last executing test programs: 15m11.260202785s ago: executing program 32 (id=1696): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002200)='./proc\x00', &(0x7f0000002240)='proc\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004440)='fd/3\x00') sendfile(r0, r0, 0x0, 0x7a01) 15m9.926636258s ago: executing program 33 (id=1700): epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000711814000000000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xfffffffa) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141442, 0x41) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000940)={0xa, 0x400000000008d}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000a00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b00), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b40), 0x4000087, 0x2, 0x0) r5 = socket(0x28, 0x801, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000fc0)=0xb2, 0x4) shutdown(r5, 0x1) mount$9p_fd(0x0, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040), 0x0, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) 15m8.696273133s ago: executing program 34 (id=1708): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x2) connect$unix(r3, &(0x7f0000000800)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r3, &(0x7f00000008c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000900)={'veth0_to_team\x00', &(0x7f0000000940)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000980)={'veth0_to_team\x00', 0x800}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty}}}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r7, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 14m47.1201635s ago: executing program 35 (id=1791): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000000000000e1000006000000000000002e00"], &(0x7f00000000c0)=""/223, 0x1e, 0xdf, 0x1}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x6}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) getpid() 14m43.885335569s ago: executing program 36 (id=1805): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0xa0}}, 0x40080) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000006c0)={r0, r1, 0x4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f00000008c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000940)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) 13m36.519473403s ago: executing program 37 (id=2117): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c90012000e00050017420a0080000002"], 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x2000080}, 0x4000020) 12m50.222870367s ago: executing program 38 (id=2300): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = socket$inet6(0xa, 0x6, 0x4749) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a8"], 0x0) 12m48.056537721s ago: executing program 39 (id=2311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) bind$inet6(r0, &(0x7f0000000fc0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000001000)='X', 0x34000, 0xe0, &(0x7f0000001040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12m46.31994781s ago: executing program 40 (id=2317): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x18, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000001800000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000b5000400000000001801000020646c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000cc0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2d}, 0x94) 12m40.669517654s ago: executing program 41 (id=2325): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb090018"], 0x0, 0x2a, 0x0, 0x8, 0x1}, 0x28) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x2096, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000b80)={'syzkaller0\x00', @random="2b0100004ec6"}) 12m13.186686334s ago: executing program 42 (id=2339): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x70bd2a, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000001680)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf523}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m2.554327289s ago: executing program 43 (id=2346): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000100)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180), 0x1) sendto$inet6(r0, &(0x7f00000001c0)='l', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)='E', 0xffe0}], 0x1}}], 0x1, 0x4000000) 11m55.799339731s ago: executing program 44 (id=2355): r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000082, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x304}, "6a70c78437a4f76b", "d5658bd0bf23145dfbc42709195e63d6", "c3d75107", "5c2aa5f653f1ca80"}, 0x28) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x4040804) sendto$inet6(r2, &(0x7f0000000440)="a03ff864b8bf25b87c6cba753c1c8fbdcd", 0x11, 0x8000, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000480)="e1", 0x1, 0x8040, 0x0, 0x0) 11m51.17540221s ago: executing program 45 (id=2361): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x42) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) 11m7.569611597s ago: executing program 46 (id=2463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x4, 0x100, 0x40, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0}, &(0x7f0000000b40), 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 11m5.80855615s ago: executing program 47 (id=2472): socket$inet_sctp(0x2, 0x5, 0x84) getpgid(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8c}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) mount(0x0, 0x0, 0x0, 0x100018, 0x0) getrlimit(0xc, &(0x7f0000000400)) 10m42.80682968s ago: executing program 48 (id=2540): r0 = syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x2, 0xd0, &(0x7f00000010c0)=""/208, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x4, 0x10, &(0x7f0000000540)={0x0, 0x7, 0xffffffff, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) fstatfs(r0, &(0x7f0000000580)=""/160) r4 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x0, 0x2) mmap(&(0x7f0000af2000/0x1000)=nil, 0x1000, 0x0, 0x4010, r4, 0x6f6b3000) io_submit(0x0, 0x1, &(0x7f0000000c00)=[&(0x7f0000000c40)={0x180a, 0x0, 0x3, 0x8, 0x0, r5, 0x0}]) 8m25.998976235s ago: executing program 49 (id=3011): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001"], 0x4c}}, 0x44800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 8m25.406438074s ago: executing program 50 (id=3013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c617374000000000400028014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1e"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 8m24.53347228s ago: executing program 51 (id=3015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)={0x8c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1, 0x7c}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x40, 0x3, 0x6, 0x0, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0xa7, 0x11}}, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xda2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) 8m9.638872052s ago: executing program 9 (id=3018): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000940)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(r0, &(0x7f0000000540)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000000580)='.\x00', 0x9000, &(0x7f00000005c0)={0x0, 0x0, 0x80000, {r1}}, 0x20) 8m9.519037539s ago: executing program 9 (id=3019): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x18, 0x3, [{0x1, 0x12, "b57afaab05735c8f4b2f2d858a2c5702"}]}]}}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0xd}}}}}}, 0x0) 8m8.43535327s ago: executing program 9 (id=3020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000ac0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 8m8.236481319s ago: executing program 52 (id=3020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000ac0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 7m55.083938974s ago: executing program 53 (id=3028): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) 7m31.00003163s ago: executing program 2 (id=3035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x6}}, 0x6}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m29.260784326s ago: executing program 54 (id=3036): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) read(r0, 0x0, 0x5e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000005c0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x1ff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7m29.239233236s ago: executing program 2 (id=3038): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x4, 0x8, 0x32, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xe, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x1008, &(0x7f0000001fc0)=""/4104}, 0x94) 7m28.992102874s ago: executing program 2 (id=3039): setns(0xc9, 0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xe) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) 7m27.266801951s ago: executing program 55 (id=3040): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000026c0)='./file0\x00', 0x0, 0x2008800, &(0x7f0000002740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004800)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656f4eec6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b79d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc500", 0x2000, &(0x7f0000006800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000068c0)={0x20, 0x0, 0x8f31, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000006900)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30404004, 0x0, 0xfffe, 0x6, 0xffffffff, 0x0, 0x0, 0x1, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000006980)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f00000069c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000006a00)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r2, 0x0, 0x7b, 0x2) 7m27.258309752s ago: executing program 2 (id=3042): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./sys\x00', 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(r0, &(0x7f0000000540)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000000580)='.\x00', 0x9000, &(0x7f00000005c0)={0x0, 0x0, 0x80000, {r1}}, 0x20) 7m26.48399643s ago: executing program 2 (id=3043): openat$iommufd(0xffffffffffffff9c, &(0x7f0000004f80), 0x0, 0x0) syz_io_uring_setup(0x5797, &(0x7f0000000040)={0x0, 0x39c4, 0x8000, 0x3, 0x2}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x49, 0xe, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000240)={0x0, 0x0, 0xfd8b, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_vs_stats\x00') pselect6(0x40, &(0x7f0000000600)={0xc, 0x800000000000000, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x100000, 0xa}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'ip6gretap0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x3, 0x1}) add_key(&(0x7f0000000680)='asymmetric\x00', 0x0, &(0x7f00000006c0)="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", 0x10b, 0xfffffffffffffffd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x15}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="000300"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 7m24.865772076s ago: executing program 2 (id=3045): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m24.304620052s ago: executing program 56 (id=3045): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m58.705245729s ago: executing program 8 (id=3114): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc0) 6m58.609441532s ago: executing program 8 (id=3115): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000040000100fcff07000400e2ff0100000004004880200001801c00108018000b8008000100ac141407000000000000000001000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x40a0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e67c, [{{0x9, 0x2, 0xfffffffffffffdba}}]}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="213eecf155f6a50bba8ed37f940f2156ffb0a255f52b0001cf8020000de7abf6", @ANYRES32=r3, @ANYBLOB="20005080050002000200000009000100ee2edd7ed00000000800030005ac0f00"], 0x3c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace_dev_match', 0x101000, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000500), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000540), 0x10106, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000580)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmstat\x00', 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "e9314969", {0x1, 0x8, 0x9, 0x7, 0xa9}}) 6m54.817648467s ago: executing program 8 (id=3121): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2602, 0x25) r0 = gettid() timer_create(0x7, &(0x7f0000000640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000680)=0x0) timer_settime(r1, 0x1, &(0x7f00000006c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000700), 0x82, 0x48000) read(r2, 0x0, 0x0) 6m53.362551905s ago: executing program 8 (id=3123): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./sys\x00', &(0x7f0000000940)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r1 = open_tree(r0, &(0x7f0000000540)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000000580)='.\x00', 0x9000, &(0x7f00000005c0)={0x0, 0x0, 0x80000, {r1}}, 0x20) 6m53.29228594s ago: executing program 8 (id=3124): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7f, 0x4d, 0x2ba8}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x1, 0x3, 0x9}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m46.902887796s ago: executing program 8 (id=3130): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a8, 0xc000, 0x3, 0x383}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r1, 0x4095, 0x7721, 0x16, 0x0, 0x0) pipe2(0x0, 0x0) 6m46.578919451s ago: executing program 57 (id=3130): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a8, 0xc000, 0x3, 0x383}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r1, 0x4095, 0x7721, 0x16, 0x0, 0x0) pipe2(0x0, 0x0) 4m48.790878672s ago: executing program 9 (id=3131): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./sys\x00', &(0x7f0000000940)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r1 = open_tree(r0, &(0x7f0000000540)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000000580)='.\x00', 0x9000, &(0x7f00000005c0)={0x0, 0x0, 0x80000, {r1}}, 0x20) 4m48.588858716s ago: executing program 9 (id=3391): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000600)={0x28, 0x5, r1, 0x0, &(0x7f0000000640), 0x0, 0xfffffffffffff0e9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000680)={0x28, 0x6, r1, 0x0, &(0x7f00000006c0)="d5", 0x1, 0x2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x801) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a3000000000140000001100"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xeafbff3, &(0x7f0000000580)=[{&(0x7f00000005c0)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4m48.132066307s ago: executing program 6 (id=3395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000001940), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000075, &(0x7f0000000300)={0xa, 0x4001, 0xfff8, @loopback, 0x5c2c}, 0x1c) 4m48.015585391s ago: executing program 6 (id=3396): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x9}, 0xc) 4m47.795382008s ago: executing program 6 (id=3397): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x11) r0 = openat(0xffffffffffffff9c, &(0x7f0000002980)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000029c0)='27', 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 4m47.141951782s ago: executing program 6 (id=3399): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./sys\x00', &(0x7f0000000940)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r1 = open_tree(r0, &(0x7f0000000540)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000000580)='.\x00', 0x9000, &(0x7f00000005c0)={0x0, 0x0, 0x80000, {r1}}, 0x20) 4m47.003938929s ago: executing program 6 (id=3401): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write(r0, &(0x7f0000000700), 0x0) 4m42.666791005s ago: executing program 9 (id=3402): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYBLOB="fc000000130001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000200000200"/69], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 4m42.464192809s ago: executing program 58 (id=3402): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYBLOB="fc000000130001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000200000200"/69], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 4m42.293493233s ago: executing program 6 (id=3405): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000940)={0x0, 0x1, 0x3, 0x1}, 0x8) 4m41.65913668s ago: executing program 59 (id=3405): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000940)={0x0, 0x1, 0x3, 0x1}, 0x8) 3m38.806707198s ago: executing program 4 (id=3500): sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x10) r2 = fcntl$dupfd(r0, 0x406, r0) writev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000800)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f00000001c0)) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x81, 0x3ff, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) truncate(0x0, 0x20fdfffffe) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x10000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VT_ACTIVATE(r5, 0x4b4b, 0x10000000000004) dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) 3m37.367503395s ago: executing program 4 (id=3503): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x4, 0x8, 0x32, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xe, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x1008, &(0x7f0000001fc0)=""/4104}, 0x94) 3m36.955269462s ago: executing program 4 (id=3504): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000340)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000380)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 3m36.673765833s ago: executing program 4 (id=3505): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000d40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000dc0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) landlock_create_ruleset(0x0, 0x0, 0x0) 3m35.231698696s ago: executing program 4 (id=3506): setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = syz_open_dev$media(&(0x7f0000000600), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f0000000640)={0x80000000, 0x0, &(0x7f0000000680)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000580)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r2, &(0x7f0000000600), 0x612, 0x4000010) 3m34.13095423s ago: executing program 4 (id=3507): r0 