last executing test programs: 15m46.00391807s ago: executing program 1 (id=35): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x8}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x6, &(0x7f0000000340)=[{0x7859, 0x3e, 0x4, 0x8}, {0x40, 0x8, 0x4, 0x7}, {0x9, 0x9, 0x5, 0x5}, {0x8, 0xf, 0x80, 0x8000}, {0x0, 0x0, 0x6, 0xe2}, {0x8, 0x8, 0x2, 0x4}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 15m45.805691304s ago: executing program 1 (id=38): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x4, 0x2, 0x3ff, 0x515f3157, 0x4, "78e1142709fd0600000043f20613281b43d01f"}) read$FUSE(0xffffffffffffffff, &(0x7f0000001b80)={0x2020}, 0x2020) 15m45.649557946s ago: executing program 1 (id=41): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000280)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0x100000f1, 0x858d, 0x100, 0x8, 0x3000, 0x7, 0xa, 0x0, 0x7, 0x5, 0x401, 0x9, 0x0, 0x1, 0x8, 0xfe6, 0xfffffffe, 0x7, 0x4, 0x7, 0x4000009, 0x4b, 0x9, 0x90, 0x5, 0x81, 0x800, 0x8, 0x2000000]}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) fdatasync(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x2040884) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="450000000600000000000000000000005c5cd60000000000000000000000000000000003000000000000abba8d7291ee3a3717fc6485c534002f7379732f6b65726e656c2f64656275672f73796e632f696e666f0000"], 0x45) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'veth1_vlan\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f0000000500), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000005c0)=0x8001) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000000c0)={'veth0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xfffffffc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001600156f2cbd7000dfdbdf250a0000ffa37eea85deb09ab562f8960e8ca42dfa6d54041ac930eb6096aef2ef6b1297a1f856b76a8a44062ae8d554484c2a258788b446a5aa8acd6e591714507784732914a9e90d6c6b008f08e3246ba9f54f7a3441bed811cfbb718ad95d8755087d9463fd7a997d6d1bfcff1c2a7bbf7aa163bef4a0bd28013b0c0e82ba4c80cced5bc8b013816d00"/163, @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x24080) 15m43.086014482s ago: executing program 1 (id=44): syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4d0d8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000000)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x4c004) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) 15m40.638361375s ago: executing program 1 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r5, 0x0, 0x0, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r6, 0x0, 0x0) semop(r6, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$SETVAL(r6, 0x4, 0x10, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m30.780481668s ago: executing program 1 (id=66): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000), 0x4) 15m15.529134076s ago: executing program 32 (id=66): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000), 0x4) 13m44.415615358s ago: executing program 3 (id=220): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 13m42.464008322s ago: executing program 3 (id=224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8, 0xf) eventfd2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f00000005c0), 0x880, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r3}, 0x38) 13m37.516747236s ago: executing program 3 (id=226): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) 13m35.123516959s ago: executing program 3 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040504", @ANYRES64=r1, @ANYRES64=r2], 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r5, 0x0, 0x0, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r6, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r6, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$SETVAL(r6, 0x4, 0x10, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m32.595852609s ago: executing program 3 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)}, 0x4020010) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x4, &(0x7f00000003c0)) 13m30.552018964s ago: executing program 3 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94) r3 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r4, 0x8, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4000}], 0x1, 0x0, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r3, 0x0, 0x0, 0x4, 0x0, 0x1, r3}]) r5 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0000c1}, 0x20048000) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0xdcb, 0x2001) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 13m14.054816285s ago: executing program 33 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94) r3 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r4, 0x8, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4000}], 0x1, 0x0, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r3, 0x0, 0x0, 0x4, 0x0, 0x1, r3}]) r5 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0000c1}, 0x20048000) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0xdcb, 0x2001) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 10m19.870479343s ago: executing program 2 (id=488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000007000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) syz_io_uring_setup(0x8d0, 0x0, &(0x7f00000001c0), &(0x7f0000000180), 0x0) io_uring_setup(0x30aa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32], 0x6f4}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x5e64, &(0x7f0000000000)={0x0, 0xe900, 0x10000, 0x1, 0x6f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000001240)=0x6, 0x4) getsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, 0xfffffffffffffffe) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x5000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 10m18.2439315s ago: executing program 2 (id=491): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x5}, {}, {0x9, 0x4}]}]}}, &(0x7f0000000f80)=""/4115, 0x3e, 0x1013, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400c0c1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) 10m17.982520605s ago: executing program 2 (id=492): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xe0, 0x0, 0x80000}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ffffffff0000000005000000850000002c000000c50000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd86) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x200000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000300000000020000001c11003d6a0e24c638d934fde54b865244ea003d10a9839389a8901e913a6e699f5edc361d7df3b7a25ebc0ac1157154644c59b400cdb65eca9565b12fb6b3d552fbbd53a6bb25317fa3e91b49bb62f475e5263bcf616fe00e470971336bc75fa053046cd8cf9ad987d60d584a03f4c3ee71b9c504b01314508c20254b7c5bf66513e0f69c965b310680ea279a25afa9698c952bdaa8b9318125c97cd1fa59c42c96cbf28820141cc5ce40ace2c48586302a46e86a823ffda0d5dffa579ad2a5a7f65c353aa2490c6c087e", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000004000000632af8ff00000000b509000000000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 10m16.739199729s ago: executing program 2 (id=495): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) socket$netlink(0x10, 0x3, 0x6) syz_io_uring_setup(0x8d0, 0x0, &(0x7f00000001c0), &(0x7f0000000180), 0x0) io_uring_setup(0x30aa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB, @ANYRES32], 0x6f4}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x5e64, &(0x7f0000000000)={0x0, 0xe900, 0x10000, 0x1, 0x6f}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 10m15.637004211s ago: executing program 2 (id=496): openat(0xffffffffffffff9c, 0x0, 0x68cd42, 0x4) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, 0x0, 0x100000077, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400302, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000", @ANYRES32, @ANYBLOB="10fd0080040004800800010000400300"], 0x28}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xa}, 0x41}, r6, 0x5}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 10m14.047059604s ago: executing program 2 (id=498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r3], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r4, &(0x7f0000000080), 0x0}, 0x20) 9m57.626779411s ago: executing program 34 (id=498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r3], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r4, &(0x7f0000000080), 0x0}, 0x20) 6m14.403129599s ago: executing program 0 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x54, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0xa, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x76}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 6m12.651402461s ago: executing program 0 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r3, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r4, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) semctl$SETVAL(r4, 0x4, 0x10, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf250500000008000200080000ea"], 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m11.110409165s ago: executing program 0 (id=790): syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r0], 0x38}}, 0x0) 6m10.598173221s ago: executing program 0 (id=792): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r0, 0x1, 0xf6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="ed129a93b8cf4746fd3475756f9d20ff09390d3e9feb7567844b444a384054cd563eb0d557f2387292cb22b4c7eb7fd4348f6e6f4f2d523a3f0f383720", 0x3d}], 0x1}, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7fffffff) 6m8.212460516s ago: executing program 0 (id=797): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) setreuid(0xffffffffffffffff, 0xee01) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x721982, 0x80) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) 6m7.929572345s ago: executing program 0 (id=798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="23000300010006", 0x7) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xc, 0x8, 0x5, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x40) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f8ffffffb70200000000000018230000", @ANYRES32=r3, @ANYRESOCT=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m50.623656462s ago: executing program 35 (id=798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="23000300010006", 0x7) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xc, 0x8, 0x5, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x40) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f8ffffffb70200000000000018230000", @ANYRES32=r3, @ANYRESOCT=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 21.020595222s ago: executing program 7 (id=1423): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x20000000) 19.369644441s ago: executing program 7 (id=1425): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x400c014) fallocate(r0, 0x0, 0x0, 0x5) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="13010000da7d3f10cd06090104250102030109021200010000230009041e110009"], 0x0) 15.855247422s ago: executing program 7 (id=1434): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syncfs(0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@delsa={0x28, 0x11, 0x1, 0x70bd2c, 0x25dfdbfd, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d2, 0xa, 0x3c}}, 0x28}}, 0x0) 15.740308015s ago: executing program 5 (id=1435): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x20000000) 15.541758826s ago: executing program 5 (id=1436): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0xc000, 0x2}) 10.524177104s ago: executing program 5 (id=1438): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (fail_nth: 5) 10.334048655s ago: executing program 7 (id=1439): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x202, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x13, 0x18, 0x9, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x8090) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x61}, 0x0, 0x0}) 8.842446585s ago: executing program 5 (id=1441): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x404c014) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x800) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) (fail_nth: 5) 8.378195823s ago: executing program 6 (id=1444): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) 7.935722383s ago: executing program 6 (id=1449): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f0000000d40)) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x40, 0x21, 0xdb, {0xdb, 0x23, "59e5f2878fad73fc048bd2c7e0cab4cf734f2127ce347800b482e6962605825f612fefec63dd8f7cbd48156092c5be614cb01bb4a6992a9a41f2dee9263fc48bd145e89133c542b06d06fea946adf4545f5e6330444773a7233f21a1998e1fd54c9ffa6c269d1620032636eb197868a172b48c3a014793d36a25321f587f82776625bd4db0c2035440a91796968b5e6407e3af92bdbe082b05bb4a0c6568808f1a682cface968df28e281d6bdc17e90f63dc6510a3bc109fc6a4a0bb3ec03eb0959cef01eabf17ba1adfdb8ecdcb1e5607779a4c69c0d4fc42"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1427}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x20, 0x5, 0x11, "daf8e2742724806d759ed230bba689ef51"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000f40)={0x20, 0x81, 0x3, "2a19ba"}, &(0x7f0000000540)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000f80)=ANY=[@ANYBLOB="8affaea5749fb8a5af3ddc4853b6e7056bf9b4931926cb0211e3225e1386516c6074bc26d0328c59b23186eecc6d84a736f6c40500709fb91a0482a3fc6a400c06b98a533195277de7455c5efd9a5b7b43b98ae1996d2fe6927d57291bbd4a9727243d2a444d6aa7651f3204987da5d12bbe0e198f52c07d4d1bbddd27c5a8d3c2cdc2eddde1dfa78913381235e271da2ab4c60f5142c89cfc9c58d1b49d7e6abdffb0b0b6f9718726612c90075ab47b33bb3831baa43d1b4843a98940fb26352248ad76fb20af265393d7ab968b69"], &(0x7f0000000600)={0x20, 0x84, 0x4, "81ec08d4"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "04bd0e"}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01"], 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x44000}], 0x0, 0x40800) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) accept4(r4, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x0, 0x4, {0xa, 0x4e24, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}}}, 0x32) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) 7.542251239s ago: executing program 8 (id=1452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000007000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180068223"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) syz_io_uring_setup(0x8d0, 0x0, &(0x7f00000001c0), &(0x7f0000000180), 0x0) io_uring_setup(0x30aa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x5e64, &(0x7f0000000000)={0x0, 0xe900, 0x10000, 0x1, 0x6f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000480)={'pcl711\x00', [0x4, 0xfffeffff, 0x1ff, 0x9, 0xff, 0x8, 0xfffffff9, 0x7, 0x10001, 0x8, 0x5, 0xdd32, 0x7, 0x100, 0x2, 0x2, 0x4, 0x0, 0x6, 0x4, 0x2, 0x0, 0x4, 0x8, 0x4, 0xc, 0x4, 0x1, 0x6fbb, 0x936, 0xf, 0x8]}) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000001240)=0x6, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x5000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 6.349472413s ago: executing program 7 (id=1454): syz_emit_ethernet(0x42, &(0x7f00000002c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x1}}) 5.351206551s ago: executing program 8 (id=1455): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000080)="088e73fe7f2c3e8e9e43900ee42d82a6bcba", 0x12}, {&(0x7f00000000c0)="e827cbd882d9b60066f93d143385b5f14c224522b032c1281a8c24dfbe8dace552b909a4f6b12cfbe66c31f7d25e9123c1277e18bb90f4f3e2df4d3ab1995ca02d17be853b8e284f05b4e75f9bf18fca69eeefd557662251b1961f06e7942a2d7dfa3d54f4b4ca31e8ebe69bd076214dd9139634af61c4ebbf1cc18ee2e14d63790669f31cacd1d4a0785f98f4d869e062d67fd917ed41bb7e33bf13b3b8cc0414a1d8be52cb9d7b7a25b37d6c2cbef93ec08a27964cda5075f9fc4c", 0xbc}, {&(0x7f0000000180)="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", 0x1000}], 0x3) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x101000, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000001200)=""/147, &(0x7f00000012c0)=0x93) syz_open_dev$dri(&(0x7f0000001300), 0x10, 0x80000) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)=0x2d) clock_gettime(0x0, &(0x7f0000001440)={0x0, 0x0}) pselect6(0x40, &(0x7f0000001380)={0xfffffffffffffff5, 0xb, 0x6, 0x0, 0x3, 0x4, 0x224f8889, 0x1ff}, &(0x7f00000013c0)={0x401, 0x1, 0x6, 0x84, 0x7, 0x10000, 0x6, 0x8}, &(0x7f0000001400)={0x5, 0x7e, 0x800, 0x8, 0x100000001, 0xdac, 0x6, 0x80000000}, &(0x7f0000001480)={r2, r3+60000000}, &(0x7f0000001500)={&(0x7f00000014c0)={[0xfffffffffffffffc]}, 0x8}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000001540)) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000015c0)={0x1, 0x6, 0x6, 0xfa6, 0x751, 0xd709}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001600)={0x0}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001680)={r5, @in6={{0xa, 0x4e20, 0x12, @remote, 0x6}}, 0x4, 0x7}, &(0x7f0000001740)=0x90) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001780)=0x4) open_by_handle_at(r0, &(0x7f00000017c0)=@reiserfs_6={0x18, 0x6, {0xa, 0x21ef, 0x265, 0x0, 0x3, 0x3e}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000001800)=0x5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001840)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000001880)) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000018c0)={0x6}) prctl$PR_SCHED_CORE(0x3e, 0x2, r6, 0x0, 0x0) io_setup(0x5, &(0x7f0000001900)=0x0) clock_gettime(0x0, &(0x7f00000019c0)={0x0, 0x0}) io_pgetevents(r9, 0xffff, 0x4, &(0x7f0000001940)=[{}, {}, {}, {}], &(0x7f0000001a00)={r10, r11+10000000}, &(0x7f0000001a80)={&(0x7f0000001a40)={[0x2]}, 0x8}) bind$netlink(r0, &(0x7f0000001ac0)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r12 = signalfd(r4, &(0x7f0000001b00)={[0x101]}, 0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r12, 0x1, &(0x7f0000001b40)={0x4c4, r7}, 0x0) 5.143104275s ago: executing program 8 (id=1456): read$smackfs_cipsonum(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000ac0), 0xffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket(0x1e, 0x4, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpriority(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) eventfd2(0x5, 0x81001) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x9, 0x7, 0x2, 0x5}, 0x9, 0x5, 0x0, 0x2, 0x0, 0x8}}) 4.73515341s ago: executing program 6 (id=1458): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000000) 3.641907489s ago: executing program 4 (id=1459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x203, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c) close_range(r0, r0, 0x0) 3.598147339s ago: executing program 8 (id=1460): unshare(0x20040400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) (fail_nth: 1) 3.468259475s ago: executing program 6 (id=1461): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10004) 3.41656724s ago: executing program 4 (id=1462): r0 = timerfd_create(0x8, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.249050883s ago: executing program 8 (id=1463): r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x70, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970503, 0x20c0}, [@IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe6, 0x926, 0x6}}, {0x14, 0x1, {0x3, 0xdbf, 0x800, 0x88a8}}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = dup3(r2, r0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) set_tid_address(&(0x7f0000000200)) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) io_setup(0x9, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) io_setup(0x10000, &(0x7f0000000380)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1d, &(0x7f0000001840)=""/4085}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) 