond0 (unregistering): Released all slaves [ 2272.513784][ T7321] bond1 (unregistering): Released all slaves [ 2272.547987][ T7321] bond2 (unregistering): Released all slaves [ 2272.589307][ T7321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2272.590543][ T7321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2272.591402][ T7321] bond0 (unregistering): Released all slaves [ 2272.597607][T22324] netdevsim netdevsim7 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 2272.598858][T22324] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 2272.774069][ T7321] tipc: Left network mode [ 2272.909164][ T7321] batman_adv: batadv0: Interface deactivated: wlan0 [ 2272.912445][ T7321] batman_adv: batadv0: Removing interface: wlan0 [ 2273.392870][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2273.702655][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2274.090489][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2274.308988][ T7321] hsr_slave_0: left promiscuous mode [ 2274.309358][ T7321] hsr_slave_1: left promiscuous mode [ 2274.313733][ T7321] hsr_slave_0: left promiscuous mode [ 2274.314060][ T7321] hsr_slave_1: left promiscuous mode [ 2274.314411][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2274.314719][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2274.316960][ T7321] hsr_slave_0: left promiscuous mode [ 2274.360562][ T7321] hsr_slave_1: left promiscuous mode [ 2274.360918][ T7321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2274.360933][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2274.361919][ T7321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2274.361933][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2274.364216][ T7321] hsr_slave_0: left promiscuous mode [ 2274.364546][ T7321] hsr_slave_1: left promiscuous mode [ 2274.364932][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2274.365210][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2274.436168][ T7321] veth1_macvtap: left promiscuous mode [ 2274.436208][ T7321] veth0_macvtap: left promiscuous mode [ 2274.436281][ T7321] veth1_vlan: left promiscuous mode [ 2274.436335][ T7321] veth0_vlan: left promiscuous mode [ 2275.034839][ T7321] team0 (unregistering): Port device team_slave_1 removed [ 2275.039081][ T7321] team0 (unregistering): Port device team_slave_0 removed [ 2275.169939][ T7321] team0 (unregistering): Port device team_slave_1 removed [ 2275.174158][ T7321] team0 (unregistering): Port device team_slave_0 removed [ 2275.372433][ T7321] team0 (unregistering): Port device team_slave_1 removed [ 2275.376560][ T7321] team0 (unregistering): Port device team_slave_0 removed [ 2275.451300][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2276.159472][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2276.639315][ T7321] IPVS: stop unused estimator thread 0... [ 2276.804555][ T7321] bridge_slave_1: left allmulticast mode [ 2276.804575][ T7321] bridge_slave_1: left promiscuous mode [ 2276.804698][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.805576][ T7321] bridge_slave_0: left allmulticast mode [ 2276.805590][ T7321] bridge_slave_0: left promiscuous mode [ 2276.805715][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state