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x40010000, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440014001000010429bd15bc9af6010000100200", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e00000010000280080005000200000004001200"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0021040000000000000000003b49166f34af7201", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3m19.044410387s ago: executing program 60 (id=3507): r0 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x40010000, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440014001000010429bd15bc9af6010000100200", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e00000010000280080005000200000004001200"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0021040000000000000000003b49166f34af7201", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 1m27.699271882s ago: executing program 7 (id=3899): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/kmsg\x00', 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000500)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000005c0)=0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, r2, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x0, 0x242, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7b9, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1092, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1m27.49227603s ago: executing program 7 (id=3901): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101c00, 0x0) ftruncate(r0, 0x46) set_mempolicy(0x4005, &(0x7f0000000640)=0x7e, 0x6) setsockopt(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000680), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/resume', 0xa82, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x143102) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1m25.097254205s ago: executing program 7 (id=3906): bpf$ENABLE_STATS(0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x40000100, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x8) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x46) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.958061552s ago: executing program 5 (id=3919): r0 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090401010101022000090501090002030b040825010000400400090402000001022000090402010101022000092402020400cc1c051024010201000400000008b8000000030905820908"], &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001540)={0x2c, 0x0, &(0x7f0000001580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000015c0)={0x44, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001680)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m22.628160956s ago: executing program 7 (id=3922): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/kmsg\x00', 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000500)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000005c0)=0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, r2, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x0, 0x242, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7b9, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1092, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1m21.394572587s ago: executing program 7 (id=3926): r0 = syz_open_dev$rtc(&(0x7f0000001580), 0x0, 0x2500) capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracefs\x00', &(0x7f0000001400)='tracefs\x00', 0x2000010, 0x0) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x400, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000015c0)=@filename='./file0\x00', r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./tracefs/instances/foo\x00', 0x1ff) io_setup(0x205, &(0x7f0000001800)) unlinkat(0xffffffffffffff9c, &(0x7f0000001480)='./tracefs/instances/foo\x00', 0x200) 1m21.323647105s ago: executing program 5 (id=3927): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x1]}, 0x8, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') mount(&(0x7f0000000540), &(0x7f0000000580)='./cgroup\x00', 0x0, 0x1001, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000280)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000440), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1m19.685446919s ago: executing program 5 (id=3933): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x140, 0x11, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc, 0x1, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x7, 0x46}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x2, 0x2}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000540)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m17.89190001s ago: executing program 5 (id=3937): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/kmsg\x00', 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x0, 0x242, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7b9, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1092, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1m17.723386821s ago: executing program 5 (id=3938): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xd4b7, 0x4, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x912, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x17, 0x1, 0x107, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x7, 0x4, 0x0, 0x40], [0x753, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xf, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x2, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc0a, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x4, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x4, 0x2000000c, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0xa, 0x0, 0x800bf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x1007, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2f0, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x0, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x800006, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10010000, 0x3, 0x7e, 0xe3d, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) 1m17.669822767s ago: executing program 0 (id=3939): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0x10, 0x10, &(0x7f0000000540)="0000000212000000", &(0x7f0000000580)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m16.947229308s ago: executing program 5 (id=3940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m15.649378799s ago: executing program 7 (id=3941): r0 = msgget(0x0, 0x322) msgctl$IPC_RMID(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x10000000f, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, 0x0) 1m13.505313838s ago: executing program 0 (id=3947): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000600)={0x28, 0x5, r1, 0x0, &(0x7f0000000640), 0x0, 0xfffffffffffff0e9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000680)={0x28, 0x6, r1, 0x0, &(0x7f00000006c0)="d5", 0x1, 0x2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x801) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a3000000000140000001100"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xeafbff3, &(0x7f0000000580)=[{&(0x7f00000005c0)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1m2.503459923s ago: executing program 0 (id=3949): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000340)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000380)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 59.873956258s ago: executing program 61 (id=3940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 59.649652777s ago: executing program 62 (id=3941): r0 = msgget(0x0, 0x322) msgctl$IPC_RMID(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x10000000f, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, 0x0) 59.61967323s ago: executing program 1 (id=3952): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 59.612389294s ago: executing program 3 (id=3953): syz_io_uring_setup(0xd3a, &(0x7f00000002c0)={0x0, 0x2, 0x3010, 0x3, 0xe3}, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20842, 0x4) pselect6(0x900, 0x0, 0x0, &(0x7f0000000380)={0x1f}, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) 57.523558869s ago: executing program 1 (id=3954): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="400d010000001d"], 0x0, 0x0, 0x0, 0x0}) 56.058983971s ago: executing program 1 (id=3955): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000004d80), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000004f80)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x42}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x1, {0x4, 0x1, 0x20, 0x8, 0x5, 0xaa}}, 0xc) 55.971830028s ago: executing program 1 (id=3956): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.923864093s ago: executing program 1 (id=3957): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x26}, 0x28) 55.827391111s ago: executing program 1 (id=3958): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f00000009c0), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 53.933016354s ago: executing program 3 (id=3959): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000080)) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000600)={0x28, 0x5, r1, 0x0, &(0x7f0000000640), 0x0, 0xfffffffffffff0e9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000680)={0x28, 0x6, r1, 0x0, &(0x7f00000006c0)="d5", 0x1, 0x2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x801) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a3000000000140000001100"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xeafbff3, &(0x7f0000000580)=[{&(0x7f00000005c0)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 52.499836291s ago: executing program 3 (id=3960): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000040000100fcff07000400e2ff0100000004004880200001801c00108018000b8008000100ac1414070000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x40a0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e67c, [{{0x9, 0x2, 0xfffffffffffffdba}}]}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="213eecf155f6a50bba8ed37f940f2156ffb0a255f52b0001cf8020000de7abf6", @ANYRES32=r4, @ANYBLOB="20005080050002000200000009000100ee2edd7ed00000000800030005ac0f00"], 0x3c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace_dev_match', 0x101000, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000400)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000500), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000540), 0x10106, 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000580)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "e9314969", {0x1, 0x8, 0x9, 0x7, 0xa9}}) 52.390536808s ago: executing program 0 (id=3961): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/kmsg\x00', 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x0, 0x242, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7b9, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1092, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 52.107338829s ago: executing program 0 (id=3962): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x1ff) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80e, 0x7, 0x4, 0x7, 0x5, 0x3, 0x7, 0x47, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 49.316846199s ago: executing program 3 (id=3963): sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x10) fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f00000001c0)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x81, 0x3ff, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_gettime(r4, 0x0) truncate(0x0, 0x20fdfffffe) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x10000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VT_ACTIVATE(r5, 0x4b4b, 0x10000000000004) dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) 45.348534417s ago: executing program 0 (id=3964): write(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0xfe5d) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000240)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) dup3(r1, r0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e20, @multicast2}}]}, 0x110) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000600)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) 44.570002259s ago: executing program 3 (id=3965): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.509124935s ago: executing program 3 (id=3966): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000d0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000006c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 38.304550127s ago: executing program 63 (id=3958): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f00000009c0), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 13.776853652s ago: executing program 64 (id=3964): write(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0xfe5d) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000240)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) dup3(r1, r0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e20, @multicast2}}]}, 0x110) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000600)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) 0s ago: executing program 65 (id=3966): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000d0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000006c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) kernel console output (not intermixed with test programs): f [ 989.038394][T20365] ? clear_bhb_loop+0x70/0xc0 [ 989.038419][T20365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.038440][T20365] RIP: 0033:0x7ff8718ef559 [ 989.038462][T20365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.038481][T20365] RSP: 002b:00007ff86fb46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 989.038505][T20365] RAX: ffffffffffffffda RBX: 00007ff871b75fa0 RCX: 00007ff8718ef559 [ 989.038524][T20365] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 989.038539][T20365] RBP: 00007ff871986b50 R08: 0000000000000000 R09: 0000000000000000 [ 989.038553][T20365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.038566][T20365] R13: 00007ff871b76038 R14: 00007ff871b75fa0 R15: 00007ffd7de25098 [ 989.038599][T20365] [ 989.335763][T20365] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock7) [ 989.375570][T13756] dvb-usb: bulk message failed: -71 (2/0) [ 989.375597][T13756] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 989.375610][T13756] (NULL device *): no alternate interface [ 989.530882][T20377] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 990.297492][T13756] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 990.541127][T13767] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 990.648609][T13756] usb 8-1: USB disconnect, device number 5 [ 990.699306][T13767] usb 4-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 990.700610][T13767] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.700662][T13767] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 990.700703][T13767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.713043][T20397] syzkaller0: entered promiscuous mode [ 990.713065][T20397] syzkaller0: entered allmulticast mode [ 991.017056][T13767] ttusb_dec_init_stb: unknown model returned by firmware (00070000) - please report [ 991.017312][T13767] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -2 [ 991.225845][T13767] usb 4-1: USB disconnect, device number 4 [ 991.662142][T20411] device-mapper: table: 248:12: verity: Invalid salt (-EINVAL) [ 991.662166][T20411] device-mapper: ioctl: error adding target to table [ 992.282139][T20424] 0x000000000003-0x000000010001 : "" [ 992.295529][T20424] ftl_cs: FTL header corrupt! [ 992.303038][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 992.315489][T20424] FAULT_INJECTION: forcing a failure. [ 992.315489][T20424] name failslab, interval 1, probability 0, space 0, times 0 [ 992.315521][T20424] CPU: 0 UID: 0 PID: 20424 Comm: syz.5.3557 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 992.315550][T20424] Tainted: [L]=SOFTLOCKUP [ 992.315557][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 992.315570][T20424] Call Trace: [ 992.315579][T20424] [ 992.315588][T20424] dump_stack_lvl+0xe8/0x150 [ 992.315626][T20424] should_fail_ex+0x447/0x5e0 [ 992.315658][T20424] should_failslab+0xa8/0x100 [ 992.315682][T20424] ? __kernfs_new_node+0xe7/0xa70 [ 992.315707][T20424] kmem_cache_alloc_noprof+0x99/0x680 [ 992.315739][T20424] ? __kernfs_new_node+0xe7/0xa70 [ 992.315768][T20424] __kernfs_new_node+0xe7/0xa70 [ 992.315791][T20424] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 992.315822][T20424] ? __pfx___kernfs_new_node+0x10/0x10 [ 992.315844][T20424] ? lock_acquire+0x115/0x350 [ 992.315873][T20424] ? kernfs_root+0x1c/0x230 [ 992.315902][T20424] ? kernfs_root+0x1c/0x230 [ 992.315923][T20424] ? kernfs_root+0x1c/0x230 [ 992.315943][T20424] ? kernfs_root+0x1c/0x230 [ 992.315976][T20424] kernfs_new_node+0xeb/0x140 [ 992.316004][T20424] __kernfs_create_file+0x4b/0x2e0 [ 992.316036][T20424] sysfs_add_file_mode_ns+0x237/0x300 [ 992.316074][T20424] internal_create_group+0x679/0x1180 [ 992.316109][T20424] ? kernfs_create_dir_ns+0x1c0/0x220 [ 992.316139][T20424] ? __pfx_internal_create_group+0x10/0x10 [ 992.316160][T20424] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 992.316183][T20424] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 992.316204][T20424] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 992.316232][T20424] sysfs_create_groups+0x59/0x120 [ 992.316262][T20424] kobject_add_internal+0x673/0xce0 [ 992.316296][T20424] kobject_add+0x163/0x240 [ 992.316323][T20424] ? kobject_add+0x163/0x240 [ 992.316351][T20424] ? __pfx_kobject_add+0x10/0x10 [ 992.316377][T20424] ? __kasan_kmalloc+0x93/0xb0 [ 992.316403][T20424] ? kobject_create_and_add+0x58/0x230 [ 992.316434][T20424] blk_register_queue+0x83/0x4f0 [ 992.316461][T20424] ? kobject_create_and_add+0x16f/0x230 [ 992.316492][T20424] __add_disk+0x6b8/0xdb0 [ 992.316529][T20424] add_disk_fwnode+0x100/0x3a0 [ 992.316563][T20424] add_mtd_blktrans_dev+0xe81/0x14c0 [ 992.316602][T20424] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 992.316648][T20424] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 992.316670][T20424] ? mtdblock_add_mtd+0x57/0x240 [ 992.316702][T20424] mtdblock_add_mtd+0x18a/0x240 [ 992.316729][T20424] blktrans_notify_add+0x9f/0xf0 [ 992.316754][T20424] add_mtd_device+0x117f/0x17b0 [ 992.316790][T20424] ? __pfx_add_mtd_device+0x10/0x10 [ 992.316822][T20424] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 992.316857][T20424] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 