2.192846223s ago: executing program 4 (id=1464): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aa9eb7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae6d4d61d8fc269652835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f962b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9f6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def2a2949538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa403de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786b7ef0e1dfd3cb1cc00efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051968af1f8fa60350865328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02c37b4cc877a1d5f4023083d5b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e113a7e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b94fc14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7ae164cc20de5b23146baa9786111", 0x2000, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 1.984061602s ago: executing program 7 (id=1465): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) add_key(&(0x7f0000000500)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000001800000006000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) read$FUSE(0xffffffffffffffff, &(0x7f000001aa40)={0x2020}, 0x2020) fstat(r1, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0xbfb3) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000040ac052302400001020301090224000101fff0060904000d01030102"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000ac0)=""/84) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) fremovexattr(r4, &(0x7f0000000540)=@random={'osx.', '&^\x00'}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)) r5 = syz_open_pts(r2, 0x101000) r6 = dup3(r5, r2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) (fail_nth: 2) 1.983367819s ago: executing program 6 (id=1466): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f00000032c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x167, 0x167, 0x6, [@restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @enum={0x1, 0x8, 0x0, 0x6, 0x4, [{0xd, 0x7fff}, {0xa, 0x3}, {0x5, 0xd935}, {0xe, 0x4}, {0x10, 0x3}, {0x6, 0x6}, {0xf, 0x80000000}, {0xf, 0x6}]}, @datasec={0xd, 0x7, 0x0, 0xf, 0x3, [{0x1, 0x136f309e, 0x9}, {0x3, 0x0, 0xa96}, {0x1, 0x8, 0x800}, {0x1, 0xb74, 0xe}, {0x1, 0x1, 0xffff}, {0x4, 0x1, 0x8}, {0x4, 0x0, 0x3}], "af9ef2"}, @enum64={0x5, 0xa, 0x0, 0x13, 0x1, 0xc, [{0xa, 0x4, 0x5}, {0x4, 0x0, 0x8}, {0x7, 0x0, 0x2}, {0x6, 0x7, 0x1}, {0xb, 0x0, 0x7}, {0xe, 0x6, 0x2}, {0x8, 0x0, 0x5}, {0xb, 0x6f, 0x8}, {0xe, 0x65a, 0xa}, {0x9, 0x5, 0x1}]}, @volatile={0xfffffffc, 0x0, 0x0, 0x9, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @enum64={0x6, 0x0, 0x0, 0x13, 0x1}]}, {0x0, [0x61, 0x0, 0x30, 0x2e]}}, &(0x7f0000000e00)=""/212, 0x186, 0xd4, 0x0, 0x80000001, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r0, 0x0}, 0x50) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x1, 0x2, 0x8, 0xa9, 0x6, 0x2, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x5c, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x1f, &(0x7f0000001140)=""/4057, &(0x7f00000000c0)=0xfd9) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') lseek(r3, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085"], 0x0}, 0x94) sendmsg$key(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="020d0008020000002cbd7000ffffff25"], 0x10}}, 0x20000800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d00000000000500260000000000050025"], 0x64}}, 0x0) syz_clone(0x20002900, &(0x7f0000000400)="593c2130c7d1a5558bcbfbe5215c6f3a588b2add83e94c8884457855cedf6ded68a0c6390d57a46a677fbe8e6489d0d24cf3625c25164ff8da739e1d4c853b9471198a3629e6874f5dd57bb7678457887598f9e0926337f3b2c8bb831faf7edb8c686578ead131b6af3ba6974ba321939bfad57a625f514670", 0x79, &(0x7f0000000480), &(0x7f0000000540), &(0x7f0000000580)="1ee30b8c9f7fa926f3146b73ab3aa9050ec902640e16c5452d328aaa01113739b3fb6630d6ec87361339503baa0b2e534fa165edc0653e7b398be01ce0d99564b2af2a584e8ca6f51a2caf2ed50d69b8261b4765ad70f365737f8b4ab764789037e35f360807596c9462b54d60b2ce057dcbdd6e1c6695970c3b6e11e162f9926523a933e892a89643fe46298611d8a087d00795ca8dc5931fa84342cffe3782ed") r5 = semget(0x2, 0x2, 0x608) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x184, 0x6}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4}) semop(r5, 0x0, 0xfffffc1f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800100000004017b3a590d16973a85592a8b98ac3b8429c5592681c0f53cb603374fbb811400f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002140)=@newtfilter={0x1164, 0x2c, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x0, 0x5}, {0xffff, 0xf}, {0xfff3, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @filter_kind_options=@f_u32={{0x8}, {0x1130, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xe5}, @TCA_U32_LINK={0x8, 0x3, 0x100}, @TCA_U32_MARK={0x10, 0xa, {0xa0f, 0x8}}, @TCA_U32_POLICE={0x898, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x6, 0x1, 0xfffffe00, {0x9c, 0x3, 0xfff0, 0x57, 0x3, 0x4}, {0x80, 0x0, 0x7, 0x68b8, 0xc025, 0x3}, 0x3, 0x8000, 0x400}}, @TCA_POLICE_RATE={0x404, 0x2, [0xea, 0x4, 0x775, 0x6, 0x80000000, 0x800, 0x4d, 0x8, 0xffffffff, 0x427e, 0x40, 0x9, 0x0, 0x5, 0x6924, 0x7, 0x7fff, 0x1000, 0x1, 0xffff, 0x4, 0x0, 0x800, 0xfffffff2, 0x5, 0xe, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x3ff, 0x9, 0x0, 0x6, 0x400, 0x0, 0x1, 0x5, 0x5, 0x8, 0x4, 0x7f, 0x40, 0x2, 0x1, 0xa9b, 0x5, 0x10001, 0x8, 0x4, 0x60b, 0xffff0001, 0xffff, 0x4, 0x0, 0x4, 0x6, 0x8, 0xb9, 0xe2b5, 0x6, 0x9, 0x5, 0xff000000, 0x1, 0xfbc, 0x9, 0x7, 0xc, 0x0, 0x40, 0x4, 0xb6fb, 0x80, 0x731, 0x8, 0x1, 0x5, 0x8, 0x2, 0x4, 0xef04, 0x3, 0xffffffff, 0x7fff, 0x4, 0xfffffffc, 0x69, 0x0, 0x2, 0x5, 0x502, 0x9a24, 0x3, 0x60, 0x5ff7, 0x200, 0x10000, 0x3, 0x6, 0x8000, 0x8, 0x3, 0xfffffffc, 0x5, 0xe2, 0x1, 0xd, 0x100, 0x1, 0x5, 0x8, 0x80000000, 0x6, 0x81, 0x8, 0x7fffffff, 0x80000000, 0x3, 0x4, 0x8, 0x6, 0x1, 0x7, 0x4, 0x80000001, 0x1, 0x3, 0x2, 0x0, 0x10001, 0x7, 0x401, 0x96, 0x2, 0x5, 0x2, 0xcf, 0x0, 0x5, 0x1b1, 0x9, 0xfffffff2, 0x80000000, 0x100, 0x3, 0x4, 0x3, 0x8, 0x8, 0xc, 0xeea, 0x1, 0xffffff00, 0x9, 0x2, 0x2, 0xc, 0x1, 0x8, 0x9, 0x6, 0x59, 0x0, 0x8, 0x7, 0xd248, 0x80000000, 0x2, 0x9, 0x1000, 0x5f75, 0x1, 0xf50, 0x4, 0x4, 0xa75c, 0x9, 0x4, 0xfffffff0, 0x7, 0x8, 0x2, 0x96b, 0x0, 0x1, 0x7, 0x2, 0x8, 0x3, 0x0, 0x2be6, 0x4, 0x10, 0x6, 0x8, 0x7, 0x8, 0xd, 0xc000000, 0x7f, 0x0, 0x4, 0x400, 0xc, 0x5254, 0x400, 0x7, 0x5, 0xb4a, 0x7, 0x4, 0x5, 0x9, 0x7, 0x7, 0x6, 0x4, 0x23e, 0x6, 0x9, 0x306, 0x280000, 0x1000, 0x3, 0x2800000, 0x1, 0x3, 0x10, 0xffffff4e, 0x9, 0x13, 0x2, 0x5, 0x7528, 0x1, 0x8, 0x5f9, 0x7, 0x1, 0x46, 0x1a, 0x4, 0x7399, 0x7, 0x180, 0xfffffe00, 0x6, 0xffff05c2, 0x5, 0xf7, 0x2, 0x2, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfc5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x3, 0x4, 0x2, {0x7, 0x0, 0x2, 0x101, 0x3, 0x6}, {0x7, 0x2, 0x1ff, 0x6, 0x7, 0x3}, 0x3, 0x3, 0x80000001}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x148, 0x4, 0x2, 0x8, 0xc06a8f7, 0x4, 0x1ff, 0x4, 0xff1d991, 0xfffffffe, 0xfffffee6, 0x1, 0x5, 0x5, 0x2, 0x6, 0x80000001, 0xffffffff, 0x4, 0x1, 0x6, 0x1, 0x8, 0xffffffb5, 0x0, 0x3a800000, 0x7fffffff, 0x6, 0x5, 0x992a, 0x4, 0x7, 0x4, 0x7f, 0x2, 0xf6, 0x9, 0x8, 0x7, 0x1, 0x5, 0x101, 0xcb4, 0x5, 0x5, 0x9, 0xfffffffc, 0x5, 0x6, 0x3, 0x1, 0xffffffff, 0x6, 0x54, 0x8, 0x7, 0x501, 0x6, 0x2, 0x2, 0x8, 0xb7e, 0x8000, 0x5, 0x4, 0x5, 0x5, 0x5, 0x404, 0x9, 0x5, 0x88, 0x7f, 0x6, 0x6, 0x3ff, 0xd6c, 0x6, 0x9de8, 0x9, 0x6, 0x8000, 0x9, 0xc90, 0x7f, 0x0, 0x8001, 0x0, 0x4, 0x5, 0x9, 0x5, 0x8, 0x4, 0x334b, 0x8, 0x0, 0xfffff5ab, 0xfffffffc, 0x9, 0x6, 0x800, 0xfffffffe, 0x2, 0x1, 0x7, 0x6, 0x90, 0x5, 0x1000, 0xd7f0, 0x7fffffff, 0x7, 0xff, 0x69, 0xd, 0x1, 0x9, 0x0, 0x4, 0x3474, 0x4, 0x10001, 0x6, 0x0, 0xfffffffe, 0x0, 0x4, 0x8, 0x4, 0xf, 0x7ff, 0x2105, 0x9, 0x800, 0x7f, 0x2, 0x4, 0x8, 0x2, 0x200, 0xe, 0xfffffff9, 0x3, 0x4, 0x5, 0x6, 0x5, 0x8, 0x8, 0x4, 0xda, 0x5, 0x5, 0x935, 0x8, 0xaf4, 0x7, 0x7, 0x2, 0x8, 0x6, 0x1, 0x2, 0x10, 0x4f5b, 0x3, 0x3, 0x0, 0x0, 0x81, 0x3c97, 0x9, 0x5, 0x8, 0xa, 0x7, 0x2c000, 0x1f5, 0xc6d, 0xff, 0x6, 0x9, 0x80, 0x10001, 0xe7a7, 0x4, 0x3, 0x5, 0x0, 0xcb, 0x5, 0x3, 0x2, 0x1, 0x8f53, 0x0, 0xffffffff, 0x7fffffff, 0x6, 0x2e44, 0x4, 0x2, 0x5, 0x4, 0x39bb, 0xd4e, 0x16fc, 0xae000000, 0xc7, 0x5, 0x3, 0x3, 0x0, 0x1, 0xfff, 0xf, 0x1c00000, 0x6, 0xfff, 0x1, 0x6, 0x380000, 0x7, 0x100, 0x100, 0xa5e7, 0x4, 0x3, 0xffffffff, 0x7, 0x5, 0x8, 0x1000, 0x9, 0x0, 0xac, 0x6, 0xffffffff, 0x0, 0x80000000, 0x5, 0xfffffffa, 0x0, 0x4, 0xd1, 0x3ff, 0x80, 0x7fff, 0x6, 0x27, 0xdf6, 0x0, 0x4, 0x7, 0xb33]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_U32_SEL={0x4b4, 0x5, {0xc, 0x8, 0x4, 0x26, 0xc7d2, 0x2, 0x2, 0x10001, [{0x0, 0x2, 0x6, 0x9}, {0xf48, 0x8, 0xfb, 0xf}, {0x6, 0x7, 0x0, 0x5}, {0x4, 0x6, 0x9, 0x5}, {0x9, 0x7, 0x10c, 0x3c9f}, {0xffffff9e, 0x3, 0x7ff, 0x3}, {0x100, 0x4, 0xd, 0x400}, {0x7cf0, 0x1, 0x1, 0x100}, {0x3, 0x9, 0x1}, {0x9, 0xa8, 0x7ff, 0xffffff01}, {0x1, 0x3ff, 0x7, 0xff}, {0xf81, 0x2, 0x8, 0xffff}, {0x1, 0x1, 0x553a, 0x921}, {0x4, 0xd255, 0x5ac, 0x3}, {0xef93, 0x104, 0xcb, 0x7}, {0x8, 0x5, 0x400, 0x800}, {0x80000001, 0x8e0c, 0x800, 0x6}, {0xe, 0x5, 0x1, 0x8}, {0x0, 0xc0b, 0x2, 0x6}, {0x0, 0x5, 0x2e1df373, 0x4}, {0x1, 0x3, 0x5, 0xd}, {0x6898, 0x7fff, 0xfff, 0x4}, {0x0, 0x9f5, 0xfffffdfb, 0x6}, {0x2, 0x0, 0xca, 0x3}, {0x6, 0x48, 0x7, 0x9}, {0x6, 0x6, 0xe, 0x3}, {0x3, 0x7, 0x9, 0x5}, {0x2, 0x8af, 0x80000000, 0x800}, {0x2, 0x40, 0xf97, 0x3}, {0x1, 0x6, 0x9, 0x3}, {0x1, 0x5, 0x3, 0x7}, {0x2, 0xd, 0x3, 0xb}, {0xfffffffe, 0x408d, 0x200, 0x57}, {0x5, 0x0, 0xc03f, 0x9}, {0x1, 0x4, 0xfffffff9, 0x8}, {0x2, 0x0, 0x1000, 0xffffffff}, {0x6, 0xef5, 0x9, 0x7}, {0xfffffffc, 0x1000000, 0x4, 0xf}, {0x7, 0x6, 0x10, 0x9}, {0x7fff, 0x2, 0x9, 0x2b}, {0xabf2, 0x88e, 0x2000, 0x8e6}, {0x0, 0x28f, 0x7, 0x1}, {0x10001, 0x6, 0x6, 0x5f7e}, {0x4, 0xffffffff, 0x1, 0x7ff}, {0x1ff, 0x1, 0x5, 0x4}, {0x1, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x9, 0x234}, {0x520, 0xe2, 0xb, 0x2}, {0x6, 0x1, 0x0, 0x100}, {0x4, 0x6, 0x81, 0x6}, {0x1, 0x3, 0x0, 0xef2}, {0xeb6, 0x2, 0x7, 0x7}, {0x3, 0x53, 0x2, 0x6}, {0x90f3, 0x9, 0x7, 0xaa}, {0x2, 0x5, 0xa, 0x3}, {0xd2e, 0x401, 0x8001, 0x8000}, {0x5, 0x72fa, 0x1, 0x80000000}, {0x100, 0xf2, 0x8, 0x2b9592a1}, {0x9b, 0x0, 0x845, 0x95a3}, {0x4, 0x4, 0x3, 0x1}, {0x8, 0x8, 0x8, 0x7}, {0xf, 0x6, 0x1}, {0xf260, 0x6822, 0x4, 0xa}, {0x0, 0x8, 0xb, 0x1ff}, {0x1, 0x8, 0x6, 0x1}, {0x0, 0x10, 0x101, 0xfffffffb}, {0x4, 0x5, 0x3, 0x3}, {0x7, 0x8, 0x0, 0x9}, {0x9, 0x1, 0xf, 0x9}, {0x2f, 0x6, 0xffffffff, 0x3}, {0x6, 0x8, 0x3, 0x2}, {0x7, 0x7fffffff, 0xa075, 0x838}, {0x9, 0x200, 0x2, 0x9}, {0x8, 0x2, 0x9, 0x80}]}}, @TCA_U32_ACT={0x358, 0x7, [@m_connmark={0x168, 0xa, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1364, 0x7, 0x8000, 0xff}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xdf, 0x8, 0x8, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x234, 0x55800, 0x8, 0x0, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x890, 0xfffffffd, 0x20000005, 0x8, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x6, 0xffffffff, 0x2}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x20000000, 0x5, 0x5}, 0x2}}]}, {0x8e, 0x6, "3ff3d359262673a9aa2e489a442d2c6746b84dd9e2c47146d276ad20da371e96ac2d8f8510ae7cc13f99e82ab65c6a13e3e245ea3bf12576f32bdc343deeae66e15e1c60993eefad352d55444d82537b62b686980b7660a714e349a69d51f6966d89f0cade7cf85fac933b45d7ae0c3b0303b4a62bca0b92e26ecd6db61595bc52014c9297ebbfc637fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x160, 0x1c, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x3, 0x80, 0x5}, 0x41cb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x0, 0xef84, 0xfffffffe}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xf1e, 0x20000000, 0x6815, 0xfff}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x5, 0x4, 0x5, 0xde}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc9f, 0x0, 0x8, 0x9, 0x80000000}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x21e, 0x7, 0x7, 0xfffffffb}, 0xe}}]}, {0x86, 0x6, "e903ead2dbff22746f1fd991d4552ccc635a7a8b201e4cffba4ec0dc3124e50040d76b330635ad95bf3aeabd342e603fba0be4d6a3310d3b84dfb6ad2ba39fe338b53ba4cfe491049c6df7369dce8bcac6edcb7ac74e54d93f0fb4de7321dbc1d1c8d1f871515455807284eade9e5f3789b070ae24513b06ab69f2fcc9f87ad61294"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x8c, 0x16, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xfa5}, @TCA_CT_ZONE={0x6, 0x4, 0x6632}, @TCA_CT_LABELS={0x14, 0x7, "d0c7ee741efcca1e59f0e71511e82b7c"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_U32_POLICE={0x60, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc32}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x20000000, 0x649, 0x8000, 0x7, {0x60, 0x2, 0x605, 0x7, 0x3, 0x7}, {0x2, 0x1, 0x57, 0x7, 0x5, 0x2fe2}, 0x682c395f, 0x80000000}}]}, @TCA_U32_FLAGS={0x8}]}}]}, 0x1164}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 1.837897928s ago: executing program 4 (id=1467): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4048aecb, &(0x7f0000000000)) 813.662975ms ago: executing program 4 (id=1468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff", 0x6}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r1, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000340)=""/6, 0x6}, {0x0}], 0x2, &(0x7f0000002080)=""/188, 0xbc}, 0x1}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f00000021c0)=""/177, 0xb1}], 0x1}, 0xfffffff8}], 0x2, 0x1, &(0x7f0000006b40)) 559.986278ms ago: executing program 5 (id=1469): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 2) 553.197201ms ago: executing program 4 (id=1470): read$smackfs_cipsonum(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000ac0), 0xffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket(0x1e, 0x4, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpriority(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) eventfd2(0x5, 0x81001) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x9, 0x7, 0x2, 0x5}, 0x9, 0x5, 0x0, 0x2, 0x0, 0x8}}) 135.144724ms ago: executing program 5 (id=1471): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r0 = syz_open_dev$video4linux(0x0, 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x8a}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000240)={0x0, 0x80000001}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1", 0x5c, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) gettid() ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000009c0)={0x80000000, 0x0, 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x40040) 38.839884ms ago: executing program 6 (id=1472): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000016540520bfbb27113bf1440faea32896ad7054f0cc7edb02e318b4edd2d89d41cfb5692356f3d27309e6f9be440fda65535cfba2bc280745fb7f0fe44ca84a919b53065090445a6b234d158075b9a2f2e40840550c750150473045ee20c83f2f3635cec588534ece48f0f121589d78dde76e82a526658fa6a7ccdbbe393404a61a8aad0772932454dfb753", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0xc) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs(0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) 0s ago: executing program 8 (id=1473): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0x5}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40011) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0xc040) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f0000000000040000002400118031f9e05e2f826cfc"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@gettfilter={0x54, 0x2e, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {0xffe0, 0x5}, {0xfff6, 0xd}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000881d) syz_emit_ethernet(0xfef3, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYRES32=r0, @ANYBLOB="89040600240104002800122664900349e22354001c00027d5c558bd5772767451100a8d2000000000c00000000000841d576507411142e5dd2d87d3e7e7700c4596401000e0008000000000000"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): idge0: port 1(bridge_slave_0) entered disabled state [ 830.800889][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.873493][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.955996][ T12] bond0 (unregistering): Released all slaves [ 831.229907][T10996] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.230044][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.230293][T10996] bridge_slave_0: entered allmulticast mode [ 831.246345][T10996] bridge_slave_0: entered promiscuous mode [ 832.179071][T10996] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.179227][T10996] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.179486][T10996] bridge_slave_1: entered allmulticast mode [ 832.576850][ T5723] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 832.821697][ T5723] usb 5-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.821742][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 832.821821][ T5723] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 832.821856][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.178158][T10996] bridge_slave_1: entered promiscuous mode [ 833.342881][ T5723] usb 5-1: config 0 descriptor?? [ 835.143933][ T5723] hid_parser_main: 176 callbacks suppressed [ 835.143958][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.143990][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.144017][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.144045][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.144079][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.144107][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.144135][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.144162][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.144190][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.144216][ T5723] magicmouse 0003:05AC:0265.0002: unknown main item tag 0x0 [ 835.347590][T10996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.347641][ T5723] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 835.387717][T11201] comedi comedi3: comedi_config --init_data is deprecated [ 835.392981][ T5737] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 835.412029][T10996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.412862][ T5723] usb 5-1: USB disconnect, device number 18 [ 835.563624][ T5737] usb 7-1: Using ep0 maxpacket: 8 [ 835.566005][ T5737] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.566058][ T5737] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 835.566082][ T5737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.602108][ T5737] usb 7-1: config 0 descriptor?? [ 835.639674][ T12] hsr_slave_0: left promiscuous mode [ 835.653469][ T5737] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 835.691989][ T12] hsr_slave_1: left promiscuous mode [ 835.695208][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.726690][T11203] fido_id[11203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 835.770261][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.983290][ T5737] gspca_vc032x: reg_w err -71 [ 836.983387][ T5737] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 837.038298][ T5737] usb 7-1: USB disconnect, device number 13 [ 837.259111][ T12] team0 (unregistering): Port device team_slave_1 removed [ 837.360617][ T12] team0 (unregistering): Port device team_slave_0 removed [ 839.346097][T10996] team0: Port device