992.316900][T20424] mtd_add_partition+0x388/0x590 [ 992.316928][T20424] ? __pfx_mtd_add_partition+0x10/0x10 [ 992.316973][T20424] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 992.317002][T20424] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 992.317058][T20424] mtdchar_ioctl+0x14fd/0x1bc0 [ 992.317088][T20424] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 992.317129][T20424] ? kasan_quarantine_put+0xbb/0x1f0 [ 992.317168][T20424] ? tomoyo_path_number_perm+0x219/0x5f0 [ 992.317196][T20424] ? tomoyo_path_number_perm+0x219/0x5f0 [ 992.317227][T20424] ? __lock_acquire+0x747/0x2de0 [ 992.317273][T20424] ? do_futex+0x3e7/0x4e0 [ 992.317322][T20424] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 992.317344][T20424] ? mutex_lock_nested+0x14d/0x1d0 [ 992.317369][T20424] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 992.317395][T20424] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 992.317415][T20424] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 992.317437][T20424] __se_sys_ioctl+0xff/0x170 [ 992.317460][T20424] do_syscall_64+0x166/0x520 [ 992.317481][T20424] ? trace_irq_disable+0x3b/0x140 [ 992.317502][T20424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.317523][T20424] ? clear_bhb_loop+0x70/0xc0 [ 992.317547][T20424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.317568][T20424] RIP: 0033:0x7fd29b98f559 [ 992.317588][T20424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.317605][T20424] RSP: 002b:00007fd299be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.317627][T20424] RAX: ffffffffffffffda RBX: 00007fd29bc15fa0 RCX: 00007fd29b98f559 [ 992.317642][T20424] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 992.317655][T20424] RBP: 00007fd29ba26b50 R08: 0000000000000000 R09: 0000000000000000 [ 992.317668][T20424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.317681][T20424] R13: 00007fd29bc16038 R14: 00007fd29bc15fa0 R15: 00007fff4834cb28 [ 992.317715][T20424] [ 992.396685][T20424] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock8) [ 992.894304][T20437] syzkaller0: entered promiscuous mode [ 992.894331][T20437] syzkaller0: entered allmulticast mode [ 993.271178][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.271244][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.451239][T13756] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 994.610916][T13756] usb 1-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 994.830360][T20461] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 994.830410][T20461] block device autoloading is deprecated and will be removed. [ 995.131900][T13756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.132420][T13756] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 995.132514][T13756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.806678][T13756] ttusb_dec_init_stb: unknown model returned by firmware (00070000) - please report [ 995.806892][T13756] ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -2 [ 996.010192][T13756] usb 1-1: USB disconnect, device number 10 [ 996.896962][T20479] 0x000000000003-0x000000010001 : "" [ 996.930263][T20479] ftl_cs: FTL header corrupt! [ 997.021920][T20479] FAULT_INJECTION: forcing a failure. [ 997.021920][T20479] name failslab, interval 1, probability 0, space 0, times 0 [ 997.021956][T20479] CPU: 0 UID: 0 PID: 20479 Comm: syz.7.3571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 997.021986][T20479] Tainted: [L]=SOFTLOCKUP [ 997.021994][T20479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 997.022006][T20479] Call Trace: [ 997.022015][T20479] [ 997.022025][T20479] dump_stack_lvl+0xe8/0x150 [ 997.022064][T20479] should_fail_ex+0x447/0x5e0 [ 997.022095][T20479] should_failslab+0xa8/0x100 [ 997.022123][T20479] ? __kernfs_new_node+0xe7/0xa70 [ 997.022147][T20479] kmem_cache_alloc_noprof+0x99/0x680 [ 997.022178][T20479] ? __kernfs_new_node+0xe7/0xa70 [ 997.022208][T20479] __kernfs_new_node+0xe7/0xa70 [ 997.022232][T20479] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 997.022264][T20479] ? __pfx___kernfs_new_node+0x10/0x10 [ 997.022285][T20479] ? lock_acquire+0x115/0x350 [ 997.022314][T20479] ? kernfs_root+0x1c/0x230 [ 997.022343][T20479] ? kernfs_root+0x1c/0x230 [ 997.022364][T20479] ? kernfs_root+0x1c/0x230 [ 997.022383][T20479] ? kernfs_root+0x1c/0x230 [ 997.022411][T20479] kernfs_new_node+0xeb/0x140 [ 997.022439][T20479] __kernfs_create_file+0x4b/0x2e0 [ 997.022470][T20479] sysfs_add_file_mode_ns+0x237/0x300 [ 997.022514][T20479] internal_create_group+0x679/0x1180 [ 997.022547][T20479] ? kernfs_create_dir_ns+0x1c0/0x220 [ 997.022577][T20479] ? __pfx_internal_create_group+0x10/0x10 [ 997.022597][T20479] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 997.022618][T20479] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 997.022639][T20479] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 997.022666][T20479] sysfs_create_groups+0x59/0x120 [ 997.022692][T20479] kobject_add_internal+0x673/0xce0 [ 997.022726][T20479] kobject_add+0x163/0x240 [ 997.022753][T20479] ? kobject_add+0x163/0x240 [ 997.022781][T20479] ? __pfx_kobject_add+0x10/0x10 [ 997.022807][T20479] ? __kasan_kmalloc+0x93/0xb0 [ 997.022833][T20479] ? kobject_create_and_add+0x58/0x230 [ 997.022864][T20479] blk_register_queue+0x83/0x4f0 [ 997.022891][T20479] ? kobject_create_and_add+0x16f/0x230 [ 997.022922][T20479] __add_disk+0x6b8/0xdb0 [ 997.022961][T20479] add_disk_fwnode+0x100/0x3a0 [ 997.022994][T20479] add_mtd_blktrans_dev+0xe81/0x14c0 [ 997.023033][T20479] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 997.023080][T20479] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 997.023101][T20479] ? mtdblock_add_mtd+0x57/0x240 [ 997.023134][T20479] mtdblock_add_mtd+0x18a/0x240 [ 997.023161][T20479] blktrans_notify_add+0x9f/0xf0 [ 997.023185][T20479] add_mtd_device+0x117f/0x17b0 [ 997.023222][T20479] ? __pfx_add_mtd_device+0x10/0x10 [ 997.023253][T20479] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 997.023286][T20479] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 997.023329][T20479] mtd_add_partition+0x388/0x590 [ 997.023357][T20479] ? __pfx_mtd_add_partition+0x10/0x10 [ 997.023397][T20479] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 997.023424][T20479] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 997.023486][T20479] mtdchar_ioctl+0x14fd/0x1bc0 [ 997.023517][T20479] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 997.023558][T20479] ? kasan_quarantine_put+0xbb/0x1f0 [ 997.023598][T20479] ? tomoyo_path_number_perm+0x219/0x5f0 [ 997.023627][T20479] ? tomoyo_path_number_perm+0x219/0x5f0 [ 997.023659][T20479] ? __lock_acquire+0x747/0x2de0 [ 997.023705][T20479] ? do_futex+0x3e7/0x4e0 [ 997.023757][T20479] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 997.023780][T20479] ? mutex_lock_nested+0x14d/0x1d0 [ 997.023805][T20479] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 997.023832][T20479] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 997.023854][T20479] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 997.023878][T20479] __se_sys_ioctl+0xff/0x170 [ 997.023902][T20479] do_syscall_64+0x166/0x520 [ 997.023925][T20479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.023946][T20479] ? clear_bhb_loop+0x70/0xc0 [ 997.023971][T20479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.023991][T20479] RIP: 0033:0x7fcf1535f559 [ 997.024010][T20479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.024028][T20479] RSP: 002b:00007fcf135ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.024050][T20479] RAX: ffffffffffffffda RBX: 00007fcf155e5fa0 RCX: 00007fcf1535f559 [ 997.024066][T20479] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 997.024080][T20479] RBP: 00007fcf153f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 997.024094][T20479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.024107][T20479] R13: 00007fcf155e6038 R14: 00007fcf155e5fa0 R15: 00007ffc32e9a8d8 [ 997.024143][T20479] [ 997.324855][T20486] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 997.771652][T20479] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock9) [ 999.354528][T20508] syzkaller0: entered promiscuous mode [ 999.354555][T20508] syzkaller0: entered allmulticast mode [ 999.767569][T20455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 999.767597][T20455] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1000.238695][ T7609] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1000.396069][ T7609] usb 1-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 1000.408742][T20455] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1000.408764][T20455] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1000.425085][ T7609] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.425140][ T7609] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1000.425194][ T7609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.476501][T20455] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1000.476524][T20455] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1000.519746][T20455] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1000.519769][T20455] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1000.674825][ T7609] ttusb_dec_init_stb: unknown model returned by firmware (00070000) - please report [ 1000.674971][ T7609] ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -2 [ 1000.885696][T13756] usb 1-1: USB disconnect, device number 11 [ 1000.983210][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1003.434214][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1003.504253][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1003.505783][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1003.567773][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1003.591794][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1003.753723][T13747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1003.757820][T13747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1003.773708][T13747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1003.777603][T13747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1003.778363][T13747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1005.423580][T16750] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1006.001197][T13747] Bluetooth: hci3: command tx timeout [ 1006.366550][T16750] usb 4-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 1006.369196][T16750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.369252][T16750] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1006.369294][T16750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.711841][T16750] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1006.778005][T16750] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1006.911666][T16750] ttusb_dec_send_command: command bulk message failed: error -71 [ 1006.931879][T16750] usb 4-1: USB disconnect, device number 5 [ 1007.006665][T20603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1007.006690][T20603] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1007.193514][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1007.719904][T20476] rxe_eth0 speed is unknown, defaulting to 1000 [ 1008.343641][T20645] syzkaller0: entered promiscuous mode [ 1008.343668][T20645] syzkaller0: entered allmulticast mode [ 1008.729479][T20476] dummy0 speed is unknown, defaulting to 1000 [ 1010.398927][T16750] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1010.659378][T16750] usb 8-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 1010.660956][T16750] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.661007][T16750] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1010.661054][T16750] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.939396][T16750] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1011.036195][T16750] usb 8-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1011.164078][T16750] ttusb_dec_send_command: command bulk message failed: error -71 [ 1011.228387][T16750] usb 8-1: USB disconnect, device number 6 [ 1011.515598][T20702] syzkaller0: entered promiscuous mode [ 1011.515627][T20702] syzkaller0: entered allmulticast mode [ 1013.324463][T20476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.327548][T20476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.348721][T20476] bridge_slave_0: entered allmulticast mode [ 1013.354274][T20476] bridge_slave_0: entered promiscuous mode [ 1013.387887][T20476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.388031][T20476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.406527][T20476] bridge_slave_1: entered allmulticast mode [ 1013.418157][T20476] bridge_slave_1: entered promiscuous mode [ 1013.919312][T20476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.599605][T16632] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1014.724629][T20476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.749389][T16632] usb 8-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 1014.750525][T16632] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.750556][T16632] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1014.750579][T16632] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.885053][T20476] team0: Port device team_slave_0 added [ 1014.920647][T20476] team0: Port device team_slave_1 added [ 1015.069373][T16632] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1015.102762][T16632] usb 8-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1015.204071][T20476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.204090][T20476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.204116][T20476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.253711][T20476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.253728][T20476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.253754][T20476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.313387][T16632] ttusb_dec_send_command: command bulk message failed: error -71 [ 1015.334556][T16632] usb 8-1: USB disconnect, device number 7 [ 1015.734809][T20476] hsr_slave_0: entered promiscuous mode [ 1015.750878][T20476] hsr_slave_1: entered promiscuous mode [ 1015.755784][T20476] debugfs: 'hsr0' already exists in 'hsr' [ 1015.755798][T20476] Cannot create hsr debugfs directory [ 1016.086802][T20790] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 1016.348737][ T5725] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1016.509461][ T5725] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1016.509520][ T5725] usb 6-1: too many configurations: 124, using maximum allowed: 8 [ 1016.511796][ T5725] usb 6-1: config index 0 descriptor too short (expected 64954, got 72) [ 1016.516552][ T5725] usb 6-1: config index 1 descriptor too short (expected 64954, got 72) [ 1016.519342][ T5725] usb 6-1: config index 2 descriptor too short (expected 64954, got 72) [ 1016.524121][ T5725] usb 6-1: config index 3 descriptor too short (expected 64954, got 72) [ 1016.526637][ T5725] usb 6-1: config index 4 descriptor too short (expected 64954, got 72) [ 1016.534344][ T5725] usb 6-1: config index 5 descriptor too short (expected 64954, got 72) [ 1016.538088][ T5725] usb 6-1: config index 6 descriptor too short (expected 64954, got 72) [ 1016.541083][ T5725] usb 6-1: config index 7 descriptor too short (expected 64954, got 72) [ 1016.547563][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.547588][ T5725] usb 6-1: Product: syz [ 1016.547602][ T5725] usb 6-1: Manufacturer: syz [ 1016.547617][ T5725] usb 6-1: SerialNumber: syz [ 1016.997393][T20801] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3648'. [ 1017.688437][T13767] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1019.108453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1019.308458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1019.318448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1019.673568][T16632] usb 6-1: USB disconnect, device number 2 [ 1019.689792][T13767] usb 6-1: ath9k_htc: Unable to allocate URBs [ 1019.720305][T16632] usb 6-1: ath9k_htc: USB layer deinitialized [ 1021.229023][T16632] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1021.240504][T20820] syzkaller0: entered promiscuous mode [ 1021.240527][T20820] syzkaller0: entered allmulticast mode [ 1021.278637][ T4935] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1021.379841][T16632] usb 6-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 1021.381094][T16632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.381145][T16632] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1021.381185][T16632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.458889][ T4935] usb 4-1: Using ep0 maxpacket: 16 [ 1021.486133][ T4935] usb 4-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1021.486191][ T4935] usb 4-1: no configurations [ 1021.486206][ T4935] usb 4-1: can't read configurations, error -22 [ 1021.646419][T16632] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1021.648684][ T4935] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1021.694833][T16632] usb 6-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1021.818691][ T4935] usb 4-1: Using ep0 maxpacket: 16 [ 1021.819490][ T4935] usb 4-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1021.819547][ T4935] usb 4-1: no configurations [ 1021.819560][ T4935] usb 4-1: can't read configurations, error -22 [ 1021.819939][ T4935] usb usb4-port1: attempt power cycle [ 1021.866909][T16632] ttusb_dec_send_command: command bulk message failed: error -71 [ 1021.888575][T16632] usb 6-1: USB disconnect, device number 3 [ 1022.242003][ T4935] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1022.260327][ T4935] usb 4-1: Using ep0 maxpacket: 16 [ 1022.260878][ T4935] usb 4-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1022.260912][ T4935] usb 4-1: no configurations [ 1022.260920][ T4935] usb 4-1: can't read configurations, error -22 [ 1022.388560][ T4935] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1022.415591][ T4935] usb 4-1: Using ep0 maxpacket: 16 [ 1022.416232][ T4935] usb 4-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1022.416264][ T4935] usb 4-1: no configurations [ 1022.416272][ T4935] usb 4-1: can't read configurations, error -22 [ 1022.416547][ T4935] usb usb4-port1: unable to enumerate USB device [ 1023.808448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1023.828444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1023.838453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1023.848444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1024.888664][T20864] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 1025.898552][ T7611] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1026.949257][ T7611] usb 8-1: device descriptor read/all, error -71 [ 1027.628588][ T7611] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1027.892004][ T7611] usb 8-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 1027.893349][ T7611] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.893398][ T7611] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1027.893422][ T7611] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.042708][ T7611] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1029.087794][ T7611] usb 8-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1029.158904][ T7611] ttusb_dec_send_command: command bulk message failed: error -71 [ 1029.199166][ T7611] usb 8-1: USB disconnect, device number 9 [ 1029.205277][T20899] 0x000000000003-0x000000010001 : "" [ 1029.422536][T20899] ftl_cs: FTL header corrupt! [ 1029.608632][ T5758] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1029.644108][T20899] FAULT_INJECTION: forcing a failure. [ 1029.644108][T20899] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.644142][T20899] CPU: 0 UID: 0 PID: 20899 Comm: syz.3.3680 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1029.644170][T20899] Tainted: [L]=SOFTLOCKUP [ 1029.644178][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1029.644190][T20899] Call Trace: [ 1029.644200][T20899] [ 1029.644209][T20899] dump_stack_lvl+0xe8/0x150 [ 1029.644248][T20899] should_fail_ex+0x447/0x5e0 [ 1029.644280][T20899] should_failslab+0xa8/0x100 [ 1029.644303][T20899] ? __kernfs_new_node+0xe7/0xa70 [ 1029.644326][T20899] kmem_cache_alloc_noprof+0x99/0x680 [ 1029.644358][T20899] ? __kernfs_new_node+0xe7/0xa70 [ 1029.644386][T20899] __kernfs_new_node+0xe7/0xa70 [ 1029.644408][T20899] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1029.644439][T20899] ? __pfx___kernfs_new_node+0x10/0x10 [ 1029.644462][T20899] ? lock_acquire+0x115/0x350 [ 1029.644492][T20899] ? kernfs_root+0x1c/0x230 [ 1029.644522][T20899] ? kernfs_root+0x1c/0x230 [ 1029.644543][T20899] ? kernfs_root+0x1c/0x230 [ 1029.644562][T20899] ? kernfs_root+0x1c/0x230 [ 1029.644589][T20899] kernfs_new_node+0xeb/0x140 [ 1029.644616][T20899] __kernfs_create_file+0x4b/0x2e0 [ 1029.644646][T20899] sysfs_add_file_mode_ns+0x237/0x300 [ 1029.644683][T20899] internal_create_group+0x679/0x1180 [ 1029.644715][T20899] ? kernfs_create_dir_ns+0x1c0/0x220 [ 1029.644744][T20899] ? __pfx_internal_create_group+0x10/0x10 [ 1029.644764][T20899] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 1029.644785][T20899] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 1029.644805][T20899] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1029.644840][T20899] sysfs_create_groups+0x59/0x120 [ 1029.644866][T20899] kobject_add_internal+0x673/0xce0 [ 1029.644903][T20899] kobject_add+0x163/0x240 [ 1029.644929][T20899] ? kobject_add+0x163/0x240 [ 1029.644960][T20899] ? __pfx_kobject_add+0x10/0x10 [ 1029.644987][T20899] ? __kasan_kmalloc+0x93/0xb0 [ 1029.645013][T20899] ? kobject_create_and_add+0x58/0x230 [ 1029.645043][T20899] blk_register_queue+0x83/0x4f0 [ 1029.645071][T20899] ? kobject_create_and_add+0x16f/0x230 [ 1029.645102][T20899] __add_disk+0x6b8/0xdb0 [ 1029.645141][T20899] add_disk_fwnode+0x100/0x3a0 [ 1029.645174][T20899] add_mtd_blktrans_dev+0xe81/0x14c0 [ 1029.645213][T20899] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1029.645258][T20899] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1029.645280][T20899] ? mtdblock_add_mtd+0x57/0x240 [ 1029.645312][T20899] mtdblock_add_mtd+0x18a/0x240 [ 1029.645340][T20899] blktrans_notify_add+0x9f/0xf0 [ 1029.645365][T20899] add_mtd_device+0x117f/0x17b0 [ 1029.645402][T20899] ? __pfx_add_mtd_device+0x10/0x10 [ 1029.645433][T20899] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 1029.645467][T20899] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1029.645509][T20899] mtd_add_partition+0x388/0x590 [ 1029.645537][T20899] ? __pfx_mtd_add_partition+0x10/0x10 [ 1029.645577][T20899] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 1029.645604][T20899] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1029.645660][T20899] mtdchar_ioctl+0x14fd/0x1bc0 [ 1029.645689][T20899] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1029.645729][T20899] ? kasan_quarantine_put+0xbb/0x1f0 [ 1029.645768][T20899] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1029.645796][T20899] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1029.645833][T20899] ? __lock_acquire+0x747/0x2de0 [ 1029.645877][T20899] ? do_futex+0x3e7/0x4e0 [ 1029.645924][T20899] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1029.645946][T20899] ? mutex_lock_nested+0x14d/0x1d0 [ 1029.645972][T20899] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 1029.645997][T20899] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 1029.646019][T20899] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1029.646042][T20899] __se_sys_ioctl+0xff/0x170 [ 1029.646067][T20899] do_syscall_64+0x166/0x520 [ 1029.646088][T20899] ? trace_irq_disable+0x3b/0x140 [ 1029.646109][T20899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.646131][T20899] ? clear_bhb_loop+0x70/0xc0 [ 1029.646155][T20899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.646173][T20899] RIP: 0033:0x7ff8718ef559 [ 1029.646192][T20899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.646210][T20899] RSP: 002b:00007ff86fb46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1029.646232][T20899] RAX: ffffffffffffffda RBX: 00007ff871b75fa0 RCX: 00007ff8718ef559 [ 1029.646247][T20899] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 1029.646261][T20899] RBP: 00007ff871986b50 R08: 0000000000000000 R09: 0000000000000000 [ 1029.646274][T20899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.646287][T20899] R13: 00007ff871b76038 R14: 00007ff871b75fa0 R15: 00007ffd7de25098 [ 1029.646320][T20899] [ 1029.694117][T20899] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock10) [ 1029.758573][ T5758] usb 6-1: Using ep0 maxpacket: 16 [ 1029.759570][ T5758] usb 6-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1029.766182][ T5758] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.766205][ T5758] usb 6-1: config 0 has no interfaces? [ 1029.771549][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.771572][ T5758] usb 6-1: Product: syz [ 1029.771587][ T5758] usb 6-1: Manufacturer: syz [ 1029.771601][ T5758] usb 6-1: SerialNumber: syz [ 1029.854547][ T5758] usb 6-1: config 0 descriptor?? [ 1030.519716][T20919] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 1030.900737][ T5748] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1031.820799][T20476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1031.915568][ T5748] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1031.915635][ T5748] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 1031.917328][ T5748] usb 4-1: config index 0 descriptor too short (expected 64954, got 72) [ 1031.949734][ T5748] usb 4-1: config index 1 descriptor too short (expected 64954, got 72) [ 1031.971061][ T5748] usb 4-1: config index 2 descriptor too short (expected 64954, got 72) [ 1032.023010][ T5748] usb 4-1: config index 3 descriptor too short (expected 64954, got 72) [ 1032.026821][ T5748] usb 4-1: config index 4 descriptor too short (expected 64954, got 72) [ 1032.028185][ T5748] usb 4-1: config index 5 descriptor too short (expected 64954, got 72) [ 1032.056431][ T5748] usb 4-1: config index 6 descriptor too short (expected 64954, got 72) [ 1032.072547][ T5748] usb 4-1: config index 7 descriptor too short (expected 64954, got 72) [ 1032.093414][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.093440][ T5748] usb 4-1: Product: syz [ 1032.093452][ T5748] usb 4-1: Manufacturer: syz [ 1032.093460][ T5748] usb 4-1: SerialNumber: syz [ 1032.131481][T20476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1032.134412][T20476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1032.230513][T20476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1032.238030][T13756] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1032.261790][T20476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1032.407306][T20476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1032.417065][T20476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1032.445121][ T7609] usb 6-1: USB disconnect, device number 4 [ 1032.478490][T20476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1033.744620][T20476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.902548][T13756] usb 4-1: Service connection timeout for: 256 [ 1033.902580][T13756] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1034.046122][T20476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.103723][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.103929][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.106714][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.106843][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.221486][T13756] ath9k_htc: Failed to initialize the device [ 1034.362207][T13756] usb 4-1: ath9k_htc: USB layer deinitialized [ 1034.613592][T20967] 0x000000000003-0x000000010001 : "" [ 1034.790345][ T5748] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1034.961240][ T5748] usb 8-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 1034.975067][ T5748] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.073664][ T5748] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1035.073705][ T5748] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.135288][T20967] ftl_cs: FTL header corrupt! [ 1035.331833][T20967] FAULT_INJECTION: forcing a failure. [ 1035.331833][T20967] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.331870][T20967] CPU: 0 UID: 0 PID: 20967 Comm: syz.5.3693 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1035.331900][T20967] Tainted: [L]=SOFTLOCKUP [ 1035.331908][T20967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1035.331920][T20967] Call Trace: [ 1035.331929][T20967] [ 1035.331939][T20967] dump_stack_lvl+0xe8/0x150 [ 1035.331979][T20967] should_fail_ex+0x447/0x5e0 [ 1035.332010][T20967] should_failslab+0xa8/0x100 [ 1035.332035][T20967] ? __kernfs_new_node+0xe7/0xa70 [ 1035.332059][T20967] kmem_cache_alloc_noprof+0x99/0x680 [ 1035.332090][T20967] ? __kernfs_new_node+0xe7/0xa70 [ 1035.332119][T20967] __kernfs_new_node+0xe7/0xa70 [ 1035.332143][T20967] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1035.332173][T20967] ? __pfx___kernfs_new_node+0x10/0x10 [ 1035.332195][T20967] ? lock_acquire+0x115/0x350 [ 1035.332225][T20967] ? kernfs_root+0x1c/0x230 [ 1035.332253][T20967] ? kernfs_root+0x1c/0x230 [ 1035.332273][T20967] ? kernfs_root+0x1c/0x230 [ 1035.332291][T20967] ? kernfs_root+0x1c/0x230 [ 1035.332317][T20967] kernfs_new_node+0xeb/0x140 [ 1035.332345][T20967] __kernfs_create_file+0x4b/0x2e0 [ 1035.332375][T20967] sysfs_add_file_mode_ns+0x237/0x300 [ 1035.332412][T20967] internal_create_group+0x679/0x1180 [ 1035.332444][T20967] ? kernfs_create_dir_ns+0x1c0/0x220 [ 1035.332474][T20967] ? __pfx_internal_create_group+0x10/0x10 [ 1035.332494][T20967] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 1035.332514][T20967] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 1035.332534][T20967] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1035.332561][T20967] sysfs_create_groups+0x59/0x120 [ 1035.332586][T20967] kobject_add_internal+0x673/0xce0 [ 1035.332621][T20967] kobject_add+0x163/0x240 [ 1035.332648][T20967] ? kobject_add+0x163/0x240 [ 1035.332674][T20967] ? __pfx_kobject_add+0x10/0x10 [ 1035.332701][T20967] ? __kasan_kmalloc+0x93/0xb0 [ 1035.332726][T20967] ? kobject_create_and_add+0x58/0x230 [ 1035.332764][T20967] blk_register_queue+0x83/0x4f0 [ 1035.332795][T20967] ? kobject_create_and_add+0x16f/0x230 [ 1035.332827][T20967] __add_disk+0x6b8/0xdb0 [ 1035.332864][T20967] add_disk_fwnode+0x100/0x3a0 [ 1035.332897][T20967] add_mtd_blktrans_dev+0xe81/0x14c0 [ 1035.332939][T20967] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1035.332987][T20967] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1035.333009][T20967] ? mtdblock_add_mtd+0x57/0x240 [ 1035.333042][T20967] mtdblock_add_mtd+0x18a/0x240 [ 1035.333069][T20967] blktrans_notify_add+0x9f/0xf0 [ 1035.333092][T20967] add_mtd_device+0x117f/0x17b0 [ 1035.333130][T20967] ? __pfx_add_mtd_device+0x10/0x10 [ 1035.333161][T20967] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 1035.333193][T20967] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1035.333236][T20967] mtd_add_partition+0x388/0x590 [ 1035.333263][T20967] ? __pfx_mtd_add_partition+0x10/0x10 [ 1035.333302][T20967] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 1035.333330][T20967] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1035.333382][T20967] mtdchar_ioctl+0x14fd/0x1bc0 [ 1035.333412][T20967] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1035.333452][T20967] ? kasan_quarantine_put+0xbb/0x1f0 [ 1035.333490][T20967] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1035.333518][T20967] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1035.333549][T20967] ? __lock_acquire+0x747/0x2de0 [ 1035.333598][T20967] ? do_futex+0x3e7/0x4e0 [ 1035.333649][T20967] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1035.333671][T20967] ? mutex_lock_nested+0x14d/0x1d0 [ 1035.333696][T20967] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 1035.333722][T20967] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 1035.333745][T20967] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1035.333778][T20967] __se_sys_ioctl+0xff/0x170 [ 1035.333804][T20967] do_syscall_64+0x166/0x520 [ 1035.333825][T20967] ? trace_irq_disable+0x3b/0x140 [ 1035.333845][T20967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.333866][T20967] ? clear_bhb_loop+0x70/0xc0 [ 1035.333892][T20967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.333912][T20967] RIP: 0033:0x7fd29b98f559 [ 1035.333933][T20967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.333951][T20967] RSP: 002b:00007fd299be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.333975][T20967] RAX: ffffffffffffffda RBX: 00007fd29bc15fa0 RCX: 00007fd29b98f559 [ 1035.333990][T20967] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 1035.334003][T20967] RBP: 00007fd29ba26b50 R08: 0000000000000000 R09: 0000000000000000 [ 1035.334016][T20967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.334029][T20967] R13: 00007fd29bc16038 R14: 00007fd29bc15fa0 R15: 00007fff4834cb28 [ 1035.334064][T20967] [ 1035.607038][T20967] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock11) [ 1035.623353][ T5748] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1035.884542][ T5758] usb 4-1: USB disconnect, device number 10 [ 1036.238580][ T5748] usb 8-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1036.400913][ T5748] ttusb_dec_send_command: command bulk message failed: error -71 [ 1037.064599][ T5748] usb 8-1: USB disconnect, device number 10 [ 1040.219597][T21007] input: syz0 as /devices/virtual/input/input20 [ 1040.785917][T21024] 0x000000000003-0x000000010001 : "" [ 1040.865343][T21024] ftl_cs: FTL header corrupt! [ 1040.894809][T21024] FAULT_INJECTION: forcing a failure. [ 1040.894809][T21024] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.894845][T21024] CPU: 1 UID: 0 PID: 21024 Comm: syz.3.3704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.894873][T21024] Tainted: [L]=SOFTLOCKUP [ 1040.894878][T21024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1040.894886][T21024] Call Trace: [ 1040.894891][T21024] [ 1040.894897][T21024] dump_stack_lvl+0xe8/0x150 [ 1040.894920][T21024] should_fail_ex+0x447/0x5e0 [ 1040.894937][T21024] should_failslab+0xa8/0x100 [ 1040.894950][T21024] ? __kernfs_new_node+0xe7/0xa70 [ 1040.894963][T21024] kmem_cache_alloc_noprof+0x99/0x680 [ 1040.894983][T21024] ? __kernfs_new_node+0xe7/0xa70 [ 1040.894999][T21024] __kernfs_new_node+0xe7/0xa70 [ 1040.895011][T21024] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1040.895028][T21024] ? __pfx___kernfs_new_node+0x10/0x10 [ 1040.895040][T21024] ? lock_acquire+0x115/0x350 [ 1040.895057][T21024] ? kernfs_root+0x1c/0x230 [ 1040.895072][T21024] ? kernfs_root+0x1c/0x230 [ 1040.895084][T21024] ? kernfs_root+0x1c/0x230 [ 1040.895095][T21024] ? kernfs_root+0x1c/0x230 [ 1040.895109][T21024] kernfs_new_node+0xeb/0x140 [ 1040.895124][T21024] __kernfs_create_file+0x4b/0x2e0 [ 1040.895141][T21024] sysfs_add_file_mode_ns+0x237/0x300 [ 1040.895161][T21024] internal_create_group+0x679/0x1180 [ 1040.895178][T21024] ? kernfs_create_dir_ns+0x1c0/0x220 [ 1040.895193][T21024] ? __pfx_internal_create_group+0x10/0x10 [ 1040.895205][T21024] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 1040.895217][T21024] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 1040.895228][T21024] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1040.895242][T21024] sysfs_create_groups+0x59/0x120 [ 1040.895255][T21024] kobject_add_internal+0x673/0xce0 [ 1040.895274][T21024] kobject_add+0x163/0x240 [ 1040.895287][T21024] ? kobject_add+0x163/0x240 [ 1040.895302][T21024] ? __pfx_kobject_add+0x10/0x10 [ 1040.895316][T21024] ? __kasan_kmalloc+0x93/0xb0 [ 1040.895329][T21024] ? kobject_create_and_add+0x58/0x230 [ 1040.895345][T21024] blk_register_queue+0x83/0x4f0 [ 1040.895361][T21024] ? kobject_create_and_add+0x16f/0x230 [ 1040.895377][T21024] __add_disk+0x6b8/0xdb0 [ 1040.895397][T21024] add_disk_fwnode+0x100/0x3a0 [ 1040.895414][T21024] add_mtd_blktrans_dev+0xe81/0x14c0 [ 1040.895435][T21024] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1040.895459][T21024] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1040.895470][T21024] ? mtdblock_add_mtd+0x57/0x240 [ 1040.895487][T21024] mtdblock_add_mtd+0x18a/0x240 [ 1040.895501][T21024] blktrans_notify_add+0x9f/0xf0 [ 1040.895515][T21024] add_mtd_device+0x117f/0x17b0 [ 1040.895534][T21024] ? __pfx_add_mtd_device+0x10/0x10 [ 1040.895550][T21024] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 1040.895568][T21024] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1040.895590][T21024] mtd_add_partition+0x388/0x590 [ 1040.895604][T21024] ? __pfx_mtd_add_partition+0x10/0x10 [ 1040.895624][T21024] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 1040.895639][T21024] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1040.895667][T21024] mtdchar_ioctl+0x14fd/0x1bc0 [ 1040.895682][T21024] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1040.895709][T21024] ? kasan_quarantine_put+0xbb/0x1f0 [ 1040.895731][T21024] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1040.895746][T21024] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1040.895763][T21024] ? __lock_acquire+0x747/0x2de0 [ 1040.895788][T21024] ? do_futex+0x458/0x4e0 [ 1040.895815][T21024] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1040.895826][T21024] ? mutex_lock_nested+0x14d/0x1d0 [ 1040.895840][T21024] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 1040.895854][T21024] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 1040.895866][T21024] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1040.895880][T21024] __se_sys_ioctl+0xff/0x170 [ 1040.895904][T21024] do_syscall_64+0x166/0x520 [ 1040.895925][T21024] ? trace_irq_disable+0x3b/0x140 [ 1040.895948][T21024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.895969][T21024] ? clear_bhb_loop+0x70/0xc0 [ 1040.895994][T21024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.896015][T21024] RIP: 0033:0x7ff8718ef559 [ 1040.896034][T21024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.896044][T21024] RSP: 002b:00007ff86fb46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1040.896057][T21024] RAX: ffffffffffffffda RBX: 00007ff871b75fa0 RCX: 00007ff8718ef559 [ 1040.896066][T21024] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 1040.896074][T21024] RBP: 00007ff871986b50 R08: 0000000000000000 R09: 0000000000000000 [ 1040.896081][T21024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.896088][T21024] R13: 00007ff871b76038 R14: 00007ff871b75fa0 R15: 00007ffd7de25098 [ 1040.896106][T21024] [ 1041.063983][T21024] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock12) [ 1041.421401][T20476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.613755][T20476] veth0_vlan: entered promiscuous mode [ 1041.663606][T20476] veth1_vlan: entered promiscuous mode [ 1041.785843][T20476] veth0_macvtap: entered promiscuous mode [ 1041.859197][T20476] veth1_macvtap: entered promiscuous mode [ 1042.000931][T20476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.120651][T20476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.210870][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.210900][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.210920][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.210939][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.884426][T18987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.884448][T18987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.360825][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.360847][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.754679][T21069] input: syz0 as /devices/virtual/input/input21 [ 1050.422565][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1050.731112][T21110] syzkaller0: entered promiscuous mode [ 1050.731139][T21110] syzkaller0: entered allmulticast mode [ 1053.194360][T21133] input: syz0 as /devices/virtual/input/input22 [ 1053.728314][T21138] 0x000000000003-0x000000010001 : "" [ 1054.075536][T21138] ftl_cs: FTL header corrupt! [ 1054.848286][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.848356][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.875597][T21138] FAULT_INJECTION: forcing a failure. [ 1054.875597][T21138] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.875634][T21138] CPU: 1 UID: 0 PID: 21138 Comm: syz.7.3727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1054.875663][T21138] Tainted: [L]=SOFTLOCKUP [ 1054.875672][T21138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1054.875684][T21138] Call Trace: [ 1054.875692][T21138] [ 1054.875702][T21138] dump_stack_lvl+0xe8/0x150 [ 1054.875743][T21138] should_fail_ex+0x447/0x5e0 [ 1054.875778][T21138] should_failslab+0xa8/0x100 [ 1054.875803][T21138] ? __kernfs_new_node+0xe7/0xa70 [ 1054.875829][T21138] kmem_cache_alloc_noprof+0x99/0x680 [ 1054.875860][T21138] ? __kernfs_new_node+0xe7/0xa70 [ 1054.875890][T21138] __kernfs_new_node+0xe7/0xa70 [ 1054.875914][T21138] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1054.875946][T21138] ? __pfx___kernfs_new_node+0x10/0x10 [ 1054.875967][T21138] ? lock_acquire+0x115/0x350 [ 1054.875996][T21138] ? kernfs_root+0x1c/0x230 [ 1054.876023][T21138] ? kernfs_root+0x1c/0x230 [ 1054.876043][T21138] ? kernfs_root+0x1c/0x230 [ 1054.876062][T21138] ? kernfs_root+0x1c/0x230 [ 1054.876086][T21138] kernfs_new_node+0xeb/0x140 [ 1054.876114][T21138] __kernfs_create_file+0x4b/0x2e0 [ 1054.876144][T21138] sysfs_add_file_mode_ns+0x237/0x300 [ 1054.876182][T21138] internal_create_group+0x679/0x1180 [ 1054.876215][T21138] ? kernfs_create_dir_ns+0x1c0/0x220 [ 1054.876244][T21138] ? __pfx_internal_create_group+0x10/0x10 [ 1054.876264][T21138] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 1054.876285][T21138] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 1054.876305][T21138] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1054.876333][T21138] sysfs_create_groups+0x59/0x120 [ 1054.876365][T21138] kobject_add_internal+0x673/0xce0 [ 1054.876402][T21138] kobject_add+0x163/0x240 [ 1054.876428][T21138] ? kobject_add+0x163/0x240 [ 1054.876456][T21138] ? __pfx_kobject_add+0x10/0x10 [ 1054.876481][T21138] ? __kasan_kmalloc+0x93/0xb0 [ 1054.876506][T21138] ? kobject_create_and_add+0x58/0x230 [ 1054.876535][T21138] blk_register_queue+0x83/0x4f0 [ 1054.876562][T21138] ? kobject_create_and_add+0x16f/0x230 [ 1054.876593][T21138] __add_disk+0x6b8/0xdb0 [ 1054.876631][T21138] add_disk_fwnode+0x100/0x3a0 [ 1054.876664][T21138] add_mtd_blktrans_dev+0xe81/0x14c0 [ 1054.876704][T21138] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1054.876750][T21138] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1054.876771][T21138] ? mtdblock_add_mtd+0x57/0x240 [ 1054.876803][T21138] mtdblock_add_mtd+0x18a/0x240 [ 1054.876830][T21138] blktrans_notify_add+0x9f/0xf0 [ 1054.876855][T21138] add_mtd_device+0x117f/0x17b0 [ 1054.876891][T21138] ? __pfx_add_mtd_device+0x10/0x10 [ 1054.876921][T21138] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 1054.876955][T21138] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1054.876998][T21138] mtd_add_partition+0x388/0x590 [ 1054.877025][T21138] ? __pfx_mtd_add_partition+0x10/0x10 [ 1054.877064][T21138] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 1054.877092][T21138] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1054.877147][T21138] mtdchar_ioctl+0x14fd/0x1bc0 [ 1054.877176][T21138] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1054.877215][T21138] ? kasan_quarantine_put+0xbb/0x1f0 [ 1054.877251][T21138] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1054.877277][T21138] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1054.877306][T21138] ? __lock_acquire+0x747/0x2de0 [ 1054.877356][T21138] ? do_futex+0x3e7/0x4e0 [ 1054.877411][T21138] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1054.877434][T21138] ? mutex_lock_nested+0x14d/0x1d0 [ 1054.877459][T21138] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 1054.877485][T21138] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 1054.877508][T21138] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1054.877532][T21138] __se_sys_ioctl+0xff/0x170 [ 1054.877556][T21138] do_syscall_64+0x166/0x520 [ 1054.877574][T21138] ? trace_irq_disable+0x3b/0x140 [ 1054.877595][T21138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.877617][T21138] ? clear_bhb_loop+0x70/0xc0 [ 1054.877643][T21138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.877663][T21138] RIP: 0033:0x7fcf1535f559 [ 1054.877684][T21138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.877702][T21138] RSP: 002b:00007fcf135ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1054.877725][T21138] RAX: ffffffffffffffda RBX: 00007fcf155e5fa0 RCX: 00007fcf1535f559 [ 1054.877740][T21138] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 1054.877754][T21138] RBP: 00007fcf153f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 1054.877768][T21138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.877780][T21138] R13: 00007fcf155e6038 R14: 00007fcf155e5fa0 R15: 00007ffc32e9a8d8 [ 1054.877814][T21138] [ 1054.879964][T21138] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock13) [ 1056.920095][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1060.620603][T21192] input: syz0 as /devices/virtual/input/input23 [ 1062.960362][T21217] bridge0: port 3(syz_tun) entered blocking state [ 1062.960488][T21217] bridge0: port 3(syz_tun) entered disabled state [ 1062.960700][T21217] syz_tun: entered allmulticast mode [ 1062.972108][T21217] syz_tun: entered promiscuous mode [ 1062.972729][T21217] bridge0: port 3(syz_tun) entered blocking state [ 1062.972805][T21217] bridge0: port 3(syz_tun) entered forwarding state [ 1063.020554][T21219] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1063.953067][T21243] fuse: Unknown parameter '0x0000000000000003' [ 1064.452703][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1066.606511][T21280] fuse: Unknown parameter '0x0000000000000003' [ 1067.381460][T21301] input: syz0 as /devices/virtual/input/input24 [ 1068.282807][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1070.063245][T21328] fuse: Unknown parameter '0x0000000000000003' [ 1070.538256][T21341] input: syz0 as /devices/virtual/input/input25 [ 1072.129196][ T5758] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 1072.989326][ T5758] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1072.990644][ T5758] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1072.990668][ T5758] usb 2-1: config 0 has no interface number 0 [ 1072.990713][ T5758] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1072.990740][ T5758] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1072.990781][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.185949][ T5758] usb 2-1: config 0 descriptor?? [ 1073.187411][T21361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1073.221081][ T5758] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1073.353778][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1073.433892][ T5758] usb 2-1: USB disconnect, device number 2 [ 1073.714819][T21383] fuse: Bad value for 'fd' [ 1073.755665][T21385] fuse: Unknown parameter '0x0000000000000003' [ 1073.778553][T13756] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1074.167418][T13756] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1074.174337][T13756] usb 8-1: not running at top speed; connect to a high speed hub [ 1074.174375][T13756] usb 8-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1074.177984][T13756] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1074.178009][T13756] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1074.178029][T13756] usb 8-1: config 14 has no interface number 0 [ 1074.178046][T13756] usb 8-1: config 14 has no interface number 1 [ 1074.178112][T13756] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1074.178134][T13756] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1074.178159][T13756] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 1074.178187][T13756] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.178213][T13756] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1074.178231][T13756] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1074.188500][ T5758] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1076.007086][T13756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.007104][T13756] usb 8-1: Product: syz [ 1076.007112][T13756] usb 8-1: Manufacturer: syz [ 1076.007120][T13756] usb 8-1: SerialNumber: syz [ 1076.048549][ T5758] usb 1-1: Using ep0 maxpacket: 32 [ 1076.072530][ T5758] usb 1-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1076.094715][ T5758] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1076.094734][ T5758] usb 1-1: config 0 has no interface number 0 [ 1076.124447][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.124480][ T5758] usb 1-1: Product: syz [ 1076.124495][ T5758] usb 1-1: Manufacturer: syz [ 1076.124510][ T5758] usb 1-1: SerialNumber: syz [ 1076.186696][ T5758] usb 1-1: config 0 descriptor?? [ 1076.507668][T13756] legousbtower 8-1:14.57: interrupt endpoints not found [ 1076.690517][ T5758] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1076.690549][ T5758] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1076.721775][T16750] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1076.878551][T16750] usb 6-1: device descriptor read/64, error -71 [ 1076.907188][T13756] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 1077.150639][T13756] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1077.228859][T16750] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1077.233009][T13756] usb 8-1: USB disconnect, device number 11 [ 1077.248480][ T4933] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1077.358519][T16750] usb 6-1: device descriptor read/64, error -71 [ 1077.405850][T13756] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 1077.429809][ T4933] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1077.431345][ T4933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.431375][ T4933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.431398][ T4933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1077.431439][ T4933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.491688][T16750] usb usb6-port1: attempt power cycle [ 1077.580459][ T4933] usb 4-1: config 0 descriptor?? [ 1078.088569][T16750] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1078.135227][T16750] usb 6-1: device descriptor read/8, error -71 [ 1078.204730][ T4933] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 1078.414050][T16750] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1078.501581][T16750] usb 6-1: device descriptor read/8, error -71 [ 1078.609197][T16750] usb usb6-port1: unable to enumerate USB device [ 1078.991223][ T5758] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1078.991705][ T5758] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1079.056201][ T5758] usb 1-1: USB disconnect, device number 12 [ 1079.164428][ T4933] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1079.222072][T21424] fuse: Bad value for 'fd' [ 1079.295173][T21428] fuse: Unknown parameter 'fd0x0000000000000003' [ 1079.325481][ T4933] usb 4-1: USB disconnect, device number 11 [ 1079.519175][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1079.685285][T21431] fido_id[21431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1080.960005][ T5758] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1081.062203][T21444] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3808'. [ 1081.109892][ T5758] usb 8-1: Using ep0 maxpacket: 32 [ 1081.116226][ T5758] usb 8-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1081.148104][ T5758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.148120][ T5758] usb 8-1: Product: syz [ 1081.148128][ T5758] usb 8-1: Manufacturer: syz [ 1081.148136][ T5758] usb 8-1: SerialNumber: syz [ 1081.217076][ T5758] usb 8-1: config 0 descriptor?? [ 1082.121022][ T5758] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1082.880172][ T5758] gspca_ov534_9: reg_w failed -71 [ 1083.006086][T21462] tmpfs: Using encoding : utf8-12.1.0 [ 1083.088569][T21464] overlay: ./file0 is not a directory [ 1083.188509][ T5758] gspca_ov534_9: Unknown sensor 0000 [ 1083.188582][ T5758] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 1083.243249][ T5758] usb 8-1: USB disconnect, device number 12 [ 1083.612771][T21471] fuse: Bad value for 'fd' [ 1083.666630][T21473] fuse: Unknown parameter 'fd0x0000000000000003' [ 1085.040550][T13756] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1085.182328][T13756] usb 8-1: device descriptor read/64, error -71 [ 1086.242563][T13756] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1086.368513][T13756] usb 8-1: device descriptor read/64, error -71 [ 1086.488989][T13756] usb usb8-port1: attempt power cycle [ 1086.750965][T21505] 0x000000000003-0x000000010001 : "" [ 1086.838645][T13756] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1086.838811][T21502] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1086.884655][T21505] ftl_cs: FTL header corrupt! [ 1086.933544][T13756] usb 8-1: device descriptor read/8, error -71 [ 1087.004732][T21505] FAULT_INJECTION: forcing a failure. [ 1087.004732][T21505] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.004768][T21505] CPU: 0 UID: 0 PID: 21505 Comm: syz.3.3822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1087.004796][T21505] Tainted: [L]=SOFTLOCKUP [ 1087.004805][T21505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1087.004817][T21505] Call Trace: [ 1087.004827][T21505] [ 1087.004836][T21505] dump_stack_lvl+0xe8/0x150 [ 1087.004877][T21505] should_fail_ex+0x447/0x5e0 [ 1087.004908][T21505] should_failslab+0xa8/0x100 [ 1087.004939][T21505] ? __kernfs_new_node+0xe7/0xa70 [ 1087.004963][T21505] kmem_cache_alloc_noprof+0x99/0x680 [ 1087.004994][T21505] ? __kernfs_new_node+0xe7/0xa70 [ 1087.005024][T21505] __kernfs_new_node+0xe7/0xa70 [ 1087.005047][T21505] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1087.005079][T21505] ? __pfx___kernfs_new_node+0x10/0x10 [ 1087.005100][T21505] ? lock_acquire+0x115/0x350 [ 1087.005130][T21505] ? kernfs_root+0x1c/0x230 [ 1087.005159][T21505] ? kernfs_root+0x1c/0x230 [ 1087.005180][T21505] ? kernfs_root+0x1c/0x230 [ 1087.005199][T21505] ? kernfs_root+0x1c/0x230 [ 1087.005224][T21505] kernfs_new_node+0xeb/0x140 [ 1087.005251][T21505] __kernfs_create_file+0x4b/0x2e0 [ 1087.005281][T21505] sysfs_add_file_mode_ns+0x237/0x300 [ 1087.005318][T21505] sysfs_merge_group+0x183/0x320 [ 1087.005345][T21505] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1087.005365][T21505] ? device_add_attrs+0x5c3/0x600 [ 1087.005389][T21505] ? __pfx_device_add_attrs+0x10/0x10 [ 1087.005407][T21505] ? kobject_put+0x50f/0x550 [ 1087.005440][T21505] dpm_sysfs_add+0xd2/0x270 [ 1087.005545][T21505] device_add+0x4ca/0xb80 [ 1087.005569][T21505] __add_disk+0x517/0xdb0 [ 1087.005610][T21505] add_disk_fwnode+0x100/0x3a0 [ 1087.005644][T21505] add_mtd_blktrans_dev+0xe81/0x14c0 [ 1087.005683][T21505] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1087.005738][T21505] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1087.005759][T21505] ? mtdblock_add_mtd+0x57/0x240 [ 1087.005792][T21505] mtdblock_add_mtd+0x18a/0x240 [ 1087.005820][T21505] blktrans_notify_add+0x9f/0xf0 [ 1087.005845][T21505] add_mtd_device+0x117f/0x17b0 [ 1087.005880][T21505] ? __pfx_add_mtd_device+0x10/0x10 [ 1087.005912][T21505] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 1087.005946][T21505] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1087.005989][T21505] mtd_add_partition+0x388/0x590 [ 1087.006018][T21505] ? __pfx_mtd_add_partition+0x10/0x10 [ 1087.006058][T21505] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 1087.006086][T21505] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1087.006142][T21505] mtdchar_ioctl+0x14fd/0x1bc0 [ 1087.006172][T21505] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1087.006213][T21505] ? kasan_quarantine_put+0xbb/0x1f0 [ 1087.006253][T21505] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1087.006280][T21505] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1087.006312][T21505] ? __lock_acquire+0x747/0x2de0 [ 1087.006360][T21505] ? do_futex+0x3e7/0x4e0 [ 1087.006410][T21505] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1087.006433][T21505] ? mutex_lock_nested+0x14d/0x1d0 [ 1087.006458][T21505] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 1087.006485][T21505] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 1087.006508][T21505] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1087.006532][T21505] __se_sys_ioctl+0xff/0x170 [ 1087.006556][T21505] do_syscall_64+0x166/0x520 [ 1087.006577][T21505] ? trace_irq_disable+0x3b/0x140 [ 1087.006597][T21505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.006618][T21505] ? clear_bhb_loop+0x70/0xc0 [ 1087.006643][T21505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.006662][T21505] RIP: 0033:0x7ff8718ef559 [ 1087.006682][T21505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.006700][T21505] RSP: 002b:00007ff86fb46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.006729][T21505] RAX: ffffffffffffffda RBX: 00007ff871b75fa0 RCX: 00007ff8718ef559 [ 1087.006745][T21505] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000005 [ 1087.006759][T21505] RBP: 00007ff871986b50 R08: 0000000000000000 R09: 0000000000000000 [ 1087.006772][T21505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.006786][T21505] R13: 00007ff871b76038 R14: 00007ff871b75fa0 R15: 00007ffd7de25098 [ 1087.006822][T21505] [ 1087.091961][T21518] input: syz0 as /devices/virtual/input/input27 [ 1088.590546][T21522] fuse: Bad value for 'fd' [ 1088.728421][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1088.736869][T21524] fuse: Unknown parameter 'fd0x0000000000000003' [ 1092.348521][T13756] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1092.446961][T21559] input: syz0 as /devices/virtual/input/input28 [ 1093.267600][T21560] overlay: ./file0 is not a directory [ 1093.278504][T13756] usb 6-1: device descriptor read/64, error -71 [ 1093.528508][T13756] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1093.678485][T13756] usb 6-1: device descriptor read/64, error -71 [ 1093.742461][T21571] fuse: Bad value for 'fd' [ 1093.803372][T13756] usb usb6-port1: attempt power cycle [ 1094.148527][T13756] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1094.193961][T13756] usb 6-1: device descriptor read/8, error -71 [ 1094.460765][T13756] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1094.492316][T13756] usb 6-1: device descriptor read/8, error -71 [ 1094.611240][T13756] usb usb6-port1: unable to enumerate USB device [ 1095.015736][ T1374] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.651462][T21610] input: syz0 as /devices/virtual/input/input29 [ 1096.556612][T21591] tipc: Started in network mode [ 1096.556642][T21591] tipc: Node identity fa1a1bb53a1a, cluster identity 4711 [ 1096.556858][T21591] tipc: Enabled bearer , priority 0 [ 1096.557654][T21588] syzkaller0: entered promiscuous mode [ 1096.557680][T21588] syzkaller0: entered allmulticast mode [ 1096.590855][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1097.113730][T21572] tipc: Resetting bearer [ 1097.596913][T21572] tipc: Disabling bearer [ 1097.657145][T21633] fuse: Bad value for 'fd' [ 1097.975272][ T4933] tipc: Node number set to 3221232565 [ 1098.737896][ T1374] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.194438][T16750] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1099.349261][T16750] usb 8-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1099.350029][T16750] usb 8-1: config 0 has no interfaces? [ 1099.350068][T16750] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.279752][T16750] usb 8-1: config 0 descriptor?? [ 1100.378512][ T5758] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1100.407036][T21671] fuse: Invalid rootmode [ 1100.529758][ T5758] usb 1-1: Using ep0 maxpacket: 32 [ 1100.530572][ T5758] usb 1-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1100.584901][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.585846][ T5758] usb 1-1: Product: syz [ 1100.585864][ T5758] usb 1-1: Manufacturer: syz [ 1100.585879][ T5758] usb 1-1: SerialNumber: syz [ 1100.631258][ T5758] usb 1-1: config 0 descriptor?? [ 1100.656091][ T5758] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1100.728070][ T1374] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.088546][T13767] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1101.248570][T13767] usb 2-1: Using ep0 maxpacket: 16 [ 1101.251502][T13767] usb 2-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1101.294964][T13767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.294991][T13767] usb 2-1: Product: syz [ 1101.295006][T13767] usb 2-1: Manufacturer: syz [ 1101.295021][T13767] usb 2-1: SerialNumber: syz [ 1101.380921][T13767] usb 2-1: config 0 descriptor?? [ 1101.414051][T13767] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1101.489844][ T5758] gspca_ov534_9: reg_w failed -71 [ 1101.645446][T21693] fuse: fd is not a fuse device [ 1101.702392][T13767] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 1101.778482][ T5758] gspca_ov534_9: Unknown sensor 0000 [ 1101.778568][ T5758] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1101.785410][ T5758] usb 1-1: USB disconnect, device number 13 [ 1101.854932][T16632] usb 8-1: USB disconnect, device number 17 [ 1102.026740][ T1374] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.439370][T21709] fuse: Invalid rootmode [ 1104.571391][T16632] usb 2-1: USB disconnect, device number 3 [ 1104.928585][T16750] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1105.100211][T16750] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1105.101372][T16750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.101420][T16750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.188692][T13756] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1105.207670][T16750] usb 4-1: config 0 descriptor?? [ 1105.367318][T13756] usb 2-1: Using ep0 maxpacket: 32 [ 1105.370544][T13756] usb 2-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1105.379069][T13756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.379093][T13756] usb 2-1: Product: syz [ 1105.379107][T13756] usb 2-1: Manufacturer: syz [ 1105.379121][T13756] usb 2-1: SerialNumber: syz [ 1105.439228][T13756] usb 2-1: config 0 descriptor?? [ 1105.479002][T16750] usbhid 4-1:0.0: can't add hid device: -71 [ 1105.479113][T16750] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1105.499086][T13756] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1105.513182][T16750] usb 4-1: USB disconnect, device number 12 [ 1106.048517][T16750] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1106.128536][ T5758] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1106.198928][T16750] usb 4-1: Using ep0 maxpacket: 32 [ 1106.206966][T16750] usb 4-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=0.40 [ 1106.951826][T13756] gspca_ov534_9: reg_w failed -71 [ 1106.963576][T16750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.963625][T16750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.039499][T16750] usb 4-1: config 0 descriptor?? [ 1107.048503][ T5758] usb 1-1: Using ep0 maxpacket: 16 [ 1107.079660][T16750] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1107.100161][ T5758] usb 1-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1107.118700][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.118726][ T5758] usb 1-1: Product: syz [ 1107.118740][ T5758] usb 1-1: Manufacturer: syz [ 1107.118754][ T5758] usb 1-1: SerialNumber: syz [ 1107.232542][ T5758] usb 1-1: config 0 descriptor?? [ 1107.266058][ T5758] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1107.290163][ T1374] bridge_slave_1: left allmulticast mode [ 1107.290196][ T1374] bridge_slave_1: left promiscuous mode [ 1107.290433][ T1374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.350169][T16750] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1107.418918][T13756] gspca_ov534_9: Unknown sensor 0000 [ 1107.419009][T13756] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1107.426847][T13756] usb 2-1: USB disconnect, device number 4 [ 1107.458753][ T5758] ssu100 1-1:0.0: probe with driver ssu100 failed with error -32 [ 1107.492562][ T1374] bridge_slave_0: left allmulticast mode [ 1107.492591][ T1374] bridge_slave_0: left promiscuous mode [ 1107.497370][ T1374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.958046][ T5758] usb 4-1: USB disconnect, device number 13 [ 1108.040811][ T5758] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1109.937928][ T4933] usb 1-1: USB disconnect, device number 14 [ 1110.917495][ T1374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.022798][ T1374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.063398][ T1374] bond0 (unregistering): Released all slaves [ 1111.789286][T21871] Invalid source name [ 1112.038595][ T5758] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1112.272619][ T5758] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1112.275116][ T5758] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1112.275144][ T5758] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1112.284816][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1112.284842][ T5758] usb 4-1: Product: syz [ 1112.284857][ T5758] usb 4-1: Manufacturer: syz [ 1112.284871][ T5758] usb 4-1: SerialNumber: syz [ 1112.341498][ T5758] usb 4-1: config 0 descriptor?? [ 1112.366230][ T5758] usb 4-1: selecting invalid altsetting 0 [ 1112.625253][ T5758] usb 4-1: USB disconnect, device number 14 [ 1113.653166][T21193] udevd[21193]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.966446][T21910] capability: warning: `syz.7.3926' uses deprecated v2 capabilities in a way that may be insecure [ 1114.313952][ T36] audit: type=1326 audit(1793533861.906:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.1.3929" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf689f559 code=0x7ffc0000 [ 1114.314002][ T36] audit: type=1326 audit(1793533862.146:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.1.3929" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf689f559 code=0x7ffc0000 [ 1114.314383][ T36] audit: type=1326 audit(1793533862.146:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.1.3929" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f0cf689f559 code=0x7ffc0000 [ 1114.314426][ T36] audit: type=1326 audit(1793533862.146:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.1.3929" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf689f559 code=0x7ffc0000 [ 1114.314465][ T36] audit: type=1326 audit(1793533862.146:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.1.3929" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf689f559 code=0x7ffc0000 [ 1114.315063][ T36] audit: type=1326 audit(1793533862.146:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.1.3929" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf689f559 code=0x7ffc0000 [ 1114.315303][ T36] audit: type=1326 audit(1793533862.146:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.1.3929" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0cf689f559 code=0x7ffc0000 [ 1114.315673][ T36] audit: type=1326 audit(1793533862.146:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.1.3929" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0cf689f559 code=0x7ffc0000 [ 1114.315714][ T36] audit: type=1326 audit(1793533862.146:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.1.3929" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf689f559 code=0x7ffc0000 [ 1115.992556][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.992626][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.440085][ T4933] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1117.499011][ T5748] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1117.628961][ T4933] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1117.633180][ T4933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.679365][ T5748] usb 4-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.40 [ 1117.680983][ T5748] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1117.681014][ T5748] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1117.681039][ T5748] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1117.683931][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.683956][ T5748] usb 4-1: Product: syz [ 1117.683971][ T5748] usb 4-1: Manufacturer: syz [ 1117.683986][ T5748] usb 4-1: SerialNumber: syz [ 1117.759777][T21953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1117.759958][T21953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1118.035390][ T4933] usb 2-1: config 0 descriptor?? [ 1118.262517][ T4933] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1119.280387][ T4933] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1119.280413][ T4933] [drm] Initialized udl on minor 1 [ 1119.398902][ T4933] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1119.442747][ T4933] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1119.716557][ T4933] usb 2-1: USB disconnect, device number 5 [ 1120.913198][ T5748] rtl8150 4-1:1.0: couldn't reset the device [ 1120.913583][ T5748] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1120.994956][ T5748] usb 4-1: USB disconnect, device number 15 [ 1123.548773][ T1374] hsr_slave_0: left promiscuous mode [ 1133.413022][ T1374] hsr_slave_1: left promiscuous mode [ 1133.414262][ T1374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.414287][ T1374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.052531][ T1374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.052561][ T1374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.446000][ T1374] veth1_macvtap: left promiscuous mode [ 1135.446116][ T1374] veth0_macvtap: left promiscuous mode [ 1135.446371][ T1374] veth1_vlan: left promiscuous mode [ 1135.446563][ T1374] veth0_vlan: left promiscuous mode [ 1135.938581][T13756] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1136.102716][T13756] usb 2-1: Using ep0 maxpacket: 32 [ 1136.104315][T13756] usb 2-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1136.117923][T13756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.117949][T13756] usb 2-1: Product: syz [ 1136.117964][T13756] usb 2-1: Manufacturer: syz [ 1136.117979][T13756] usb 2-1: SerialNumber: syz [ 1136.136104][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1136.183171][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1136.184951][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1136.187211][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1136.188052][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1136.208806][T13756] usb 2-1: config 0 descriptor?? [ 1136.233200][T13756] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1136.720894][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1136.769575][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1136.771269][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1136.772760][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1136.773591][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1137.084344][T13756] gspca_ov534_9: reg_w failed -71 [ 1137.368499][T13756] gspca_ov534_9: Unknown sensor 0000 [ 1137.368596][T13756] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1137.388492][T13756] usb 2-1: USB disconnect, device number 6 [ 1137.948482][T13756] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1138.099420][T13756] usb 2-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1138.101173][T13756] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1138.101200][T13756] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1138.104363][T13756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.104386][T13756] usb 2-1: Product: syz [ 1138.104401][T13756] usb 2-1: Manufacturer: syz [ 1138.104416][T13756] usb 2-1: SerialNumber: syz [ 1138.112977][T13756] usb 2-1: config 0 descriptor?? [ 1138.156998][T13756] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1138.561522][T13756] gspca_sunplus: reg_r err -71 [ 1138.561739][T13756] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1138.577125][T13756] usb 2-1: USB disconnect, device number 7 [ 1140.639848][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1140.640090][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1140.640653][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1140.641009][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1140.642051][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1140.642412][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1140.643453][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1140.644153][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1140.644569][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1140.794671][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1142.700437][ T5605] Bluetooth: hci1: command tx timeout [ 1142.900564][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3960'. [ 1142.900606][T22038] openvswitch: netlink: Flow actions attr not present in new flow. [ 1143.018804][ T5605] Bluetooth: hci6: command tx timeout [ 1143.178518][T13756] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1143.331478][T13756] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1143.331538][T13756] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 1143.332888][T13756] usb 4-1: config index 0 descriptor too short (expected 64954, got 72) [ 1143.334325][T13756] usb 4-1: config index 1 descriptor too short (expected 64954, got 72) [ 1143.335780][T13756] usb 4-1: config index 2 descriptor too