team_slave_0 added [ 839.625771][T10996] team0: Port device team_slave_1 added [ 840.519216][T10996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.519234][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.519261][T10996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.537167][T10996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.537185][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.537216][T10996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.855814][T10996] hsr_slave_0: entered promiscuous mode [ 840.872827][T10996] hsr_slave_1: entered promiscuous mode [ 840.880219][T10996] debugfs: 'hsr0' already exists in 'hsr' [ 840.880246][T10996] Cannot create hsr debugfs directory [ 841.938671][T10809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.974213][T10809] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.004541][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.004783][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.029957][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.030084][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.346688][T11262] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1008'. [ 842.475710][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 843.417928][ T9352] Bluetooth: hci4: command tx timeout [ 843.712665][T11289] comedi comedi3: comedi_config --init_data is deprecated [ 852.075220][T10809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.488022][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 857.488091][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.911512][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 858.955089][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 858.962994][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 859.004247][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 859.005862][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 859.192900][T11344] comedi comedi3: comedi_config --init_data is deprecated [ 859.694842][T11353] FAULT_INJECTION: forcing a failure. [ 859.694842][T11353] name failslab, interval 1, probability 0, space 0, times 0 [ 859.694876][T11353] CPU: 0 UID: 0 PID: 11353 Comm: syz.6.1020 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 859.694902][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 859.694916][T11353] Call Trace: [ 859.694923][T11353] [ 859.694932][T11353] dump_stack_lvl+0xe8/0x150 [ 859.694962][T11353] should_fail_ex+0x46b/0x600 [ 859.694999][T11353] should_failslab+0xa8/0x100 [ 859.695027][T11353] __kmalloc_noprof+0xdf/0x7b0 [ 859.695045][T11353] ? kfree+0x4d/0x6c0 [ 859.695060][T11353] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 859.695092][T11353] tomoyo_realpath_from_path+0xe3/0x5d0 [ 859.695121][T11353] ? tomoyo_domain+0xd8/0x130 [ 859.695141][T11353] ? tomoyo_path_number_perm+0x219/0x630 [ 859.695164][T11353] tomoyo_path_number_perm+0x246/0x630 [ 859.695189][T11353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 859.695210][T11353] ? __lock_acquire+0x6b5/0x2cf0 [ 859.695246][T11353] ? __pfx___schedule+0x10/0x10 [ 859.695283][T11353] ? __fget_files+0x2a/0x420 [ 859.695301][T11353] ? __fget_files+0x2a/0x420 [ 859.695316][T11353] ? __fget_files+0x3a6/0x420 [ 859.695331][T11353] ? __fget_files+0x2a/0x420 [ 859.695350][T11353] security_file_ioctl+0xc3/0x2a0 [ 859.695378][T11353] __se_sys_ioctl+0x47/0x170 [ 859.695400][T11353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.695419][T11353] do_syscall_64+0x15f/0xf80 [ 859.695439][T11353] ? trace_irq_disable+0x3b/0x140 [ 859.695460][T11353] ? clear_bhb_loop+0x40/0x90 [ 859.695481][T11353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.695501][T11353] RIP: 0033:0x7f0398bccdd9 [ 859.695518][T11353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.695534][T11353] RSP: 002b:00007f0396e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.695554][T11353] RAX: ffffffffffffffda RBX: 00007f0398e45fa0 RCX: 00007f0398bccdd9 [ 859.695568][T11353] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 859.695580][T11353] RBP: 00007f0396e26090 R08: 0000000000000000 R09: 0000000000000000 [ 859.695591][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.695602][T11353] R13: 00007f0398e46038 R14: 00007f0398e45fa0 R15: 00007ffcd7084068 [ 859.695631][T11353] [ 859.695638][T11353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 859.698209][T11353] loop2: detected capacity change from 0 to 7 [ 860.306560][T11353] Dev loop2: unable to read RDB block 7 [ 860.306623][T11353] loop2: unable to read partition table [ 860.306849][T11353] loop2: partition table beyond EOD, truncated [ 860.306890][T11353] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 861.315691][ T9352] Bluetooth: hci2: command tx timeout [ 863.435314][T11376] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1024'. [ 863.500439][ T9352] Bluetooth: hci2: command tx timeout [ 863.666641][T11378] loop2: detected capacity change from 0 to 7 [ 863.870147][T11387] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1025'. [ 864.008065][T11378] Dev loop2: unable to read RDB block 7 [ 864.008120][T11378] loop2: unable to read partition table [ 864.008357][T11378] loop2: partition table beyond EOD, truncated [ 864.008390][T11378] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 865.750912][T11401] comedi comedi3: comedi_config --init_data is deprecated [ 866.401557][ T9352] Bluetooth: hci2: command tx timeout [ 868.551889][ T9352] Bluetooth: hci2: command tx timeout [ 868.687248][T10996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 868.729493][T10996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.753570][T11415] binder: 11414:11415 ioctl 40046205 0 returned -22 [ 869.020363][T11423] comedi comedi0: 8255: I/O base address not correctly aligned [ 869.042987][T10996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 869.114889][T10996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.134066][T11424] FAULT_INJECTION: forcing a failure. [ 869.134066][T11424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.134099][T11424] CPU: 0 UID: 0 PID: 11424 Comm: syz.6.1035 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 869.134122][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 869.134132][T11424] Call Trace: [ 869.134139][T11424] [ 869.134146][T11424] dump_stack_lvl+0xe8/0x150 [ 869.134175][T11424] should_fail_ex+0x46b/0x600 [ 869.134210][T11424] _copy_to_user+0x31/0xb0 [ 869.134232][T11424] simple_read_from_buffer+0xe1/0x170 [ 869.134261][T11424] proc_fail_nth_read+0x1be/0x230 [ 869.134291][T11424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 869.134319][T11424] ? rw_verify_area+0x2ac/0x4e0 [ 869.134337][T11424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 869.134363][T11424] vfs_read+0x212/0xa80 [ 869.134387][T11424] ? __pfx_vfs_read+0x10/0x10 [ 869.134419][T11424] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 869.134440][T11424] ? lockdep_hardirqs_on+0x7a/0x110 [ 869.134460][T11424] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 869.134497][T11424] ? mutex_lock_nested+0x152/0x1d0 [ 869.134536][T11424] ? fdget_pos+0x252/0x320 [ 869.134564][T11424] ksys_read+0x156/0x270 [ 869.134585][T11424] ? __pfx_ksys_read+0x10/0x10 [ 869.134608][T11424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.134627][T11424] do_syscall_64+0x15f/0xf80 [ 869.134651][T11424] ? clear_bhb_loop+0x40/0x90 [ 869.134673][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.134690][T11424] RIP: 0033:0x7f0398b8d60e [ 869.134705][T11424] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 869.134720][T11424] RSP: 002b:00007f0396e04fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 869.134738][T11424] RAX: ffffffffffffffda RBX: 00007f0396e056c0 RCX: 00007f0398b8d60e [ 869.134750][T11424] RDX: 000000000000000f RSI: 00007f0396e050a0 RDI: 0000000000000003 [ 869.134776][T11424] RBP: 00007f0396e05090 R08: 0000000000000000 R09: 0000000000000000 [ 869.134787][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.134797][T11424] R13: 00007f0398e46128 R14: 00007f0398e46090 R15: 00007ffcd7084068 [ 869.134823][T11424] [ 869.410289][T10996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 869.477056][T10996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.519198][T10996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 869.596293][T10996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.681012][T11430] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1037'. [ 869.784384][T11436] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1038'. [ 870.010220][T11435] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 870.104622][ T6238] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 870.284404][ T6238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 870.284453][ T6238] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 870.284474][ T6238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.323989][ T6238] usb 5-1: config 0 descriptor?? [ 870.326313][T11438] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 871.038787][ T6238] hid_parser_main: 30 callbacks suppressed [ 871.038816][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.038846][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.038871][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.038897][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.038922][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.038947][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.038972][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.038996][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.039021][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.039045][ T6238] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 871.224784][ T6238] usb 5-1: USB disconnect, device number 19 [ 875.592911][T11477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1048'. [ 875.705288][ T9352] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 875.782565][T10996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.812400][T10996] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.833331][ T2254] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.833583][ T2254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.870754][ T2254] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.870968][ T2254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.798797][ T3325] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 877.193744][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.200114][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.200374][T11338] bridge_slave_0: entered allmulticast mode [ 877.209256][T11338] bridge_slave_0: entered promiscuous mode [ 877.257291][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.257411][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.257608][T11338] bridge_slave_1: entered allmulticast mode [ 877.267597][T11338] bridge_slave_1: entered promiscuous mode [ 877.437827][T11338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.443702][T11338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.510017][T11338] team0: Port device team_slave_0 added [ 877.513223][T11338] team0: Port device team_slave_1 added [ 877.666731][ T8591] bridge_slave_1: left allmulticast mode [ 877.666762][ T8591] bridge_slave_1: left promiscuous mode [ 877.666982][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.767873][ T8591] bridge_slave_0: left allmulticast mode [ 877.767900][ T8591] bridge_slave_0: left promiscuous mode [ 877.768059][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.296105][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 879.330106][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 879.410944][ T9377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 879.416596][ T9377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 879.420465][ T9377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 880.060561][ T9377] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 880.060794][ T9377] Bluetooth: hci1: Injecting HCI hardware error event [ 880.064785][ T9352] Bluetooth: hci1: hardware error 0x00 [ 881.193799][ T8591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.258672][ T8591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.283087][ T8591] bond0 (unregistering): Released all slaves [ 881.323407][T11338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.323425][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.324776][T11338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.854345][ T9377] Bluetooth: hci3: command tx timeout [ 882.319538][ T9352] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 884.014275][ T9377] Bluetooth: hci3: command tx timeout [ 884.285532][T11338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.285549][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.285579][T11338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.449882][T11338] hsr_slave_0: entered promiscuous mode [ 884.451409][T11338] hsr_slave_1: entered promiscuous mode [ 884.466088][T11338] debugfs: 'hsr0' already exists in 'hsr' [ 884.466112][T11338] Cannot create hsr debugfs directory [ 884.932197][ T8591] hsr_slave_0: left promiscuous mode [ 884.976351][ T8591] hsr_slave_1: left promiscuous mode [ 884.977514][ T8591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.030317][ T8591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.852960][ T8591] team0 (unregistering): Port device team_slave_1 removed [ 885.922049][ T8591] team0 (unregistering): Port device team_slave_0 removed [ 886.171166][T11535] netlink: 'syz.6.1059': attribute type 15 has an invalid length. [ 886.236903][ T9377] Bluetooth: hci3: command tx timeout [ 886.289874][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 888.032373][ T9543] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 888.192400][ T9543] usb 7-1: Using ep0 maxpacket: 8 [ 888.195132][ T9543] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 888.195159][ T9543] usb 7-1: config 0 has no interface number 0 [ 888.198919][ T9543] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 888.198948][ T9543] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.198970][ T9543] usb 7-1: Product: syz [ 888.198986][ T9543] usb 7-1: Manufacturer: syz [ 888.199002][ T9543] usb 7-1: SerialNumber: syz [ 888.339615][ T9543] usb 7-1: config 0 descriptor?? [ 888.459695][ T9377] Bluetooth: hci3: command tx timeout [ 888.948822][ T9543] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 888.948929][ T9543] uvcvideo 7-1:0.31: No valid video chain found. [ 888.977923][ T9543] usb 7-1: USB disconnect, device number 14 [ 889.678404][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 889.679350][T11590] netem: change failed [ 890.158670][T11598] comedi comedi3: comedi_config --init_data is deprecated [ 890.433906][T11600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.285624][T11657] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1078'. [ 894.286908][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1078'. [ 894.542913][T11666] FAULT_INJECTION: forcing a failure. [ 894.542913][T11666] name failslab, interval 1, probability 0, space 0, times 0 [ 894.542949][T11666] CPU: 0 UID: 0 PID: 11666 Comm: syz.4.1079 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 894.542973][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 894.542986][T11666] Call Trace: [ 894.542995][T11666] [ 894.543008][T11666] dump_stack_lvl+0xe8/0x150 [ 894.543035][T11666] should_fail_ex+0x46b/0x600 [ 894.543086][T11666] should_failslab+0xa8/0x100 [ 894.543113][T11666] kmem_cache_alloc_noprof+0x87/0x680 [ 894.543134][T11666] ? do_getname+0x2e/0x250 [ 894.543162][T11666] do_getname+0x2e/0x250 [ 894.543184][T11666] ? user_path_at+0x1e/0x160 [ 894.543204][T11666] user_path_at+0x2a/0x160 [ 894.543226][T11666] __se_sys_mount+0x2dc/0x420 [ 894.543257][T11666] ? __pfx___se_sys_mount+0x10/0x10 [ 894.543298][T11666] ? __x64_sys_mount+0x20/0xc0 [ 894.543324][T11666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.543345][T11666] do_syscall_64+0x15f/0xf80 [ 894.543368][T11666] ? trace_irq_disable+0x3b/0x140 [ 894.543389][T11666] ? clear_bhb_loop+0x40/0x90 [ 894.543411][T11666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.543430][T11666] RIP: 0033:0x7fd80f7bcdd9 [ 894.543446][T11666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.543461][T11666] RSP: 002b:00007fd80d9cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 894.543479][T11666] RAX: ffffffffffffffda RBX: 00007fd80fa36180 RCX: 00007fd80f7bcdd9 [ 894.543493][T11666] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000100 [ 894.543505][T11666] RBP: 00007fd80d9cc090 R08: 0000000000000000 R09: 0000000000000000 [ 894.543515][T11666] R10: 0000000001085408 R11: 0000000000000246 R12: 0000000000000001 [ 894.543528][T11666] R13: 00007fd80fa36218 R14: 00007fd80fa36180 R15: 00007ffee9921ea8 [ 894.543555][T11666] [ 894.560871][T11666] overlayfs: overlapping lowerdir path [ 895.361079][T11671] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9359] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11671] [ 896.711159][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1084'. [ 898.820699][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1085'. [ 898.860505][T11709] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1085'. [ 900.834026][ T36] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 900.996493][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.996644][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.996848][T11498] bridge_slave_0: entered allmulticast mode [ 901.004549][T11498] bridge_slave_0: entered promiscuous mode [ 901.414610][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 901.414660][ T36] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 901.414684][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.606814][ T36] usb 5-1: config 0 descriptor?? [ 901.617654][T11746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 901.996493][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.996643][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.996876][T11498] bridge_slave_1: entered allmulticast mode [ 902.027910][T11498] bridge_slave_1: entered promiscuous mode [ 902.207605][T11498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.276385][ T36] hid_parser_main: 470 callbacks suppressed [ 902.276424][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.281500][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.281614][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.281693][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.281773][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.281849][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.281925][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.282002][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.282073][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.282151][ T36] wacom 0003:056A:5000.0004: unknown main item tag 0x0 [ 902.387026][T11498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.411593][ T10] usb 5-1: USB disconnect, device number 20 [ 902.715660][T11498] team0: Port device team_slave_0 added [ 902.741534][T11498] team0: Port device team_slave_1 added [ 902.774236][T11338] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 902.846113][T11338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.879279][T11338] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 902.931103][T11338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 902.932806][T11498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.932821][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.932866][T11498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.936614][T11338] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 903.017264][T11338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 903.018896][T11498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.018908][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.018942][T11498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.067878][ T9377] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 903.633523][T11338] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 903.707574][T11338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 904.446455][ T9377] Bluetooth: hci3: command tx timeout [ 908.547449][T11498] hsr_slave_0: entered promiscuous mode [ 908.557004][T11498] hsr_slave_1: entered promiscuous mode [ 908.572639][T11498] debugfs: 'hsr0' already exists in 'hsr' [ 908.572665][T11498] Cannot create hsr debugfs directory [ 910.077551][ T8591] bridge_slave_1: left allmulticast mode [ 910.077579][ T8591] bridge_slave_1: left promiscuous mode [ 910.077790][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.144581][ T8591] bridge_slave_0: left allmulticast mode [ 910.144609][ T8591] bridge_slave_0: left promiscuous mode [ 910.144812][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.575862][T11829] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1109'. [ 910.925021][ T8591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.012252][ T8591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.032748][ T8591] bond0 (unregistering): Released all slaves [ 911.723112][ T8591] hsr_slave_0: left promiscuous mode [ 912.161421][ T8591] hsr_slave_1: left promiscuous mode [ 912.289358][ T8591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.829069][ T8591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.198984][ T8591] team0 (unregistering): Port device team_slave_1 removed [ 913.243177][ T8591] team0 (unregistering): Port device team_slave_0 removed [ 913.962652][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 914.059686][T11338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.935158][T11338] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.084123][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.084879][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.486490][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.486622][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.638306][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 918.364510][T11898] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 918.455297][ T9883] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 918.615612][ T9883] usb 5-1: Using ep0 maxpacket: 8 [ 918.618045][ T9883] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 918.618069][ T9883] usb 5-1: config 0 has no interface number 0 [ 918.646885][ T9883] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 918.646916][ T9883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.646938][ T9883] usb 5-1: Product: syz [ 918.646963][ T9883] usb 5-1: Manufacturer: syz [ 918.646979][ T9883] usb 5-1: SerialNumber: syz [ 918.697599][ T9883] usb 5-1: config 0 descriptor?? [ 918.941320][ T9883] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 918.941407][ T9883] uvcvideo 5-1:0.31: No valid video chain found. [ 918.971024][ T9883] usb 5-1: USB disconnect, device number 21 [ 919.756011][ T37] kauditd_printk_skb: 87 callbacks suppressed [ 919.756031][ T37] audit: type=1804 audit(1778404417.904:359): pid=11927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1128" name="bus" dev="ramfs" ino=36746 res=1 errno=0 [ 919.756089][ T37] audit: type=1804 audit(1778404417.904:360): pid=11927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.1128" name="bus" dev="ramfs" ino=36746 res=1 errno=0 [ 920.106908][T11338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.428621][T11498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 920.469505][T11498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 920.482091][T11498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 920.573002][T11498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 920.580663][T11498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 920.701326][T11498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 920.703430][T11498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 920.737070][T11498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 920.763523][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 920.937123][ T10] usb 5-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.937160][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 920.937194][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 920.937219][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.016873][ T10] usb 5-1: config 0 descriptor?? [ 921.260597][T11498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.335993][T11498] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.450789][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.450923][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.497532][T11338] veth0_vlan: entered promiscuous mode [ 921.553668][ T8591] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.553812][ T8591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.573703][ T10] hid_parser_main: 470 callbacks suppressed [ 921.573726][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.573753][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.573778][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.573802][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.573827][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.573851][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.573874][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.573898][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.575030][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.575061][ T10] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0 [ 921.715109][T11338] veth1_vlan: entered promiscuous mode [ 921.921685][T11338] veth0_macvtap: entered promiscuous mode [ 921.950030][ T10] magicmouse 0003:05AC:0265.0005: hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 922.045348][T11338] veth1_macvtap: entered promiscuous mode [ 922.073108][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1133'. [ 922.104274][ T10] usb 5-1: USB disconnect, device number 22 [ 922.230716][T11338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.284999][T11338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.320663][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.321157][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.321442][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.321959][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.631186][T11973] fido_id[11973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 923.171041][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 923.171112][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 923.467384][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 923.627327][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 923.629848][ T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 923.629874][ T10] usb 5-1: config 0 has no interface number 0 [ 923.647864][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 923.647894][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.647915][ T10] usb 5-1: Product: syz [ 923.647930][ T10] usb 5-1: Manufacturer: syz [ 923.647945][ T10] usb 5-1: SerialNumber: syz [ 923.752424][ T10] usb 5-1: config 0 descriptor?? [ 923.809999][ T9352] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 923.911823][ T9352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 923.935162][ T9352] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 923.936560][ T9352] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 923.958231][ T9352] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 924.254264][ T10] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 924.254358][ T10] uvcvideo 5-1:0.31: No valid video chain found. [ 924.271516][ T10] usb 5-1: USB disconnect, device number 23 [ 926.026129][T11498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.611543][ T9377] Bluetooth: hci4: command tx timeout [ 928.810532][ T9352] Bluetooth: hci4: command tx timeout [ 929.082316][ T66] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.504851][T10465] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 929.678124][T10465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 929.678173][T10465] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 929.678195][T10465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.730936][T10465] usb 5-1: config 0 descriptor?? [ 929.733380][T12045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 930.214299][T10465] hid_parser_main: 30 callbacks suppressed [ 930.214323][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.214352][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.214377][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.214402][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.214427][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.214452][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.214495][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.214521][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.214548][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.214575][T10465] wacom 0003:056A:5000.0006: unknown main item tag 0x0 [ 930.325353][ T66] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.452928][ T9543] usb 5-1: USB disconnect, device number 24 [ 930.781196][ T66] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.829758][T10465] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 930.954399][T11498] veth0_vlan: entered promiscuous mode [ 931.011384][T10465] usb 7-1: Using ep0 maxpacket: 8 [ 931.016131][T10465] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 931.016159][T10465] usb 7-1: config 0 has no interface number 0 [ 931.018683][T10465] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 931.018711][T10465] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.018732][T10465] usb 7-1: Product: syz [ 931.018747][T10465] usb 7-1: Manufacturer: syz [ 931.018762][T10465] usb 7-1: SerialNumber: syz [ 931.031642][T10465] usb 7-1: config 0 descriptor?? [ 931.032983][ T9352] Bluetooth: hci4: command tx timeout [ 932.461140][ T66] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.664525][T10465] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 932.664610][T10465] uvcvideo 7-1:0.31: No valid video chain found. [ 932.719602][T10465] usb 7-1: USB disconnect, device number 15 [ 932.799299][T12004] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.799526][T12004] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.799773][T12004] bridge_slave_0: entered allmulticast mode [ 932.814885][T12004] bridge_slave_0: entered promiscuous mode [ 932.831352][T11498] veth1_vlan: entered promiscuous mode [ 932.843545][T12004] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.843661][T12004] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.843883][T12004] bridge_slave_1: entered allmulticast mode [ 932.847430][T12004] bridge_slave_1: entered promiscuous mode [ 932.942377][T12004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.963170][T12004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.069415][T12076] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1153'. [ 933.101926][T12004] team0: Port device team_slave_0 added [ 933.119998][T12004] team0: Port device team_slave_1 added [ 933.265666][T12004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.265685][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.265719][T12004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.266677][ T9352] Bluetooth: hci4: command tx timeout [ 933.341679][T10465] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 933.489243][T12004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.489257][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.489277][T12004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.501221][T10465] usb 5-1: Using ep0 maxpacket: 8 [ 933.508788][T10465] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.508845][T10465] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 933.508910][T10465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.591535][T10465] usb 5-1: config 0 descriptor?? [ 933.646322][T10465] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 933.676697][T11498] veth0_macvtap: entered promiscuous mode [ 933.715894][ T9883] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 933.876945][ T9883] usb 7-1: Using ep0 maxpacket: 32 [ 933.885229][ T9883] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 933.885266][ T9883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.885281][ T9883] usb 7-1: config 0 has no interface number 0 [ 933.885371][ T9883] usb 7-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 933.885392][ T9883] usb 7-1: config 0 interface 184 has no altsetting 0 [ 933.967423][T11498] veth1_macvtap: entered promiscuous mode [ 933.990445][ T9883] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=69.ee [ 933.990477][ T9883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.990498][ T9883] usb 7-1: Product: syz [ 933.990513][ T9883] usb 7-1: Manufacturer: syz [ 933.990605][ T9883] usb 7-1: SerialNumber: syz [ 934.041631][T12004] hsr_slave_0: entered promiscuous mode [ 934.043036][T12004] hsr_slave_1: entered promiscuous mode [ 934.043987][T12004] debugfs: 'hsr0' already exists in 'hsr' [ 934.044011][T12004] Cannot create hsr debugfs directory [ 934.071553][ T9883] usb 7-1: config 0 descriptor?? [ 934.125631][ T9883] gspca_main: spca501-2.14.0 probing 0000:0000 [ 934.380601][ T66] bridge_slave_1: left allmulticast mode [ 934.380653][ T66] bridge_slave_1: left promiscuous mode [ 934.381210][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.475682][ T66] bridge_slave_0: left allmulticast mode [ 934.475716][ T66] bridge_slave_0: left promiscuous mode [ 934.476147][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.911629][ T9883] gspca_spca501: reg write: error -71 [ 934.914844][ T9883] spca501 7-1:0.184: Reg write failed for 0x05,0x22,0x04 [ 934.915028][ T9883] spca501 7-1:0.184: probe with driver spca501 failed with error -22 [ 934.953971][T10465] gspca_vc032x: reg_w err -71 [ 934.954036][T10465] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 935.051764][T10465] usb 5-1: USB disconnect, device number 25 [ 935.054259][ T9883] usb 7-1: USB disconnect, device number 16 [ 935.858981][ T9352] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 936.430033][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.517674][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.624794][ T66] bond0 (unregistering): Released all slaves [ 938.159532][T11498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.625234][ T66] hsr_slave_0: left promiscuous mode [ 938.673453][ T66] hsr_slave_1: left promiscuous mode [ 938.674681][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.674705][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.807504][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.807532][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.907464][ T66] veth1_macvtap: left promiscuous mode [ 938.907572][ T66] veth0_macvtap: left promiscuous mode [ 938.907821][ T66] veth1_vlan: left promiscuous mode [ 938.932373][ T66] veth0_vlan: left promiscuous mode [ 939.068771][ T6238] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 939.229047][ T6238] usb 5-1: Using ep0 maxpacket: 8 [ 939.231074][ T6238] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 939.231094][ T6238] usb 5-1: config 0 has no interface number 0 [ 939.234308][ T6238] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 939.234336][ T6238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.234356][ T6238] usb 5-1: Product: syz [ 939.234370][ T6238] usb 5-1: Manufacturer: syz [ 939.234385][ T6238] usb 5-1: SerialNumber: syz [ 939.287597][ T6238] usb 5-1: config 0 descriptor?? [ 940.866021][ T66] team0 (unregistering): Port device team_slave_1 removed [ 940.940995][ T66] team0 (unregistering): Port device team_slave_0 removed [ 941.254647][T11498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.338002][ T6238] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 941.338094][ T6238] uvcvideo 5-1:0.31: No valid video chain found. [ 941.377919][ T6238] usb 5-1: USB disconnect, device number 26 [ 941.482564][ T8591] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.533497][ T8591] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.615049][ T8591] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.695261][ T8591] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.169069][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 945.060353][ T9377] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 945.125201][ T9377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 945.165721][ T9377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 945.201040][ T9377] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 945.207382][ T9377] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 946.151298][ T9883] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 946.324475][ T9883] usb 5-1: Using ep0 maxpacket: 8 [ 946.328905][ T9883] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 946.328932][ T9883] usb 5-1: config 0 has no interface number 0 [ 946.355272][ T9883] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 946.355302][ T9883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.355322][ T9883] usb 5-1: Product: syz [ 946.355337][ T9883] usb 5-1: Manufacturer: syz [ 946.355351][ T9883] usb 5-1: SerialNumber: syz [ 946.398653][ T9883] usb 5-1: config 0 descriptor?? [ 946.608180][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 946.636385][ T9883] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 946.636477][ T9883] uvcvideo 5-1:0.31: No valid video chain found. [ 946.673033][ T9883] usb 5-1: USB disconnect, device number 27 [ 947.446573][ T9377] Bluetooth: hci2: command tx timeout [ 948.066390][ T5737] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 948.953264][ T5737] usb 5-1: Using ep0 maxpacket: 32 [ 948.955388][ T5737] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 948.955414][ T5737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.955435][ T5737] usb 5-1: config 0 has no interface number 0 [ 948.955477][ T5737] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 948.955497][ T5737] usb 5-1: config 0 interface 184 has no altsetting 0 [ 948.957955][ T5737] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=69.ee [ 948.957988][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.958003][ T5737] usb 5-1: Product: syz [ 948.958014][ T5737] usb 5-1: Manufacturer: syz [ 948.958024][ T5737] usb 5-1: SerialNumber: syz [ 949.012810][ T5737] usb 5-1: config 0 descriptor?? [ 949.102166][ T5737] gspca_main: spca501-2.14.0 probing 0000:0000 [ 949.120218][ T1229] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.669214][ T9377] Bluetooth: hci2: command tx timeout [ 949.848032][ T5737] gspca_spca501: reg write: error -71 [ 949.848047][ T5737] spca501 5-1:0.184: Reg write failed for 0x05,0x22,0x04 [ 949.848132][ T5737] spca501 5-1:0.184: probe with driver spca501 failed with error -22 [ 949.907501][ T5737] usb 5-1: USB disconnect, device number 28 [ 949.957742][ T36] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 950.174669][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.174701][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.174738][ T36] usb 7-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 950.174759][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.222720][ T36] usb 7-1: config 0 descriptor?? [ 950.986197][ T36] stadia 0003:18D1:9400.0007: unbalanced delimiter at end of report description [ 950.987845][ T36] stadia 0003:18D1:9400.0007: parse failed [ 950.990325][ T36] stadia 0003:18D1:9400.0007: probe with driver stadia failed with error -22 [ 951.111089][ T1229] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.182354][ T5737] usb 7-1: USB disconnect, device number 17 [ 951.892708][ T9377] Bluetooth: hci2: command tx timeout [ 952.011224][ T1229] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.308677][ T6238] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 952.482254][ T6238] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.482289][ T6238] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.482329][ T6238] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 952.482354][ T6238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.539144][ T6238] usb 7-1: config 0 descriptor?? [ 953.053479][ T6238] hid_parser_main: 470 callbacks suppressed [ 953.053503][ T6238] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 953.118976][ T6238] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 953.411118][ T1229] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.067150][ T6238] cp2112 0003:10C4:EA90.0008: error requesting version [ 954.114751][ T9377] Bluetooth: hci2: command tx timeout [ 954.144805][ T6238] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 954.164850][ T6238] usb 7-1: USB disconnect, device number 18 [ 954.518384][T12004] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 954.558129][T12004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 954.562553][T12004] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 954.610038][T12004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 954.635251][T12004] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 954.770818][T12004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 955.290275][T12004] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 955.316974][T12004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 956.240100][T12152] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.240245][T12152] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.240503][T12152] bridge_slave_0: entered allmulticast mode [ 956.271590][T12152] bridge_slave_0: entered promiscuous mode [ 956.297662][T12152] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.297788][T12152] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.298320][T12152] bridge_slave_1: entered allmulticast mode [ 956.304351][T12152] bridge_slave_1: entered promiscuous mode [ 957.620188][ T1229] bridge_slave_1: left allmulticast mode [ 957.620224][ T1229] bridge_slave_1: left promiscuous mode [ 957.620476][ T1229] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.674223][ T1229] bridge_slave_0: left allmulticast mode [ 957.674249][ T1229] bridge_slave_0: left promiscuous mode [ 957.674476][ T1229] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.876522][ T36] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 958.068474][ T36] usb 7-1: Using ep0 maxpacket: 32 [ 958.071040][ T36] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 958.071066][ T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.071086][ T36] usb 7-1: config 0 has no interface number 0 [ 958.071131][ T36] usb 7-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 958.071159][ T36] usb 7-1: config 0 interface 184 has no altsetting 0 [ 958.073920][ T36] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=69.ee [ 958.073949][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.073962][ T36] usb 7-1: Product: syz [ 958.073972][ T36] usb 7-1: Manufacturer: syz [ 958.073981][ T36] usb 7-1: SerialNumber: syz [ 958.078413][ T36] usb 7-1: config 0 descriptor?? [ 958.167691][ T36] gspca_main: spca501-2.14.0 probing 0000:0000 [ 958.508689][ T1229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.550154][ T1229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.573775][ T1229] bond0 (unregistering): Released all slaves [ 958.813373][ T36] gspca_spca501: reg write: error -71 [ 958.813392][ T36] spca501 7-1:0.184: Reg write failed for 0x05,0x22,0x04 [ 958.813500][ T36] spca501 7-1:0.184: probe with driver spca501 failed with error -22 [ 958.851038][ T36] usb 7-1: USB disconnect, device number 19 [ 958.954136][T12308] FAULT_INJECTION: forcing a failure. [ 958.954136][T12308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.954179][T12308] CPU: 1 UID: 0 PID: 12308 Comm: syz.7.1195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 958.954205][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 958.954218][T12308] Call Trace: [ 958.954226][T12308] [ 958.954235][T12308] dump_stack_lvl+0xe8/0x150 [ 958.954266][T12308] should_fail_ex+0x46b/0x600 [ 958.954307][T12308] _copy_from_user+0x2d/0xb0 [ 958.954334][T12308] sock_ioctl_inout+0x53/0x170 [ 958.954363][T12308] ipmr_sk_ioctl+0xfa/0x1c0 [ 958.954395][T12308] ? __pfx_ipmr_sk_ioctl+0x10/0x10 [ 958.954414][T12308] ? kasan_save_free_info+0x46/0x50 [ 958.954449][T12308] ? stack_depot_save_flags+0x33/0x810 [ 958.954477][T12308] ? kasan_save_track+0x4f/0x80 [ 958.954496][T12308] ? kasan_save_track+0x3e/0x80 [ 958.954514][T12308] ? kasan_save_free_info+0x46/0x50 [ 958.954541][T12308] ? kfree+0x1c5/0x6c0 [ 958.954560][T12308] ? tomoyo_path_number_perm+0x501/0x630 [ 958.954587][T12308] ? security_file_ioctl+0xc3/0x2a0 [ 958.954612][T12308] ? __se_sys_ioctl+0x47/0x170 [ 958.954639][T12308] sk_ioctl+0x138/0x6d0 [ 958.954664][T12308] ? __pfx_sk_ioctl+0x10/0x10 [ 958.954715][T12308] inet_ioctl+0x484/0x560 [ 958.954746][T12308] ? __pfx_inet_ioctl+0x10/0x10 [ 958.954797][T12308] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 958.954831][T12308] sock_do_ioctl+0x101/0x320 [ 958.954868][T12308] ? __pfx_sock_do_ioctl+0x10/0x10 [ 958.954905][T12308] ? __asan_memset+0x22/0x50 [ 958.954936][T12308] ? smack_file_ioctl+0x263/0x360 [ 958.954969][T12308] sock_ioctl+0x5c9/0x7f0 [ 958.955004][T12308] ? __pfx_sock_ioctl+0x10/0x10 [ 958.955036][T12308] ? __fget_files+0x2a/0x420 [ 958.955055][T12308] ? __fget_files+0x3a6/0x420 [ 958.955073][T12308] ? __fget_files+0x2a/0x420 [ 958.955096][T12308] ? bpf_lsm_file_ioctl+0x9/0x20 [ 958.955122][T12308] ? __pfx_sock_ioctl+0x10/0x10 [ 958.955154][T12308] __se_sys_ioctl+0xff/0x170 [ 958.955191][T12308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.955215][T12308] do_syscall_64+0x15f/0xf80 [ 958.955241][T12308] ? trace_irq_disable+0x3b/0x140 [ 958.955266][T12308] ? clear_bhb_loop+0x40/0x90 [ 958.955291][T12308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.955312][T12308] RIP: 0033:0x7fe2a7b0cdd9 [ 958.955331][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.955349][T12308] RSP: 002b:00007fe2a5d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.955370][T12308] RAX: ffffffffffffffda RBX: 00007fe2a7d85fa0 RCX: 00007fe2a7b0cdd9 [ 958.955385][T12308] RDX: 0000200000000000 RSI: 00000000000089e1 RDI: 0000000000000003 [ 958.955398][T12308] RBP: 00007fe2a5d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 958.955410][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.955422][T12308] R13: 00007fe2a7d86038 R14: 00007fe2a7d85fa0 R15: 00007ffeba630298 [ 958.955455][T12308] [ 959.210460][T12152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.279855][T12152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.381735][T12152] team0: Port device team_slave_0 added [ 959.531612][T12314] comedi comedi3: comedi_config --init_data is deprecated [ 959.589730][ T1229] hsr_slave_0: left promiscuous mode [ 959.649211][ T1229] hsr_slave_1: left promiscuous mode [ 959.693813][ T1229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.693842][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.737623][ T1229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.737651][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.947452][ T1229] veth1_macvtap: left promiscuous mode [ 959.947561][ T1229] veth0_macvtap: left promiscuous mode [ 959.947816][ T1229] veth1_vlan: left promiscuous mode [ 959.947999][ T1229] veth0_vlan: left promiscuous mode [ 961.670379][ T1229] team0 (unregistering): Port device team_slave_1 removed [ 961.724758][ T1229] team0 (unregistering): Port device team_slave_0 removed [ 962.055540][T12152] team0: Port device team_slave_1 added [ 965.148962][T12152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.148980][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.149010][T12152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.553734][T12152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.553752][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.553781][T12152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.834283][T12152] hsr_slave_0: entered promiscuous mode [ 965.836691][T12152] hsr_slave_1: entered promiscuous mode [ 965.842943][T12152] debugfs: 'hsr0' already exists in 'hsr' [ 965.842970][T12152] Cannot create hsr debugfs directory [ 966.173768][ T9377] Bluetooth: hci5: unexpected event for opcode 0x1804 [ 966.510503][T10465] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 966.708060][T10465] usb 7-1: unable to get BOS descriptor or descriptor too short [ 966.711234][T10465] usb 7-1: config 1 interface 0 has no altsetting 0 [ 966.736441][T10465] usb 7-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 966.736480][T10465] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.736503][T10465] usb 7-1: Product: syz [ 966.736518][T10465] usb 7-1: Manufacturer: syz [ 966.736534][T10465] usb 7-1: SerialNumber: syz [ 967.132679][T10465] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input17 [ 967.250958][ T4950] bcm5974 7-1:1.0: could not read from device [ 969.327657][ T4950] bcm5974 7-1:1.0: could not read from device [ 970.283286][T10465] usb 7-1: USB disconnect, device number 20 [ 970.471359][T12392] loop2: detected capacity change from 0 to 7 [ 970.492234][T12392] Dev loop2: unable to read RDB block 7 [ 970.492275][T12392] loop2: AHDI p1 p2 p3 [ 970.492306][T12392] loop2: partition table partially beyond EOD, truncated [ 970.492559][T12392] loop2: p1 start 1601398130 is beyond EOD, truncated [ 970.492591][T12392] loop2: p2 start 1702059890 is beyond EOD, truncated [ 971.581840][T11324] udevd[11324]: Error opening device "/dev/input/event4": No such file or directory [ 971.581985][T11324] udevd[11324]: Unable to EVIOCGABS device "/dev/input/event4" [ 971.582112][T11324] udevd[11324]: Unable to EVIOCGABS device "/dev/input/event4" [ 971.582225][T11324] udevd[11324]: Unable to EVIOCGABS device "/dev/input/event4" [ 971.582351][T11324] udevd[11324]: Unable to EVIOCGABS device "/dev/input/event4" [ 973.055884][T12004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.240346][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 973.276199][T12004] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.303635][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.303719][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.339699][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.339791][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.884159][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 975.040301][ T10] usb 5-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 975.040349][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 975.040382][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 975.040404][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.046531][ T10] usb 5-1: config 0 descriptor?? [ 975.507577][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.507615][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.507643][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.507670][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.507697][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.507723][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.507750][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.507777][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.507804][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.507830][ T10] magicmouse 0003:05AC:0265.0009: unknown main item tag 0x0 [ 975.617544][ T10] magicmouse 0003:05AC:0265.0009: hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 975.945120][ T9543] usb 5-1: USB disconnect, device number 29 [ 977.965891][ T9883] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 977.993270][T12454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 977.993288][T12454] IPv6: NLM_F_CREATE should be set when creating new route [ 978.137320][ T9883] usb 7-1: Using ep0 maxpacket: 32 [ 978.142475][ T9883] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 978.142503][ T9883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.142521][ T9883] usb 7-1: config 0 has no interface number 0 [ 978.142564][ T9883] usb 7-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 978.142591][ T9883] usb 7-1: config 0 interface 184 has no altsetting 0 [ 978.147849][ T9883] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=69.ee [ 978.147924][ T9883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.147974][ T9883] usb 7-1: Product: syz [ 978.148012][ T9883] usb 7-1: Manufacturer: syz [ 978.148045][ T9883] usb 7-1: SerialNumber: syz [ 978.263786][ T9883] usb 7-1: config 0 descriptor?? [ 978.294711][ T9883] gspca_main: spca501-2.14.0 probing 0000:0000 [ 979.062464][ T9883] gspca_spca501: reg write: error -71 [ 979.062477][ T9883] spca501 7-1:0.184: Reg write failed for 0x05,0x22,0x04 [ 979.062542][ T9883] spca501 7-1:0.184: probe with driver spca501 failed with error -22 [ 979.109438][ T9883] usb 7-1: USB disconnect, device number 21 [ 980.166506][T12004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.434358][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 980.596263][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 980.598051][ T10] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 980.598068][ T10] usb 7-1: config 0 has no interface number 0 [ 980.601789][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 980.601821][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.601836][ T10] usb 7-1: Product: syz [ 980.601846][ T10] usb 7-1: Manufacturer: syz [ 980.601856][ T10] usb 7-1: SerialNumber: syz [ 980.683694][ T10] usb 7-1: config 0 descriptor?? [ 980.918630][ T10] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 980.918711][ T10] uvcvideo 7-1:0.31: No valid video chain found. [ 980.994001][ T10] usb 7-1: USB disconnect, device number 22 [ 981.344516][ T9377] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 982.437805][T12152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 982.517000][T12152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.538925][T12152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 982.589646][T12152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.614720][T12152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 982.664580][T12152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.678684][T12004] veth0_vlan: entered promiscuous mode [ 982.705338][T12152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 982.887961][T12152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 983.195545][T12004] veth1_vlan: entered promiscuous mode [ 983.670940][T12004] veth0_macvtap: entered promiscuous mode [ 983.982342][T12004] veth1_macvtap: entered promiscuous mode [ 984.132772][T12004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.244118][ T9377] Bluetooth: hci5: unexpected event for opcode 0x1804 [ 984.313381][T12004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.393530][ T66] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.408947][ T66] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.441729][ T66] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.446173][ T66] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.479797][T12559] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1246'. [ 984.681906][T12152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.479062][T12574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 985.556436][T12152] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.635454][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.635587][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.635022][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.635417][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.991971][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.991992][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.054047][T12600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1253'. [ 989.184958][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.185010][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.990593][ T9352] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 990.045793][ T9352] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 990.048501][ T9352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 990.077388][ T9352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 990.100520][ T9352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 990.768289][T12630] binder: 12627:12630 ioctl c0306201 2000000004c0 returned -22 [ 991.463324][ T4209] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.558327][T12630] netlink: 'syz.6.1259': attribute type 9 has an invalid length. [ 991.836486][T10465] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 992.009598][T10465] usb 5-1: Using ep0 maxpacket: 8 [ 992.012152][T10465] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 992.012194][T10465] usb 5-1: config 0 has no interface number 0 [ 992.016462][T10465] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 992.016483][T10465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.016498][T10465] usb 5-1: Product: syz [ 992.016508][T10465] usb 5-1: Manufacturer: syz [ 992.016518][T10465] usb 5-1: SerialNumber: syz [ 992.074096][T10465] usb 5-1: config 0 descriptor?? [ 992.325664][T10465] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 992.325749][T10465] uvcvideo 5-1:0.31: No valid video chain found. [ 992.369028][T10465] usb 5-1: USB disconnect, device number 30 [ 992.413594][ T9377] Bluetooth: hci3: command tx timeout [ 992.745507][ T4209] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.868737][T12152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.353733][ T4209] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.636268][ T9377] Bluetooth: hci3: command tx timeout [ 994.930024][T12669] binder: BINDER_SET_CONTEXT_MGR already set [ 994.930042][T12669] binder: 12667:12669 ioctl 4018620d 2000000002c0 returned -16 [ 995.292165][ T4209] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.429201][ T5723] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 995.587217][ T5723] usb 7-1: Using ep0 maxpacket: 32 [ 995.589954][ T5723] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 995.589989][ T5723] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.590010][ T5723] usb 7-1: config 0 has no interface number 0 [ 995.590057][ T5723] usb 7-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 995.590085][ T5723] usb 7-1: config 0 interface 184 has no altsetting 0 [ 995.657226][ T5723] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=69.ee [ 995.657256][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.657276][ T5723] usb 7-1: Product: syz [ 995.657291][ T5723] usb 7-1: Manufacturer: syz [ 995.657306][ T5723] usb 7-1: SerialNumber: syz [ 995.726748][ T5723] usb 7-1: config 0 descriptor?? [ 995.784296][ T5723] gspca_main: spca501-2.14.0 probing 0000:0000 [ 996.848985][ T5723] gspca_spca501: reg write: error -110 [ 996.849005][ T5723] spca501 7-1:0.184: Reg write failed for 0x05,0x22,0x04 [ 996.849098][ T5723] spca501 7-1:0.184: probe with driver spca501 failed with error -22 [ 996.862773][ T9377] Bluetooth: hci3: command tx timeout [ 997.158559][T12152] veth0_vlan: entered promiscuous mode [ 997.412871][T10465] usb 7-1: USB disconnect, device number 23 [ 997.531294][T12617] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.531504][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.531748][T12617] bridge_slave_0: entered allmulticast mode [ 997.558554][T12617] bridge_slave_0: entered promiscuous mode [ 997.574053][T12152] veth1_vlan: entered promiscuous mode [ 997.584416][T12617] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.588356][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.588613][T12617] bridge_slave_1: entered allmulticast mode [ 997.612554][T12617] bridge_slave_1: entered promiscuous mode [ 997.739255][T12617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.756153][T12617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.847628][T12617] team0: Port device team_slave_0 added [ 997.874707][T12617] team0: Port device team_slave_1 added [ 998.283083][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1275'. [ 998.346146][ T4209] bridge_slave_1: left allmulticast mode [ 998.346184][ T4209] bridge_slave_1: left promiscuous mode [ 998.346456][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.433994][ T4209] bridge_slave_0: left allmulticast mode [ 998.434030][ T4209] bridge_slave_0: left promiscuous mode [ 998.434300][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.033141][T12726] comedi comedi3: comedi_config --init_data is deprecated [ 999.082527][ T9377] Bluetooth: hci3: command tx timeout [ 1001.304987][ T4209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.369530][ T4209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.554598][ T4209] bond0 (unregistering): Released all slaves [ 1002.461106][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1002.462757][T12617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.462771][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.462802][T12617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.580039][T12617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.580058][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.580089][T12617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.724429][T12152] veth0_macvtap: entered promiscuous mode [ 1002.926970][T12152] veth1_macvtap: entered promiscuous mode [ 1002.978737][T12617] hsr_slave_0: entered promiscuous mode [ 1002.991131][T12617] hsr_slave_1: entered promiscuous mode [ 1003.000608][T12617] debugfs: 'hsr0' already exists in 'hsr' [ 1003.000638][T12617] Cannot create hsr debugfs directory [ 1003.079484][T12752] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1283'. [ 1004.768335][T12765] comedi comedi3: comedi_config --init_data is deprecated [ 1005.818243][T12152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.020588][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1006.097255][T12152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.391985][T12351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.493730][T12351] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.526680][T12351] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.542596][T12351] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.869997][ T4209] hsr_slave_0: left promiscuous mode [ 1008.891385][ T4209] hsr_slave_1: left promiscuous mode [ 1008.892234][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.892253][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.935149][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.935179][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.021097][ T4209] veth1_macvtap: left promiscuous mode [ 1009.021182][ T4209] veth0_macvtap: left promiscuous mode [ 1009.023465][ T4209] veth1_vlan: left promiscuous mode [ 1009.023582][ T4209] veth0_vlan: left promiscuous mode [ 1009.472397][T12804] Bluetooth: MGMT ver 1.23 [ 1009.484827][T12803] comedi comedi3: comedi_config --init_data is deprecated [ 1009.921444][ T9352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1009.968997][ T9352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1009.977230][ T9352] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1009.994942][ T9352] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1010.001037][ T9352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1010.915037][ T4209] team0 (unregistering): Port device team_slave_1 removed [ 1011.022343][ T4209] team0 (unregistering): Port device team_slave_0 removed [ 1012.284577][T12843] comedi comedi3: comedi_config --init_data is deprecated [ 1012.334749][ T9352] Bluetooth: hci2: command tx timeout [ 1014.158441][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1014.575461][ T9352] Bluetooth: hci2: command tx timeout [ 1014.692229][T12880] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 1016.777886][ T9352] Bluetooth: hci2: command tx timeout [ 1018.809480][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1321'. [ 1018.942093][ T4209] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.001252][ T9352] Bluetooth: hci2: command tx timeout [ 1020.825847][ T4209] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.241433][T12978] comedi comedi3: comedi_config --init_data is deprecated [ 1021.932661][ T4209] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.998757][T13004] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1337'. [ 1022.006931][T13004] random: crng reseeded on system resumption [ 1022.427489][ T4209] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.632165][T12813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.636392][T12813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.645419][T12813] bridge_slave_0: entered allmulticast mode [ 1022.658496][T12813] bridge_slave_0: entered promiscuous mode [ 1022.662635][T12813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.662830][T12813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.663132][T12813] bridge_slave_1: entered allmulticast mode [ 1022.690060][T12813] bridge_slave_1: entered promiscuous mode [ 1022.732629][T12617] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1022.800301][T12617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1022.870907][T12617] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1022.917851][T12617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.938901][T12813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.941409][T12617] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1022.982308][T12617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.985856][T12813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.994916][T12617] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1023.041429][T12617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1023.182879][T12813] team0: Port device team_slave_0 added [ 1023.200409][T12813] team0: Port device team_slave_1 added [ 1023.441861][T12813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.441873][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.441893][T12813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.451435][T12813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.451707][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.451790][T12813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.691984][ T4209] bridge_slave_1: left allmulticast mode [ 1023.692022][ T4209] bridge_slave_1: left promiscuous mode [ 1023.692274][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.778773][ T4209] bridge_slave_0: left allmulticast mode [ 1023.778809][ T4209] bridge_slave_0: left promiscuous mode [ 1023.779063][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.748550][T13038] comedi comedi3: comedi_config --init_data is deprecated [ 1026.064144][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1026.181539][ T4209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.224480][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1026.228967][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1026.228996][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.229016][ T10] usb 7-1: config 0 has no interface number 0 [ 1026.229074][ T10] usb 7-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1026.229102][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1026.231854][ T10] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=69.ee [ 1026.231883][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.231904][ T10] usb 7-1: Product: syz [ 1026.231918][ T10] usb 7-1: Manufacturer: syz [ 1026.231932][ T10] usb 7-1: SerialNumber: syz [ 1026.343050][ T10] usb 7-1: config 0 descriptor?? [ 1026.360978][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1026.450294][ T4209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.498799][ T4209] bond0 (unregistering): Released all slaves [ 1026.592094][T12813] hsr_slave_0: entered promiscuous mode [ 1026.595248][T12813] hsr_slave_1: entered promiscuous mode [ 1026.602598][T12813] debugfs: 'hsr0' already exists in 'hsr' [ 1026.602674][T12813] Cannot create hsr debugfs directory [ 1027.143858][ T4209] hsr_slave_0: left promiscuous mode [ 1027.172664][ T4209] hsr_slave_1: left promiscuous mode [ 1027.173780][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.173798][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.198489][ T10] gspca_spca501: reg write: error -71 [ 1027.198505][ T10] spca501 7-1:0.184: Reg write failed for 0x05,0x22,0x04 [ 1027.198596][ T10] spca501 7-1:0.184: probe with driver spca501 failed with error -22 [ 1027.199685][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.199709][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.203267][ T10] usb 7-1: USB disconnect, device number 24 [ 1027.326462][ T4209] veth1_macvtap: left promiscuous mode [ 1027.326537][ T4209] veth0_macvtap: left promiscuous mode [ 1027.326696][ T4209] veth1_vlan: left promiscuous mode [ 1027.326833][ T4209] veth0_vlan: left promiscuous mode [ 1027.356999][ T36] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1027.529938][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 1027.532427][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.532450][ T36] usb 5-1: config 0 has no interfaces? [ 1027.534822][ T36] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1027.534851][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.534864][ T36] usb 5-1: Product: syz [ 1027.534873][ T36] usb 5-1: Manufacturer: syz [ 1027.534883][ T36] usb 5-1: SerialNumber: syz [ 1027.551909][ T36] usb 5-1: config 0 descriptor?? [ 1027.947950][T13069] loop2: detected capacity change from 0 to 7 [ 1027.950773][T13069] Dev loop2: unable to read RDB block 7 [ 1027.950801][T13069] loop2: unable to read partition table [ 1027.950971][T13069] loop2: partition table beyond EOD, truncated [ 1027.951882][T13069] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1028.092638][T13071] comedi comedi3: comedi_config --init_data is deprecated [ 1028.332239][ T4209] team0 (unregistering): Port device team_slave_1 removed [ 1028.408362][ T4209] team0 (unregistering): Port device team_slave_0 removed [ 1030.144835][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.621188][ T5723] usb 5-1: USB disconnect, device number 31 [ 1030.824609][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.884960][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1030.905317][T12351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.905484][T12351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.942617][T12351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.947147][T12351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.182455][ T5723] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1031.396293][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 1031.399720][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.399776][ T5723] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1031.399802][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.461210][ T5723] usb 5-1: config 0 descriptor?? [ 1031.542087][ T5723] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1032.907199][ T5723] gspca_vc032x: reg_w err -71 [ 1032.907306][ T5723] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1033.134219][ T5723] usb 5-1: USB disconnect, device number 32 [ 1034.954146][T13143] comedi comedi3: comedi_config --init_data is deprecated [ 1035.070574][T12617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.289780][T12813] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1035.360442][T12813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1035.373364][T12813] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1035.397904][T12813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.400729][T12813] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1035.561147][T12813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.561645][T13156] netlink: 'syz.4.1364': attribute type 12 has an invalid length. [ 1035.561684][T13156] netlink: 'syz.4.1364': attribute type 29 has an invalid length. [ 1035.561699][T13156] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1364'. [ 1035.602232][T12813] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1035.663741][T12813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1036.139211][T12813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.198387][T12813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.224560][T11841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.234179][T11841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.283785][T11841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.283996][T11841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.429733][T13182] program syz.4.1367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1036.584602][T12617] veth0_vlan: entered promiscuous mode [ 1036.624354][T12617] veth1_vlan: entered promiscuous mode [ 1036.801610][T12617] veth0_macvtap: entered promiscuous mode [ 1036.843001][T12617] veth1_macvtap: entered promiscuous mode [ 1037.077863][T12617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.108226][T12617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.153789][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.171457][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.174617][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.174859][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.556919][T13202] cgroup: Invalid name [ 1038.703788][T12813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.731515][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.731538][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.882814][T13213] comedi comedi3: comedi_config --init_data is deprecated [ 1038.915872][T13217] FAULT_INJECTION: forcing a failure. [ 1038.915872][T13217] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.915908][T13217] CPU: 1 UID: 0 PID: 13217 Comm: syz.7.1374 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1038.915932][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1038.915946][T13217] Call Trace: [ 1038.915953][T13217] [ 1038.915963][T13217] dump_stack_lvl+0xe8/0x150 [ 1038.915995][T13217] should_fail_ex+0x46b/0x600 [ 1038.916036][T13217] should_failslab+0xa8/0x100 [ 1038.916065][T13217] __kmalloc_noprof+0xdf/0x7b0 [ 1038.916087][T13217] ? kfree+0x4d/0x6c0 [ 1038.916106][T13217] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1038.916148][T13217] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1038.916185][T13217] ? tomoyo_domain+0xd8/0x130 [ 1038.916212][T13217] ? tomoyo_path_number_perm+0x219/0x630 [ 1038.916242][T13217] tomoyo_path_number_perm+0x246/0x630 [ 1038.916274][T13217] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1038.916303][T13217] ? __lock_acquire+0x6b5/0x2cf0 [ 1038.916336][T13217] ? do_raw_spin_lock+0x12b/0x2f0 [ 1038.916395][T13217] ? __fget_files+0x2a/0x420 [ 1038.916418][T13217] ? __fget_files+0x2a/0x420 [ 1038.916436][T13217] ? __fget_files+0x3a6/0x420 [ 1038.916454][T13217] ? __fget_files+0x2a/0x420 [ 1038.916478][T13217] security_file_ioctl+0xc3/0x2a0 [ 1038.916510][T13217] __se_sys_ioctl+0x47/0x170 [ 1038.916536][T13217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.916559][T13217] do_syscall_64+0x15f/0xf80 [ 1038.916586][T13217] ? trace_irq_disable+0x3b/0x140 [ 1038.916611][T13217] ? clear_bhb_loop+0x40/0x90 [ 1038.916638][T13217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.916660][T13217] RIP: 0033:0x7fe2a7b0cdd9 [ 1038.916687][T13217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.916706][T13217] RSP: 002b:00007fe2a5d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.916727][T13217] RAX: ffffffffffffffda RBX: 00007fe2a7d85fa0 RCX: 00007fe2a7b0cdd9 [ 1038.916743][T13217] RDX: 0000200000000340 RSI: 00000000000089f8 RDI: 0000000000000003 [ 1038.916756][T13217] RBP: 00007fe2a5d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.916768][T13217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.916780][T13217] R13: 00007fe2a7d86038 R14: 00007fe2a7d85fa0 R15: 00007ffeba630298 [ 1038.916813][T13217] [ 1038.916821][T13217] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1040.030618][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.030640][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.221453][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1377'. [ 1043.090807][T12813] veth0_vlan: entered promiscuous mode [ 1043.118070][T13251] FAULT_INJECTION: forcing a failure. [ 1043.118070][T13251] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.118104][T13251] CPU: 1 UID: 0 PID: 13251 Comm: syz.7.1380 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1043.118129][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1043.118142][T13251] Call Trace: [ 1043.118149][T13251] [ 1043.118158][T13251] dump_stack_lvl+0xe8/0x150 [ 1043.118188][T13251] should_fail_ex+0x46b/0x600 [ 1043.118228][T13251] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1043.118257][T13251] should_failslab+0xa8/0x100 [ 1043.118293][T13251] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1043.118319][T13251] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 1043.118343][T13251] ? shmem_alloc_inode+0x28/0x40 [ 1043.118369][T13251] ? mas_wr_walk_descend+0x574/0x8c0 [ 1043.118399][T13251] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1043.118425][T13251] shmem_alloc_inode+0x28/0x40 [ 1043.118452][T13251] alloc_inode+0x6a/0x1b0 [ 1043.118486][T13251] new_inode+0x22/0x170 [ 1043.118524][T13251] shmem_get_inode+0x3da/0xf70 [ 1043.118558][T13251] ? rcu_is_watching+0x15/0xb0 [ 1043.118590][T13251] ? __pfx_shmem_get_inode+0x10/0x10 [ 1043.118620][T13251] ? __vm_enough_memory+0x11b/0x380 [ 1043.118646][T13251] __shmem_file_setup+0x20b/0x370 [ 1043.118673][T13251] ? __pfx___shmem_file_setup+0x10/0x10 [ 1043.118707][T13251] shmem_zero_setup+0x90/0x130 [ 1043.118734][T13251] mmap_region+0x1985/0x2280 [ 1043.118785][T13251] ? __pfx_mmap_region+0x10/0x10 [ 1043.118816][T13251] ? __lock_acquire+0x6b5/0x2cf0 [ 1043.118848][T13251] ? __lock_acquire+0x6b5/0x2cf0 [ 1043.118887][T13251] ? unwind_next_frame+0xa6/0x2550 [ 1043.118929][T13251] ? is_bpf_text_address+0x26/0x2b0 [ 1043.119006][T13251] ? _parse_integer_limit+0x1ae/0x1f0 [ 1043.119056][T13251] ? __lock_acquire+0x6b5/0x2cf0 [ 1043.119102][T13251] ? cap_mmap_addr+0xaf/0x100 [ 1043.119132][T13251] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1043.119167][T13251] do_mmap+0xc2f/0x10c0 [ 1043.119194][T13251] ? lockdep_hardirqs_on+0x7a/0x110 [ 1043.119222][T13251] ? __pfx_do_mmap+0x10/0x10 [ 1043.119242][T13251] ? rwbase_write_lock+0x568/0x730 [ 1043.119294][T13251] vm_mmap_pgoff+0x2cc/0x4f0 [ 1043.119325][T13251] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1043.119345][T13251] ? ksys_write+0x248/0x270 [ 1043.119372][T13251] ? __pfx_ksys_write+0x10/0x10 [ 1043.119402][T13251] ? __x64_sys_mmap+0x7f/0x140 [ 1043.119429][T13251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.119452][T13251] do_syscall_64+0x15f/0xf80 [ 1043.119477][T13251] ? clear_bhb_loop+0x40/0x90 [ 1043.119505][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.119527][T13251] RIP: 0033:0x7fe2a7b0cdd9 [ 1043.119548][T13251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.119565][T13251] RSP: 002b:00007fe2a5d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1043.119586][T13251] RAX: ffffffffffffffda RBX: 00007fe2a7d85fa0 RCX: 00007fe2a7b0cdd9 [ 1043.119601][T13251] RDX: d3283d0368e269b3 RSI: 000000000000a000 RDI: 0000200000000000 [ 1043.119616][T13251] RBP: 00007fe2a5d5e090 R08: ffffffffffffffff R09: 0000000000000000 [ 1043.119629][T13251] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 1043.119642][T13251] R13: 00007fe2a7d86038 R14: 00007fe2a7d85fa0 R15: 00007ffeba630298 [ 1043.119676][T13251] [ 1043.470305][T12813] veth1_vlan: entered promiscuous mode [ 1043.527492][T12813] veth0_macvtap: entered promiscuous mode [ 1043.532798][T12813] veth1_macvtap: entered promiscuous mode [ 1043.597454][T12813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.671120][T12813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.991374][T11841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.991777][T11841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.992322][T11841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.048631][T11841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.236280][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.8.824'. [ 1044.287332][T13270] comedi comedi3: comedi_config --init_data is deprecated [ 1044.479926][ T10] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 1044.647313][ T10] usb 7-1: device descriptor read/64, error -71 [ 1044.956430][ T10] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 1045.133133][ T10] usb 7-1: device descriptor read/64, error -71 [ 1045.857492][ T10] usb usb7-port1: attempt power cycle [ 1046.192835][T12351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.192858][T12351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.260496][ T10] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 1046.297844][ T10] usb 7-1: device descriptor read/8, error -71 [ 1046.353641][ T3337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.353664][ T3337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.570760][ T10] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 1046.596263][ T10] usb 7-1: device descriptor read/8, error -71 [ 1046.680252][T13298] FAULT_INJECTION: forcing a failure. [ 1046.680252][T13298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1046.680293][T13298] CPU: 0 UID: 0 PID: 13298 Comm: syz.4.1392 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1046.680319][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1046.680333][T13298] Call Trace: [ 1046.680342][T13298] [ 1046.680351][T13298] dump_stack_lvl+0xe8/0x150 [ 1046.680384][T13298] should_fail_ex+0x46b/0x600 [ 1046.680428][T13298] prepare_alloc_pages+0x22a/0x6b0 [ 1046.680468][T13298] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1046.680503][T13298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1046.680538][T13298] ? __pfx_policy_nodemask+0x10/0x10 [ 1046.680564][T13298] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1046.680588][T13298] ? reacquire_held_locks+0x104/0x190 [ 1046.680628][T13298] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1046.680654][T13298] alloc_pages_mpol+0xd1/0x380 [ 1046.680687][T13298] alloc_pages_noprof+0xd2/0x2f0 [ 1046.680718][T13298] __pmd_alloc+0x3a/0x5e0 [ 1046.680749][T13298] huge_pte_alloc+0x532/0x630 [ 1046.680777][T13298] ? hugetlb_fault+0x3e9/0x1530 [ 1046.680811][T13298] hugetlb_fault+0x53c/0x1530 [ 1046.680855][T13298] ? __pfx_hugetlb_fault+0x10/0x10 [ 1046.680910][T13298] handle_mm_fault+0xe21/0x13c0 [ 1046.680954][T13298] ? handle_mm_fault+0xe7/0x13c0 [ 1046.680982][T13298] ? __pfx_handle_mm_fault+0x10/0x10 [ 1046.681005][T13298] ? lock_vma_under_rcu+0x45a/0x500 [ 1046.681031][T13298] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1046.681062][T13298] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1046.681116][T13298] do_user_addr_fault+0xa73/0x1340 [ 1046.681150][T13298] ? rcu_is_watching+0x15/0xb0 [ 1046.681192][T13298] ? trace_page_fault_user+0x84/0x1e0 [ 1046.681220][T13298] exc_page_fault+0x6a/0xc0 [ 1046.681248][T13298] asm_exc_page_fault+0x26/0x30 [ 1046.681269][T13298] RIP: 0033:0x7fd80f78bc09 [ 1046.681290][T13298] Code: 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 48 89 f8 48 83 fa 20 72 37 fe 6f 06 48 83 fa 40 0f 87 b9 00 00 00 c5 fe 6f 4c 16 e0 c5 fe [ 1046.681309][T13298] RSP: 002b:00007fd80da0def8 EFLAGS: 00010202 [ 1046.681328][T13298] RAX: 00007fd80da0df10 RBX: 0000000000000081 RCX: 00007fd80da0df10 [ 1046.681344][T13298] RDX: 0000000000000081 RSI: 0000200000001880 RDI: 00007fd80da0df10 [ 1046.681359][T13298] RBP: 00007fd80da0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.681372][T13298] R10: 0000200000001880 R11: 0000000000000000 R12: 0000000000000001 [ 1046.681385][T13298] R13: 00007fd80fa36038 R14: 00007fd80fa35fa0 R15: 00007ffee9921ea8 [ 1046.681420][T13298] [ 1046.683370][T13298] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1046.711419][ T10] usb usb7-port1: unable to enumerate USB device [ 1046.850743][ T37] audit: type=1326 audit(1778404536.844:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1046.850818][ T37] audit: type=1326 audit(1778404536.844:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1046.852490][ T37] audit: type=1326 audit(1778404536.844:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1046.852545][ T37] audit: type=1326 audit(1778404536.844:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1046.853171][ T37] audit: type=1326 audit(1778404536.844:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1046.853461][ T37] audit: type=1326 audit(1778404536.844:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1046.853795][ T37] audit: type=1326 audit(1778404536.844:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1046.854087][ T37] audit: type=1326 audit(1778404536.844:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1046.854766][ T37] audit: type=1326 audit(1778404536.844:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1046.855235][ T37] audit: type=1326 audit(1778404536.844:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13302 comm="syz.4.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd80f7bcdd9 code=0x7ffc0000 [ 1048.909947][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1395'. [ 1049.419188][T13320] comedi comedi3: comedi_config --init_data is deprecated [ 1049.600742][T13327] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1049.628202][ T5737] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1050.181677][ T3337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1050.375945][ T5737] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1050.697067][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1051.046432][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1051.048986][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.049046][ T10] usb 5-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1051.049069][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1051.051864][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1051.051889][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.051907][ T10] usb 5-1: Product: syz [ 1051.051920][ T10] usb 5-1: Manufacturer: syz [ 1051.051933][ T10] usb 5-1: SerialNumber: syz [ 1051.991061][ T2254] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1051.991356][ T2254] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1052.246603][ T5737] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1052.979186][ T10] usb 5-1: No union descriptors [ 1053.007936][ T10] usb 5-1: USB disconnect, device number 33 [ 1055.239820][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.239895][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.841637][T13374] comedi comedi3: comedi_config --init_data is deprecated [ 1056.017426][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1056.156162][ T5737] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1056.337693][ T5737] usb 6-1: Using ep0 maxpacket: 32 [ 1056.364509][ T5737] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1056.368801][ T5737] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.427744][ T5737] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1056.427775][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.427798][ T5737] usb 6-1: Product: syz [ 1056.427812][ T5737] usb 6-1: Manufacturer: syz [ 1056.427839][ T5737] usb 6-1: SerialNumber: syz [ 1056.527755][ T37] kauditd_printk_skb: 63 callbacks suppressed [ 1056.527772][ T37] audit: type=1326 audit(1778404545.893:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.528200][ T37] audit: type=1326 audit(1778404545.893:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.528501][ T37] audit: type=1326 audit(1778404545.893:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.528799][ T37] audit: type=1326 audit(1778404545.893:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.604519][ T37] audit: type=1326 audit(1778404545.968:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.604576][ T37] audit: type=1326 audit(1778404545.968:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.657467][ T37] audit: type=1326 audit(1778404545.968:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.657524][ T37] audit: type=1326 audit(1778404546.015:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.657572][ T37] audit: type=1326 audit(1778404546.015:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.773032][ T37] audit: type=1326 audit(1778404546.127:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.4.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80f7bcdd9 code=0x50000 [ 1056.967028][ T5737] usb 6-1: Invalid number of CPorts: 0 [ 1056.967075][ T5737] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 1057.567479][ T5737] usb 6-1: USB disconnect, device number 2 [ 1057.959948][ T5736] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1058.243560][ T5736] usb 9-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.243609][ T5736] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1058.243642][ T5736] usb 9-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1058.243665][ T5736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.459014][ T5736] usb 9-1: config 0 descriptor?? [ 1058.854655][T13400] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1059.032240][ T5736] hid_parser_main: 30 callbacks suppressed [ 1059.032264][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.032292][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.032317][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.032341][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.032365][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.032390][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.032414][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.032438][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.032463][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.032487][ T5736] magicmouse 0003:05AC:0265.000A: unknown main item tag 0x0 [ 1059.116597][ T5736] magicmouse 0003:05AC:0265.000A: hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.8-1/input0 [ 1059.287342][ T5723] usb 9-1: USB disconnect, device number 2 [ 1059.354450][T13408] program syz.5.1422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1060.621105][T13413] fido_id[13413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1060.903632][T13419] comedi comedi3: comedi_config --init_data is deprecated [ 1061.024312][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'. [ 1062.890567][T13443] overlay: ./bus is not a directory [ 1062.998857][T13429] XFS (nullb0): Invalid superblock magic number [ 1063.511447][T13447] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1431'. [ 1067.549361][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1069.708041][T13467] process 'syz.4.1437' launched './file2' with NULL argv: empty string added [ 1070.266196][T13475] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1070.301170][T13480] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1440'. [ 1070.409230][T13481] FAULT_INJECTION: forcing a failure. [ 1070.409230][T13481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.409269][T13481] CPU: 1 UID: 0 PID: 13481 Comm: syz.5.1438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1070.409295][T13481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1070.409309][T13481] Call Trace: [ 1070.409318][T13481] [ 1070.409327][T13481] dump_stack_lvl+0xe8/0x150 [ 1070.409359][T13481] should_fail_ex+0x46b/0x600 [ 1070.409400][T13481] _copy_from_user+0x2d/0xb0 [ 1070.409433][T13481] snd_pcm_oss_write2+0x227/0x440 [ 1070.409463][T13481] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1070.409487][T13481] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1070.409517][T13481] ? snd_pcm_oss_write+0x20d/0xbe0 [ 1070.409544][T13481] snd_pcm_oss_write+0x6d1/0xbe0 [ 1070.409581][T13481] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1070.409607][T13481] vfs_write+0x2a3/0xba0 [ 1070.409643][T13481] ? __pfx_vfs_write+0x10/0x10 [ 1070.409670][T13481] ? __fget_files+0x2a/0x420 [ 1070.409693][T13481] ? __fget_files+0x2a/0x420 [ 1070.409712][T13481] ? __fget_files+0x3a6/0x420 [ 1070.409738][T13481] ? __fget_files+0x2a/0x420 [ 1070.409768][T13481] ksys_write+0x156/0x270 [ 1070.409795][T13481] ? __pfx_ksys_write+0x10/0x10 [ 1070.409831][T13481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.409855][T13481] do_syscall_64+0x15f/0xf80 [ 1070.409882][T13481] ? trace_irq_disable+0x3b/0x140 [ 1070.409907][T13481] ? clear_bhb_loop+0x40/0x90 [ 1070.409944][T13481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.409966][T13481] RIP: 0033:0x7f18090bcdd9 [ 1070.409986][T13481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.410005][T13481] RSP: 002b:00007f18072f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1070.410028][T13481] RAX: ffffffffffffffda RBX: 00007f1809336090 RCX: 00007f18090bcdd9 [ 1070.410044][T13481] RDX: 00000000ffffffd9 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1070.410058][T13481] RBP: 00007f18072f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.410071][T13481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.410083][T13481] R13: 00007f1809336128 R14: 00007f1809336090 R15: 00007ffd4b9ae078 [ 1070.410118][T13481] [ 1070.849963][ T1229] bridge_slave_1: left allmulticast mode [ 1070.850000][ T1229] bridge_slave_1: left promiscuous mode [ 1070.850281][ T1229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.974173][ T1229] bridge_slave_0: left allmulticast mode [ 1070.974200][ T1229] bridge_slave_0: left promiscuous mode [ 1070.974418][ T1229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.238057][T13490] syz.5.1441 uses obsolete (PF_INET,SOCK_PACKET) [ 1072.014685][T13514] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1447'. [ 1072.304596][ T820] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1072.462686][ T820] usb 7-1: Using ep0 maxpacket: 8 [ 1072.465583][ T820] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.465635][ T820] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1072.465658][ T820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.471325][ T820] usb 7-1: config 0 descriptor?? [ 1072.588158][ T820] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1074.250906][ T820] gspca_vc032x: reg_r err -71 [ 1074.250973][ T820] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1074.297080][ T820] usb 7-1: USB disconnect, device number 29 [ 1076.289660][ T1229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.347390][T13556] FAULT_INJECTION: forcing a failure. [ 1076.347390][T13556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.347433][T13556] CPU: 0 UID: 0 PID: 13556 Comm: syz.8.1460 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1076.347456][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1076.347469][T13556] Call Trace: [ 1076.347477][T13556] [ 1076.347485][T13556] dump_stack_lvl+0xe8/0x150 [ 1076.347515][T13556] should_fail_ex+0x46b/0x600 [ 1076.347557][T13556] _copy_to_user+0x31/0xb0 [ 1076.347584][T13556] simple_read_from_buffer+0xe1/0x170 [ 1076.347623][T13556] proc_fail_nth_read+0x1be/0x230 [ 1076.347662][T13556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.347698][T13556] ? rw_verify_area+0x2ac/0x4e0 [ 1076.347721][T13556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.347756][T13556] vfs_read+0x212/0xa80 [ 1076.347788][T13556] ? __pfx_vfs_read+0x10/0x10 [ 1076.347814][T13556] ? do_sys_openat2+0x14c/0x200 [ 1076.347844][T13556] ? kmem_cache_free+0x187/0x6c0 [ 1076.347869][T13556] ? do_sys_openat2+0x14c/0x200 [ 1076.347913][T13556] ksys_read+0x156/0x270 [ 1076.347940][T13556] ? __pfx_ksys_read+0x10/0x10 [ 1076.347972][T13556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.347996][T13556] do_syscall_64+0x15f/0xf80 [ 1076.348023][T13556] ? trace_irq_disable+0x3b/0x140 [ 1076.348047][T13556] ? clear_bhb_loop+0x40/0x90 [ 1076.348072][T13556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.348089][T13556] RIP: 0033:0x7f90fc94d60e [ 1076.348104][T13556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1076.348121][T13556] RSP: 002b:00007f90fabe5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1076.348140][T13556] RAX: ffffffffffffffda RBX: 00007f90fabe66c0 RCX: 00007f90fc94d60e [ 1076.348154][T13556] RDX: 000000000000000f RSI: 00007f90fabe60a0 RDI: 0000000000000004 [ 1076.348165][T13556] RBP: 00007f90fabe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.348175][T13556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.348185][T13556] R13: 00007f90fcc06038 R14: 00007f90fcc05fa0 R15: 00007ffd7b2be848 [ 1076.348211][T13556] [ 1076.602764][ T1229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.645103][ T1229] bond0 (unregistering): Released all slaves [ 1077.546612][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1078.104431][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1466'. [ 1079.378697][T13583] FAULT_INJECTION: forcing a failure. [ 1079.378697][T13583] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.378742][T13583] CPU: 1 UID: 0 PID: 13583 Comm: syz.5.1469 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1079.378765][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1079.378777][T13583] Call Trace: [ 1079.378784][T13583] [ 1079.378792][T13583] dump_stack_lvl+0xe8/0x150 [ 1079.378820][T13583] should_fail_ex+0x46b/0x600 [ 1079.378867][T13583] should_failslab+0xa8/0x100 [ 1079.378892][T13583] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1079.378914][T13583] ? __alloc_skb+0x1d0/0x7d0 [ 1079.378934][T13583] ? lockdep_hardirqs_on+0x7a/0x110 [ 1079.378961][T13583] __alloc_skb+0x1d0/0x7d0 [ 1079.378986][T13583] netlink_sendmsg+0x5d4/0xb40 [ 1079.379016][T13583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1079.379041][T13583] ? unwind_get_return_address+0x4d/0x90 [ 1079.379069][T13583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1079.379091][T13583] ____sys_sendmsg+0x94c/0x9c0 [ 1079.379125][T13583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1079.379157][T13583] ? import_iovec+0x73/0xa0 [ 1079.379181][T13583] ___sys_sendmsg+0x2a5/0x360 [ 1079.379203][T13583] ? __lock_acquire+0x6b5/0x2cf0 [ 1079.379232][T13583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.379286][T13583] ? __fget_files+0x2a/0x420 [ 1079.379302][T13583] ? __fget_files+0x3a6/0x420 [ 1079.379327][T13583] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1079.379354][T13583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1079.379385][T13583] ? __pfx_ksys_write+0x10/0x10 [ 1079.379414][T13583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.379438][T13583] do_syscall_64+0x15f/0xf80 [ 1079.379459][T13583] ? trace_irq_disable+0x3b/0x140 [ 1079.379481][T13583] ? clear_bhb_loop+0x40/0x90 [ 1079.379502][T13583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.379520][T13583] RIP: 0033:0x7f18090bcdd9 [ 1079.379538][T13583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.379553][T13583] RSP: 002b:00007f1807316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.379573][T13583] RAX: ffffffffffffffda RBX: 00007f1809335fa0 RCX: 00007f18090bcdd9 [ 1079.379587][T13583] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 1079.379598][T13583] RBP: 00007f1807316090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.379610][T13583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.379621][T13583] R13: 00007f1809336038 R14: 00007f1809335fa0 R15: 00007ffd4b9ae078 [ 1079.379650][T13583] [ 1079.982103][T13591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.998538][T13591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.069966][T13591] veth1_macvtap: left promiscuous mode [ 1080.069992][T13591] macsec0: entered allmulticast mode [ 1080.164926][T13593] veth1_macvtap: entered promiscuous mode [ 1080.164945][T13593] veth1_macvtap: entered allmulticast mode [ 1080.165031][T13593] macsec0: left allmulticast mode [ 1080.165041][T13593] veth1_macvtap: left allmulticast mode [ 1080.252820][ T8841] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1080.306668][T13594] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü' [ 1080.306683][T13594] CPU: 0 UID: 0 PID: 13594 Comm: syz.8.1473 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1080.306701][T13594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1080.306711][T13594] Call Trace: [ 1080.306717][T13594] [ 1080.306723][T13594] dump_stack_lvl+0xe8/0x150 [ 1080.306747][T13594] sysfs_warn_dup+0x8e/0xa0 [ 1080.306772][T13594] sysfs_do_create_link_sd+0xc0/0x110 [ 1080.306806][T13594] device_add_class_symlinks+0x1d2/0x240 [ 1080.306828][T13594] device_add+0x475/0xbb0 [ 1080.306848][T13594] wiphy_register+0x1dc5/0x2dc0 [ 1080.306881][T13594] ? __pfx_wiphy_register+0x10/0x10 [ 1080.306900][T13594] ? __pfx_netdev_run_todo+0x10/0x10 [ 1080.306922][T13594] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1080.306951][T13594] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1080.306975][T13594] ieee80211_register_hw+0x3d82/0x4a70 [ 1080.307006][T13594] ? ieee80211_register_hw+0x18e1/0x4a70 [ 1080.307045][T13594] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1080.307069][T13594] ? __asan_memset+0x22/0x50 [ 1080.307094][T13594] ? __hrtimer_setup+0x1c2/0x260 [ 1080.307108][T13594] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1080.307131][T13594] mac80211_hwsim_new_radio+0x3051/0x54e0 [ 1080.307160][T13594] ? mac80211_hwsim_new_radio+0xee/0x54e0 [ 1080.307188][T13594] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1080.307205][T13594] ? kstrndup+0xbf/0x160 [ 1080.307236][T13594] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1080.307271][T13594] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1080.307296][T13594] ? rcu_is_watching+0x15/0xb0 [ 1080.307320][T13594] ? trace_kmalloc+0x2a/0xf0 [ 1080.307341][T13594] ? __nla_parse+0x40/0x60 [ 1080.307363][T13594] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1080.307388][T13594] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1080.307420][T13594] genl_family_rcv_msg_doit+0x22a/0x330 [ 1080.307450][T13594] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1080.307474][T13594] ? rcu_is_watching+0x15/0xb0 [ 1080.307506][T13594] ? bpf_lsm_capable+0x9/0x20 [ 1080.307526][T13594] ? security_capable+0x7e/0x2c0 [ 1080.307555][T13594] genl_rcv_msg+0x61c/0x7a0 [ 1080.307584][T13594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1080.307606][T13594] ? ref_tracker_free+0x673/0x820 [ 1080.307622][T13594] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1080.307640][T13594] ? __pfx_ref_tracker_free+0x10/0x10 [ 1080.307655][T13594] ? __asan_memcpy+0x40/0x70 [ 1080.307677][T13594] ? __skb_clone+0x63/0x7a0 [ 1080.307704][T13594] netlink_rcv_skb+0x232/0x4b0 [ 1080.307723][T13594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1080.307748][T13594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1080.307777][T13594] ? netlink_deliver_tap+0x2e/0x1b0 [ 1080.307801][T13594] ? netlink_deliver_tap+0x2e/0x1b0 [ 1080.307823][T13594] genl_rcv+0x28/0x40 [ 1080.307845][T13594] netlink_unicast+0x780/0x920 [ 1080.307870][T13594] netlink_sendmsg+0x813/0xb40 [ 1080.307897][T13594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.307923][T13594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1080.307942][T13594] ____sys_sendmsg+0x94c/0x9c0 [ 1080.307967][T13594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1080.307995][T13594] ? import_iovec+0x73/0xa0 [ 1080.308016][T13594] ___sys_sendmsg+0x2a5/0x360 [ 1080.308036][T13594] ? __lock_acquire+0x6b5/0x2cf0 [ 1080.308061][T13594] ? __pfx____sys_sendmsg+0x10/0x10 [ 1080.308087][T13594] ? futex_wait+0x2a2/0x390 [ 1080.308125][T13594] ? __fget_files+0x2a/0x420 [ 1080.308138][T13594] ? __fget_files+0x3a6/0x420 [ 1080.308160][T13594] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1080.308183][T13594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1080.308212][T13594] ? __pfx_ksys_read+0x10/0x10 [ 1080.308236][T13594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.308253][T13594] do_syscall_64+0x15f/0xf80 [ 1080.308273][T13594] ? trace_irq_disable+0x3b/0x140 [ 1080.308291][T13594] ? clear_bhb_loop+0x40/0x90 [ 1080.308310][T13594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.308326][T13594] RIP: 0033:0x7f90fc98cdd9 [ 1080.308342][T13594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.308355][T13594] RSP: 002b:00007f90fabe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.308371][T13594] RAX: ffffffffffffffda RBX: 00007f90fcc05fa0 RCX: 00007f90fc98cdd9 [ 1080.308384][T13594] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000008 [ 1080.308394][T13594] RBP: 00007f90fca22d69 R08: 0000000000000000 R09: 0000000000000000 [ 1080.308404][T13594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.308413][T13594] R13: 00007f90fcc06038 R14: 00007f90fcc05fa0 R15: 00007ffd7b2be848 [ 1080.308438][T13594] [ 1080.574754][ T8841] usb 7-1: Using ep0 maxpacket: 32 [ 1081.101259][T13591] ------------[ cut here ]------------ [ 1081.101269][T13591] 1 [ 1081.101277][T13591] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#1: syz.6.1472/13591 [ 1081.101313][T13591] Modules linked in: [ 1081.101326][T13591] CPU: 1 UID: 0 PID: 13591 Comm: syz.6.1472 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1081.101342][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1081.101352][T13591] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 1081.101373][T13591] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8a 19 40 f8 66 90 e8 83 19 40 f8 31 ff 48 89 de ba 02 00 00 00 e8 84 f8 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 1081.101385][T13591] RSP: 0018:ffffc9000672f160 EFLAGS: 00010286 [ 1081.101397][T13591] RAX: d5430cb24e605f00 RBX: ffff888089c223c0 RCX: 0000000000000046 [ 1081.101408][T13591] RDX: 0000000000000002 RSI: ffffffff8d604dee RDI: ffffffff8ba74fe0 [ 1081.101418][T13591] RBP: ffffc9000672f460 R08: ffffffff8f88eef7 R09: 1ffffffff1f11dde [ 1081.101428][T13591] R10: dffffc0000000000 R11: fffffbfff1f11ddf R12: dffffc0000000000 [ 1081.101440][T13591] R13: 0000000000000000 R14: ffff888089c223c0 R15: dffffc0000000000 [ 1081.101450][T13591] FS: 00007f0396e056c0(0000) GS:ffff888126276000(0000) knlGS:0000000000000000 [ 1081.101462][T13591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1081.101472][T13591] CR2: 0000563dd423ae78 CR3: 000000008f62c000 CR4: 00000000003526f0 [ 1081.101484][T13591] DR0: 0000000000000000 DR1: 00000000000000b4 DR2: 0000000000000000 [ 1081.101492][T13591] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1081.101501][T13591] Call Trace: [ 1081.101506][T13591] [ 1081.101516][T13591] ip_push_pending_frames+0x8b/0x110 [ 1081.101539][T13591] __icmp_send+0x11e4/0x1690 [ 1081.101561][T13591] ? __icmp_send+0x22b/0x1690 [ 1081.101609][T13591] ? __pfx___icmp_send+0x10/0x10 [ 1081.101649][T13591] ? ip_route_input_noref+0xad/0x270 [ 1081.101675][T13591] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1081.101699][T13591] ? tcp_v4_early_demux+0x465/0x9c0 [ 1081.101714][T13591] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 1081.101738][T13591] ip_options_compile+0x80/0xb0 [ 1081.101758][T13591] ip_rcv_finish_core+0xaa2/0x1c00 [ 1081.101783][T13591] ip_rcv_finish+0x14c/0x2a0 [ 1081.101801][T13591] NF_HOOK+0x336/0x3c0 [ 1081.101815][T13591] ? sock_wfree+0x26e/0x750 [ 1081.101836][T13591] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1081.101863][T13591] ? NF_HOOK+0x9e/0x3c0 [ 1081.101877][T13591] ? __pfx_NF_HOOK+0x10/0x10 [ 1081.101893][T13591] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1081.101914][T13591] ? netif_receive_skb+0x102/0xbf0 [ 1081.101968][T13591] ? __pfx_ip_rcv+0x10/0x10 [ 1081.101983][T13591] netif_receive_skb+0x45b/0xbf0 [ 1081.102010][T13591] ? __pfx_netif_receive_skb+0x10/0x10 [ 1081.102033][T13591] ? rcu_is_watching+0x15/0xb0 [ 1081.102054][T13591] ? __local_bh_disable_ip+0x3c/0x420 [ 1081.102072][T13591] ? tun_rx_batched+0x191/0x760 [ 1081.102106][T13591] ? tun_rx_batched+0x191/0x760 [ 1081.102125][T13591] tun_rx_batched+0x1ee/0x760 [ 1081.102149][T13591] ? __pfx_tun_rx_batched+0x10/0x10 [ 1081.102174][T13591] ? tun_get_user+0x278d/0x4400 [ 1081.102193][T13591] ? tun_get_user+0x278d/0x4400 [ 1081.102214][T13591] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1081.102231][T13591] ? lockdep_hardirqs_on+0x7a/0x110 [ 1081.102256][T13591] tun_get_user+0x2bd1/0x4400 [ 1081.102273][T13591] ? futex_unqueue+0x22/0x240 [ 1081.102302][T13591] ? tun_get_user+0x278d/0x4400 [ 1081.102319][T13591] ? __futex_queue+0xd0/0x160 [ 1081.102347][T13591] ? __futex_wait+0x1fe/0x420 [ 1081.102364][T13591] ? __pfx_tun_get_user+0x10/0x10 [ 1081.102384][T13591] ? __lock_acquire+0x6b5/0x2cf0 [ 1081.102417][T13591] ? ref_tracker_alloc+0x332/0x4a0 [ 1081.102437][T13591] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1081.102455][T13591] ? tun_get+0x1c/0x2f0 [ 1081.102472][T13591] ? tun_get+0x1c/0x2f0 [ 1081.102494][T13591] ? tun_get+0x1c/0x2f0 [ 1081.102511][T13591] ? tun_get+0x1c/0x2f0 [ 1081.102532][T13591] tun_chr_write_iter+0x119/0x200 [ 1081.102563][T13591] vfs_write+0x629/0xba0 [ 1081.102590][T13591] ? __pfx_vfs_write+0x10/0x10 [ 1081.102616][T13591] ? __fget_files+0x2a/0x420 [ 1081.102638][T13591] ksys_write+0x156/0x270 [ 1081.102657][T13591] ? __pfx_ksys_write+0x10/0x10 [ 1081.102680][T13591] ? __secure_computing+0xe1/0x2a0 [ 1081.102702][T13591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.102723][T13591] do_syscall_64+0x15f/0xf80 [ 1081.102742][T13591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.102758][T13591] ? clear_bhb_loop+0x40/0x90 [ 1081.102779][T13591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.102794][T13591] RIP: 0033:0x7f0398b8d60e [ 1081.102810][T13591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1081.102822][T13591] RSP: 002b:00007f0396e04fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1081.102837][T13591] RAX: ffffffffffffffda RBX: 00007f0396e056c0 RCX: 00007f0398b8d60e [ 1081.102848][T13591] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 1081.102858][T13591] RBP: 00007f0398c62d69 R08: 0000000000000000 R09: 0000000000000000 [ 1081.102868][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.102877][T13591] R13: 00007f0398e46128 R14: 00007f0398e46090 R15: 00007ffcd7084068 [ 1081.102903][T13591] [ 1081.102911][T13591] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1081.102921][T13591] CPU: 1 UID: 0 PID: 13591 Comm: syz.6.1472 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1081.102938][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1081.102947][T13591] Call Trace: [ 1081.102953][T13591] [ 1081.102959][T13591] vpanic+0x56c/0xa60 [ 1081.102982][T13591] ? __pfx__printk+0x10/0x10 [ 1081.103004][T13591] ? __pfx_vpanic+0x10/0x10 [ 1081.103022][T13591] ? is_bpf_text_address+0x292/0x2b0 [ 1081.103043][T13591] ? is_bpf_text_address+0x26/0x2b0 [ 1081.103071][T13591] panic+0xc5/0xd0 [ 1081.103089][T13591] ? __pfx_panic+0x10/0x10 [ 1081.103123][T13591] __warn+0x315/0x4c0 [ 1081.103140][T13591] ? ip_rt_bug+0x2d/0x140 [ 1081.103191][T13591] ? ip_rt_bug+0x2d/0x140 [ 1081.103223][T13591] __report_bug+0x29a/0x540 [ 1081.103241][T13591] ? NF_HOOK+0x336/0x3c0 [ 1081.103253][T13591] ? netif_receive_skb+0x45b/0xbf0 [ 1081.103276][T13591] ? tun_rx_batched+0x1ee/0x760 [ 1081.103297][T13591] ? ip_rt_bug+0x2d/0x140 [ 1081.103318][T13591] ? __pfx___report_bug+0x10/0x10 [ 1081.103352][T13591] ? ip_rt_bug+0x2d/0x140 [ 1081.103372][T13591] report_bug+0x16a/0x220 [ 1081.103406][T13591] ? ip_rt_bug+0x2d/0x140 [ 1081.103432][T13591] ? ip_rt_bug+0x2f/0x140 [ 1081.103458][T13591] handle_bug+0x9c/0x200 [ 1081.103488][T13591] exc_invalid_op+0x1a/0x50 [ 1081.103516][T13591] asm_exc_invalid_op+0x1a/0x20 [ 1081.103536][T13591] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 1081.103566][T13591] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8a 19 40 f8 66 90 e8 83 19 40 f8 31 ff 48 89 de ba 02 00 00 00 e8 84 f8 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 1081.103579][T13591] RSP: 0018:ffffc9000672f160 EFLAGS: 00010286 [ 1081.103592][T13591] RAX: d5430cb24e605f00 RBX: ffff888089c223c0 RCX: 0000000000000046 [ 1081.103603][T13591] RDX: 0000000000000002 RSI: ffffffff8d604dee RDI: ffffffff8ba74fe0 [ 1081.103614][T13591] RBP: ffffc9000672f460 R08: ffffffff8f88eef7 R09: 1ffffffff1f11dde [ 1081.103626][T13591] R10: dffffc0000000000 R11: fffffbfff1f11ddf R12: dffffc0000000000 [ 1081.103638][T13591] R13: 0000000000000000 R14: ffff888089c223c0 R15: dffffc0000000000 [ 1081.103666][T13591] ip_push_pending_frames+0x8b/0x110 [ 1081.103690][T13591] __icmp_send+0x11e4/0x1690 [ 1081.103712][T13591] ? __icmp_send+0x22b/0x1690 [ 1081.103759][T13591] ? __pfx___icmp_send+0x10/0x10 [ 1081.103796][T13591] ? ip_route_input_noref+0xad/0x270 [ 1081.103820][T13591] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1081.103843][T13591] ? tcp_v4_early_demux+0x465/0x9c0 [ 1081.103857][T13591] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 1081.103874][T13591] ip_options_compile+0x80/0xb0 [ 1081.103893][T13591] ip_rcv_finish_core+0xaa2/0x1c00 [ 1081.103917][T13591] ip_rcv_finish+0x14c/0x2a0 [ 1081.103933][T13591] NF_HOOK+0x336/0x3c0 [ 1081.103946][T13591] ? sock_wfree+0x26e/0x750 [ 1081.103986][T13591] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1081.104007][T13591] ? NF_HOOK+0x9e/0x3c0 [ 1081.104026][T13591] ? __pfx_NF_HOOK+0x10/0x10 [ 1081.104049][T13591] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1081.104075][T13591] ? netif_receive_skb+0x102/0xbf0 [ 1081.104105][T13591] ? __pfx_ip_rcv+0x10/0x10 [ 1081.104124][T13591] netif_receive_skb+0x45b/0xbf0 [ 1081.104164][T13591] ? __pfx_netif_receive_skb+0x10/0x10 [ 1081.104195][T13591] ? rcu_is_watching+0x15/0xb0 [ 1081.104224][T13591] ? __local_bh_disable_ip+0x3c/0x420 [ 1081.104248][T13591] ? tun_rx_batched+0x191/0x760 [ 1081.104270][T13591] ? tun_rx_batched+0x191/0x760 [ 1081.104299][T13591] tun_rx_batched+0x1ee/0x760 [ 1081.104322][T13591] ? __pfx_tun_rx_batched+0x10/0x10 [ 1081.104346][T13591] ? tun_get_user+0x278d/0x4400 [ 1081.104363][T13591] ? tun_get_user+0x278d/0x4400 [ 1081.104382][T13591] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1081.104398][T13591] ? lockdep_hardirqs_on+0x7a/0x110 [ 1081.104420][T13591] tun_get_user+0x2bd1/0x4400 [ 1081.104437][T13591] ? futex_unqueue+0x22/0x240 [ 1081.104463][T13591] ? tun_get_user+0x278d/0x4400 [ 1081.104480][T13591] ? __futex_queue+0xd0/0x160 [ 1081.104504][T13591] ? __futex_wait+0x1fe/0x420 [ 1081.104520][T13591] ? __pfx_tun_get_user+0x10/0x10 [ 1081.104539][T13591] ? __lock_acquire+0x6b5/0x2cf0 [ 1081.104570][T13591] ? ref_tracker_alloc+0x332/0x4a0 [ 1081.104588][T13591] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1081.104605][T13591] ? tun_get+0x1c/0x2f0 [ 1081.104621][T13591] ? tun_get+0x1c/0x2f0 [ 1081.104641][T13591] ? tun_get+0x1c/0x2f0 [ 1081.104657][T13591] ? tun_get+0x1c/0x2f0 [ 1081.104677][T13591] tun_chr_write_iter+0x119/0x200 [ 1081.104696][T13591] vfs_write+0x629/0xba0 [ 1081.104724][T13591] ? __pfx_vfs_write+0x10/0x10 [ 1081.104748][T13591] ? __fget_files+0x2a/0x420 [ 1081.104769][T13591] ksys_write+0x156/0x270 [ 1081.104787][T13591] ? __pfx_ksys_write+0x10/0x10 [ 1081.104808][T13591] ? __secure_computing+0xe1/0x2a0 [ 1081.104828][T13591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.104844][T13591] do_syscall_64+0x15f/0xf80 [ 1081.104862][T13591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.104877][T13591] ? clear_bhb_loop+0x40/0x90 [ 1081.104895][T13591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.104909][T13591] RIP: 0033:0x7f0398b8d60e [ 1081.104921][T13591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1081.104934][T13591] RSP: 002b:00007f0396e04fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1081.104948][T13591] RAX: ffffffffffffffda RBX: 00007f0396e056c0 RCX: 00007f0398b8d60e [ 1081.104958][T13591] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 1081.104968][T13591] RBP: 00007f0398c62d69 R08: 0000000000000000 R09: 0000000000000000 [ 1081.104978][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.104987][T13591] R13: 00007f0398e46128 R14: 00007f0398e46090 R15: 00007ffcd7084068 [ 1081.105011][T13591] [ 1081.105708][T13591] Kernel Offset: disabled