short (expected 64954, got 72) [ 1143.337513][T13756] usb 4-1: config index 3 descriptor too short (expected 64954, got 72) [ 1143.352348][T13756] usb 4-1: config index 4 descriptor too short (expected 64954, got 72) [ 1143.358765][T13756] usb 4-1: config index 5 descriptor too short (expected 64954, got 72) [ 1143.360144][T13756] usb 4-1: config index 6 descriptor too short (expected 64954, got 72) [ 1143.361307][T13756] usb 4-1: config index 7 descriptor too short (expected 64954, got 72) [ 1143.364132][T13756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.364156][T13756] usb 4-1: Product: syz [ 1143.364170][T13756] usb 4-1: Manufacturer: syz [ 1143.364185][T13756] usb 4-1: SerialNumber: syz [ 1143.401184][ T5748] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1144.800691][ T5605] Bluetooth: hci1: command tx timeout [ 1144.870871][ T982] IPVS: starting estimator thread 0... [ 1144.892722][ T5748] usb 4-1: Service connection timeout for: 256 [ 1144.892748][ T5748] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1145.008593][T22043] IPVS: using max 8 ests per chain, 19200 per kthread [ 1145.099208][ T5605] Bluetooth: hci6: command tx timeout [ 1145.258542][ T4933] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1145.409322][ T4933] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1145.410937][ T4933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.410987][ T4933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1145.411010][ T4933] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1145.411042][ T4933] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1145.411081][ T4933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.858570][ T5605] Bluetooth: hci1: command tx timeout [ 1147.188550][T13747] Bluetooth: hci6: command tx timeout [ 1148.522559][ T5758] usb 4-1: USB disconnect, device number 16 [ 1149.483656][ T5605] Bluetooth: hci6: command tx timeout [ 1149.592643][ T5605] Bluetooth: hci1: command tx timeout [ 1149.795090][ T4933] gud 1-1:1.0: Failed to add properties (error=-71) [ 1149.795142][ T4933] gud 1-1:1.0: probe with driver gud failed with error -71 [ 1149.855827][ T4933] usb 1-1: USB disconnect, device number 15 [ 1150.598619][ T5748] ath9k_htc: Failed to initialize the device [ 1150.606420][ T5758] usb 4-1: ath9k_htc: USB layer deinitialized [ 1161.848420][ C0] sched: DL replenish lagged too much [ 1177.425301][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.425369][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1215.578471][ T5605] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1217.001285][T13747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1217.139972][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1217.181225][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1217.190027][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1217.191135][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1217.198060][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1217.201108][ T1374] team0 (unregistering): Port device team_slave_1 removed [ 1217.396630][T13747] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1217.477725][T13747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1217.491509][T13747] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1217.495512][T13747] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1217.499763][T13747] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1217.899755][T13747] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1217.968611][T13747] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1217.996861][T13747] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1218.118725][T13747] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1218.128176][T13747] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1219.940279][T13747] Bluetooth: hci7: command tx timeout [ 1219.941138][ T5605] Bluetooth: hci5: command tx timeout [ 1219.951648][ T1374] team0 (unregistering): Port device team_slave_0 removed [ 1220.298549][ T5605] Bluetooth: hci8: command tx timeout [ 1221.978464][ T5605] Bluetooth: hci5: command tx timeout [ 1221.978500][ T5605] Bluetooth: hci7: command tx timeout [ 1222.378438][T13747] Bluetooth: hci8: command tx timeout [ 1223.755301][ T5605] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1223.862926][ T5605] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1223.878986][ T5605] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1223.889418][ T5605] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1223.890164][ T5605] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1224.065134][ T5613] Bluetooth: hci5: command tx timeout [ 1224.065244][ T5605] Bluetooth: hci7: command tx timeout [ 1224.271814][ T5605] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1224.336296][ T5605] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1224.358750][ T5605] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1224.361839][ T5605] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1224.364521][ T5605] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1224.464528][T13747] Bluetooth: hci8: command tx timeout [ 1225.762401][T13747] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1225.843811][T13747] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1225.859711][T13747] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1225.862334][T13747] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1225.863087][T13747] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1226.138384][ T5605] Bluetooth: hci7: command tx timeout [ 1226.218429][ T5605] Bluetooth: hci9: command tx timeout [ 1226.538408][ T5605] Bluetooth: hci8: command tx timeout [ 1226.618425][ T5605] Bluetooth: hci10: command tx timeout [ 1228.116595][ T5605] Bluetooth: hci11: command tx timeout [ 1228.301329][ T5605] Bluetooth: hci9: command tx timeout [ 1228.698431][ T5605] Bluetooth: hci10: command tx timeout [ 1229.059994][T19511] bridge0: port 3(syz_tun) entered disabled state [ 1229.243323][T19511] syz_tun (unregistering): left allmulticast mode [ 1229.243366][T19511] syz_tun (unregistering): left promiscuous mode [ 1229.243476][T19511] bridge0: port 3(syz_tun) entered disabled state [ 1230.138558][ T5605] Bluetooth: hci11: command tx timeout [ 1230.378406][ T5605] Bluetooth: hci9: command tx timeout [ 1230.779253][ T5605] Bluetooth: hci10: command tx timeout [ 1232.218397][ T5605] Bluetooth: hci11: command tx timeout [ 1232.458654][T13747] Bluetooth: hci9: command tx timeout [ 1232.862392][ T5605] Bluetooth: hci10: command tx timeout [ 1234.308542][ T5605] Bluetooth: hci11: command tx timeout [ 1235.897911][T22090] rxe_eth0 speed is unknown, defaulting to 1000 [ 1236.523713][T22080] rxe_eth0 speed is unknown, defaulting to 1000 [ 1236.528048][T22090] dummy0 speed is unknown, defaulting to 1000 [ 1238.667243][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.760382][ T5268] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1238.760825][T22102] rxe_eth0 speed is unknown, defaulting to 1000 [ 1238.762292][T22080] dummy0 speed is unknown, defaulting to 1000 [ 1238.861866][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.861932][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.956919][T22084] rxe_eth0 speed is unknown, defaulting to 1000 [ 1239.961393][T22102] dummy0 speed is unknown, defaulting to 1000 [ 1243.751615][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.797868][T22093] rxe_eth0 speed is unknown, defaulting to 1000 [ 1243.805616][T22084] dummy0 speed is unknown, defaulting to 1000 [ 1245.549987][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.895938][T22093] dummy0 speed is unknown, defaulting to 1000 [ 1245.972045][T22090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.972248][T22090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.972407][T22090] bridge_slave_0: entered allmulticast mode [ 1245.977739][T22090] bridge_slave_0: entered promiscuous mode [ 1246.085995][T22090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.086131][T22090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.086286][T22090] bridge_slave_1: entered allmulticast mode [ 1246.112653][T22090] bridge_slave_1: entered promiscuous mode [ 1246.487162][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.165934][T13747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1247.232657][T13747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1247.249748][T13747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1247.255254][T13747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1247.282983][T13747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1249.081635][T22090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.282657][T22090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.418571][T13747] Bluetooth: hci0: command tx timeout [ 1249.825846][T22090] team0: Port device team_slave_0 added [ 1250.005611][T22090] team0: Port device team_slave_1 added [ 1251.014095][T22090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.014115][T22090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.014143][T22090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.040294][T22090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.040310][T22090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.040338][T22090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.449881][T22256] rxe_eth0 speed is unknown, defaulting to 1000 [ 1251.498764][T13747] Bluetooth: hci0: command tx timeout [ 1252.484365][T22090] hsr_slave_0: entered promiscuous mode [ 1252.496704][T22090] hsr_slave_1: entered promiscuous mode [ 1252.679506][T22256] dummy0 speed is unknown, defaulting to 1000 [ 1252.866358][T22102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.866562][T22102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.867077][T22102] bridge_slave_0: entered allmulticast mode [ 1252.896692][T22102] bridge_slave_0: entered promiscuous mode [ 1253.013337][T22102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.013459][T22102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.013940][T22102] bridge_slave_1: entered allmulticast mode [ 1253.044245][T22102] bridge_slave_1: entered promiscuous mode [ 1253.268176][T22102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.578614][T13747] Bluetooth: hci0: command tx timeout [ 1254.316896][T22102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.684828][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.001005][T22102] team0: Port device team_slave_0 added [ 1255.018740][T22084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.018946][T22084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.019113][T22084] bridge_slave_0: entered allmulticast mode [ 1255.022075][T22084] bridge_slave_0: entered promiscuous mode [ 1255.065879][T22102] team0: Port device team_slave_1 added [ 1255.089647][T22084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.089768][T22084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.089942][T22084] bridge_slave_1: entered allmulticast mode [ 1255.092264][T22084] bridge_slave_1: entered promiscuous mode [ 1255.235438][T22093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.235641][T22093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.235807][T22093] bridge_slave_0: entered allmulticast mode [ 1255.272377][T22093] bridge_slave_0: entered promiscuous mode [ 1255.320729][T22102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.320746][T22102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.320773][T22102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.322558][T22093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.322695][T22093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.322872][T22093] bridge_slave_1: entered allmulticast mode [ 1255.328145][T22093] bridge_slave_1: entered promiscuous mode [ 1255.467618][T22084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.478614][T22102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.478631][T22102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.478659][T22102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.646361][T22084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.658528][T13747] Bluetooth: hci0: command tx timeout [ 1255.737350][T22093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.856050][T22093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.139706][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1256.173632][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1256.232589][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1256.233711][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1256.234425][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1257.807634][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.459349][T13747] Bluetooth: hci1: command tx timeout [ 1259.555862][T22102] hsr_slave_0: entered promiscuous mode [ 1259.564373][T22102] hsr_slave_1: entered promiscuous mode [ 1259.567355][T22102] debugfs: 'hsr0' already exists in 'hsr' [ 1259.567375][T22102] Cannot create hsr debugfs directory [ 1259.599666][T22093] team0: Port device team_slave_0 added [ 1259.625939][T22093] team0: Port device team_slave_1 added [ 1260.165323][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.539180][T13747] Bluetooth: hci1: command tx timeout [ 1261.832824][T22093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.832844][T22093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.832872][T22093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.146708][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.213542][T22093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.213560][T22093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.213588][T22093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.619722][T13747] Bluetooth: hci1: command tx timeout [ 1263.773821][T22348] rxe_eth0 speed is unknown, defaulting to 1000 [ 1264.287442][T22093] hsr_slave_0: entered promiscuous mode [ 1264.301556][T22093] hsr_slave_1: entered promiscuous mode [ 1264.305433][T22093] debugfs: 'hsr0' already exists in 'hsr' [ 1264.305453][T22093] Cannot create hsr debugfs directory [ 1264.699871][T13747] Bluetooth: hci1: command tx timeout [ 1265.729091][T22348] dummy0 speed is unknown, defaulting to 1000 [ 1266.057016][T22256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.057221][T22256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.057402][T22256] bridge_slave_0: entered allmulticast mode [ 1266.087141][T22256] bridge_slave_0: entered promiscuous mode [ 1266.420770][T22256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.420919][T22256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.421091][T22256] bridge_slave_1: entered allmulticast mode [ 1266.432780][T22256] bridge_slave_1: entered promiscuous mode [ 1266.961309][T22256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.180018][T22256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.920742][T22256] team0: Port device team_slave_0 added [ 1269.082556][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1269.151779][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1269.154436][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1269.163267][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1269.166785][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1270.006559][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.143242][T22256] team0: Port device team_slave_1 added [ 1270.501581][T22256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.501599][T22256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.501627][T22256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.792103][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.338481][T13747] Bluetooth: hci2: command tx timeout [ 1271.818219][T22256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.818237][T22256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.818265][T22256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.507064][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.419505][T13747] Bluetooth: hci2: command tx timeout [ 1274.086505][T22256] hsr_slave_0: entered promiscuous mode [ 1274.087832][T22256] hsr_slave_1: entered promiscuous mode [ 1274.101041][T22256] debugfs: 'hsr0' already exists in 'hsr' [ 1274.101062][T22256] Cannot create hsr debugfs directory [ 1274.555234][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.712672][T22448] rxe_eth0 speed is unknown, defaulting to 1000 [ 1275.498432][ T5605] Bluetooth: hci2: command tx timeout [ 1275.950638][T22448] dummy0 speed is unknown, defaulting to 1000 [ 1277.444563][T13747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1277.499512][T13747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1277.504261][T13747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1277.506737][T13747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1277.507551][T13747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1277.584277][ T5605] Bluetooth: hci2: command tx timeout [ 1278.955045][T22348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.955168][T22348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.955358][T22348] bridge_slave_0: entered allmulticast mode [ 1278.981955][T22348] bridge_slave_0: entered promiscuous mode [ 1279.143342][T22348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.143463][T22348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.144003][T22348] bridge_slave_1: entered allmulticast mode [ 1279.152727][T22348] bridge_slave_1: entered promiscuous mode [ 1279.401765][T22348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.455470][T22348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.656611][T22348] team0: Port device team_slave_0 added [ 1279.683752][T22348] team0: Port device team_slave_1 added [ 1279.739181][T13747] Bluetooth: hci3: command tx timeout [ 1281.031149][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.333316][T22348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.333335][T22348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.333363][T22348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.404623][T22348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.404640][T22348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.404669][T22348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.818415][T13747] Bluetooth: hci3: command tx timeout [ 1282.955327][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.070066][T22465] rxe_eth0 speed is unknown, defaulting to 1000 [ 1283.782513][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1283.838988][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1283.841050][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1283.843086][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1283.845867][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1283.903064][T13747] Bluetooth: hci3: command tx timeout [ 1284.743214][T22465] dummy0 speed is unknown, defaulting to 1000 [ 1285.182173][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.247852][T22348] hsr_slave_0: entered promiscuous mode [ 1285.256538][T22348] hsr_slave_1: entered promiscuous mode [ 1285.257498][T22348] debugfs: 'hsr0' already exists in 'hsr' [ 1285.257516][T22348] Cannot create hsr debugfs directory [ 1285.978477][ T5605] Bluetooth: hci3: command tx timeout [ 1286.058459][ T5605] Bluetooth: hci4: command tx timeout [ 1286.933155][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.299944][T22448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.300165][T22448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.300374][T22448] bridge_slave_0: entered allmulticast mode [ 1287.305785][T22448] bridge_slave_0: entered promiscuous mode [ 1287.365210][T22448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.365332][T22448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.365508][T22448] bridge_slave_1: entered allmulticast mode [ 1287.393713][T22448] bridge_slave_1: entered promiscuous mode [ 1287.483748][T22480] rxe_eth0 speed is unknown, defaulting to 1000 [ 1287.594287][T22448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.670423][T22448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.148888][ T5605] Bluetooth: hci4: command tx timeout [ 1288.509306][T22448] team0: Port device team_slave_0 added [ 1290.004719][T22448] team0: Port device team_slave_1 added [ 1290.218834][T13747] Bluetooth: hci4: command tx timeout [ 1290.259740][T22480] dummy0 speed is unknown, defaulting to 1000 [ 1291.830799][T22448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.830817][T22448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.830844][T22448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.984090][T22448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.984108][T22448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.984137][T22448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.298391][T13747] Bluetooth: hci4: command tx timeout [ 1292.709972][T22448] hsr_slave_0: entered promiscuous mode [ 1292.711334][T22448] hsr_slave_1: entered promiscuous mode [ 1292.712254][T22448] debugfs: 'hsr0' already exists in 'hsr' [ 1292.712273][T22448] Cannot create hsr debugfs directory [ 1295.647056][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.760971][T22465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.761174][T22465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.761355][T22465] bridge_slave_0: entered allmulticast mode [ 1295.763800][T22465] bridge_slave_0: entered promiscuous mode [ 1295.890399][T22465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.890521][T22465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.890700][T22465] bridge_slave_1: entered allmulticast mode [ 1295.894233][T22465] bridge_slave_1: entered promiscuous mode [ 1296.480912][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.494170][T22465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.850461][T22465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.421951][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.647221][T22465] team0: Port device team_slave_0 added [ 1299.911581][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.971702][T22465] team0: Port device team_slave_1 added [ 1300.196906][T22465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.196925][T22465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.196959][T22465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.303441][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.303509][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.381701][T22465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.381719][T22465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.381747][T22465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.900842][T22465] hsr_slave_0: entered promiscuous mode [ 1300.905382][T22465] hsr_slave_1: entered promiscuous mode [ 1300.920953][T22465] debugfs: 'hsr0' already exists in 'hsr' [ 1300.920973][T22465] Cannot create hsr debugfs directory [ 1300.921370][T22480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.921486][T22480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.921657][T22480] bridge_slave_0: entered allmulticast mode [ 1300.971630][T22480] bridge_slave_0: entered promiscuous mode [ 1300.999209][T22480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.999330][T22480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.999505][T22480] bridge_slave_1: entered allmulticast mode [ 1301.006382][T22480] bridge_slave_1: entered promiscuous mode [ 1301.262699][T22480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.317727][T22480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.041571][T22480] team0: Port device team_slave_0 added [ 1306.071292][T22480] team0: Port device team_slave_1 added [ 1306.954614][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1307.010723][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1307.012456][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1307.013672][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1307.014866][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1307.411327][T22480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.411346][T22480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.411373][T22480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.498843][T22480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.498861][T22480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.498889][T22480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.957425][T22480] hsr_slave_0: entered promiscuous mode [ 1307.966358][T22480] hsr_slave_1: entered promiscuous mode [ 1307.974583][T22480] debugfs: 'hsr0' already exists in 'hsr' [ 1307.974603][T22480] Cannot create hsr debugfs directory [ 1308.488937][ T13] bridge_slave_1: left allmulticast mode [ 1308.488974][ T13] bridge_slave_1: left promiscuous mode [ 1308.489233][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.652814][ T13] bridge_slave_0: left allmulticast mode [ 1308.652851][ T13] bridge_slave_0: left promiscuous mode [ 1308.653098][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.948851][ T13] bridge_slave_1: left allmulticast mode [ 1308.948888][ T13] bridge_slave_1: left promiscuous mode [ 1308.949126][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.080034][ T13] bridge_slave_0: left allmulticast mode [ 1309.080069][ T13] bridge_slave_0: left promiscuous mode [ 1309.080296][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.258717][T13747] Bluetooth: hci5: command tx timeout [ 1310.238864][ T13] bridge_slave_1: left allmulticast mode [ 1310.238902][ T13] bridge_slave_1: left promiscuous mode [ 1310.239146][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.360070][ T13] bridge_slave_0: left allmulticast mode [ 1310.360107][ T13] bridge_slave_0: left promiscuous mode [ 1310.360345][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.598785][ T13] bridge_slave_1: left allmulticast mode [ 1310.598824][ T13] bridge_slave_1: left promiscuous mode [ 1310.599068][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.703171][ T13] bridge_slave_0: left allmulticast mode [ 1310.703207][ T13] bridge_slave_0: left promiscuous mode [ 1310.703437][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.898733][ T13] bridge_slave_1: left allmulticast mode [ 1310.898770][ T13] bridge_slave_1: left promiscuous mode [ 1310.899005][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.000247][ T13] bridge_slave_0: left allmulticast mode [ 1311.000285][ T13] bridge_slave_0: left promiscuous mode [ 1311.000532][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.338609][ T5605] Bluetooth: hci5: command tx timeout [ 1313.418573][ T5605] Bluetooth: hci5: command tx timeout [ 1314.199293][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1314.419424][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.479216][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.501600][ T13] bond0 (unregistering): Released all slaves [ 1315.159190][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.498499][ T5605] Bluetooth: hci5: command tx timeout [ 1316.113753][T13747] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1316.173754][T13747] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1316.189134][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.190638][T13747] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1316.192506][T13747] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1316.193681][T13747] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1316.451388][ T13] bond0 (unregistering): Released all slaves [ 1318.378524][T13747] Bluetooth: hci6: command tx timeout [ 1320.458488][T13747] Bluetooth: hci6: command tx timeout [ 1322.538435][T13747] Bluetooth: hci6: command tx timeout [ 1324.619114][T13747] Bluetooth: hci6: command tx timeout [ 1328.116028][ T5605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1328.164770][ T5605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1328.185717][ T5605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1328.186951][ T5605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1328.188134][ T5605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1330.218802][ T5605] Bluetooth: hci7: command tx timeout [ 1332.298906][ T5605] Bluetooth: hci7: command tx timeout [ 1334.378695][ T5605] Bluetooth: hci7: command tx timeout [ 1336.458722][ T5605] Bluetooth: hci7: command tx timeout [ 1337.647226][T13747] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1337.700756][T13747] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1337.704481][T13747] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1337.705675][T13747] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1337.716127][T13747] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1339.898467][ T5605] Bluetooth: hci8: command tx timeout [ 1341.978681][ T5605] Bluetooth: hci8: command tx timeout [ 1343.621240][T13747] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1343.669653][T13747] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1343.671382][T13747] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1343.706145][T13747] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1343.706950][T13747] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1344.058434][T13747] Bluetooth: hci8: command tx timeout [ 1345.738703][ T5605] Bluetooth: hci9: command tx timeout [ 1346.138386][T13747] Bluetooth: hci8: command tx timeout [ 1347.818591][T13747] Bluetooth: hci9: command tx timeout [ 1349.898445][T13747] Bluetooth: hci9: command tx timeout [ 1351.978455][T13747] Bluetooth: hci9: command tx timeout [ 1361.741978][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.742046][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.858423][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1367.166079][ T5605] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1367.204406][ T5605] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1367.213037][ T5605] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1367.229418][ T5605] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1367.230580][ T5605] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1369.258565][ T5605] Bluetooth: hci10: command tx timeout [ 1371.338464][ T5605] Bluetooth: hci10: command tx timeout [ 1373.418473][ T5605] Bluetooth: hci10: command tx timeout [ 1374.068470][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 1375.498501][T13747] Bluetooth: hci10: command tx timeout [ 1376.232368][ T5605] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1376.283551][ T5605] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1376.286329][ T5605] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1376.310958][ T5605] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1376.311890][ T5605] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1378.378609][ T5613] Bluetooth: hci11: command tx timeout [ 1379.181370][T13747] Bluetooth: hci1: command 0x0406 tx timeout [ 1380.458678][ T5605] Bluetooth: hci11: command tx timeout [ 1382.538631][ T5605] Bluetooth: hci11: command tx timeout [ 1384.618326][ T5605] Bluetooth: hci11: command tx timeout [ 1389.147543][T13747] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1389.213697][T13747] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1389.222160][T13747] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1389.224548][T13747] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1389.225290][T13747] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1391.258444][ T5605] Bluetooth: hci12: command tx timeout [ 1393.338996][ T5605] Bluetooth: hci12: command tx timeout [ 1394.542353][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 1395.418418][T13747] Bluetooth: hci12: command tx timeout [ 1397.498429][T13747] Bluetooth: hci12: command tx timeout [ 1398.603686][ T5605] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1398.680655][ T5605] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1398.687298][ T5605] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1398.697773][ T5605] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1398.699484][ T5605] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1400.858418][ T5605] Bluetooth: hci13: command tx timeout [ 1402.938491][ T5605] Bluetooth: hci13: command tx timeout [ 1404.116282][T13747] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1404.184553][T13747] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1404.202320][T13747] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1404.203834][T13747] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1404.205521][T13747] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1404.791044][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 1405.028618][ T5605] Bluetooth: hci13: command tx timeout [ 1406.378618][ T5613] Bluetooth: hci14: command tx timeout [ 1407.098390][ T5613] Bluetooth: hci13: command tx timeout [ 1408.458606][ T5605] Bluetooth: hci14: command tx timeout [ 1409.901466][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 1410.538483][T13747] Bluetooth: hci14: command tx timeout [ 1412.618431][T13747] Bluetooth: hci14: command tx timeout [ 1423.181642][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.181711][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.648134][ T5613] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1427.701120][ T5613] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1427.719547][ T5613] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1427.721013][ T5613] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1427.721786][ T5613] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1429.898424][T13747] Bluetooth: hci15: command tx timeout [ 1430.378415][T13747] Bluetooth: hci5: command 0x0406 tx timeout [ 1431.978571][ T5613] Bluetooth: hci15: command tx timeout [ 1434.058929][ T5613] Bluetooth: hci15: command tx timeout [ 1436.138609][ T5613] Bluetooth: hci15: command tx timeout [ 1437.147837][T13747] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1437.226702][T13747] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1437.235741][T13747] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1437.238932][T13747] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1437.239732][T13747] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1439.338470][T13747] Bluetooth: hci16: command tx timeout [ 1440.621440][T13747] Bluetooth: hci6: command 0x0406 tx timeout [ 1441.418334][ T5613] Bluetooth: hci16: command tx timeout [ 1443.498639][ T5613] Bluetooth: hci16: command tx timeout [ 1444.939002][ T38] INFO: task syz-executor:22256 blocked for more than 143 seconds. [ 1444.939032][ T38] Tainted: G L syzkaller #0 [ 1444.939045][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1444.939054][ T38] task:syz-executor state:D stack:22152 pid:22256 tgid:22256 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1444.939107][ T38] Call Trace: [ 1444.939115][ T38] [ 1444.939130][ T38] __schedule+0x171d/0x56f0 [ 1444.939190][ T38] ? __pfx___schedule+0x10/0x10 [ 1444.939227][ T38] rt_mutex_schedule+0x76/0xf0 [ 1444.939257][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 1444.939299][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1444.939328][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1444.939356][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1444.939410][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1444.939437][ T38] ? new_device_store+0x13c/0x6c0 [ 1444.939581][ T38] mutex_lock_nested+0x163/0x1d0 [ 1444.939606][ T38] ? new_device_store+0x13c/0x6c0 [ 1444.939635][ T38] new_device_store+0x13c/0x6c0 [ 1444.939663][ T38] ? __pfx_new_device_store+0x10/0x10 [ 1444.939688][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1444.939720][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1444.939748][ T38] ? sysfs_kf_write+0x166/0x260 [ 1444.939772][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1444.939789][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1444.939821][ T38] vfs_write+0x61e/0xbb0 [ 1444.939859][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1444.939888][ T38] ? do_sys_openat2+0x18d/0x200 [ 1444.939910][ T38] ? kmem_cache_free+0x187/0x6d0 [ 1444.939938][ T38] ? fdget+0x171/0x250 [ 1444.939971][ T38] ksys_write+0x156/0x270 [ 1444.940002][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1444.940041][ T38] do_syscall_64+0x166/0x520 [ 1444.940062][ T38] ? trace_irq_disable+0x3b/0x140 [ 1444.940085][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.940107][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1444.940131][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.940152][ T38] RIP: 0033:0x7f67714dfd8e [ 1444.940171][ T38] RSP: 002b:00007ffca84a6d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1444.940193][ T38] RAX: ffffffffffffffda RBX: 0000555571d68500 RCX: 00007f67714dfd8e [ 1444.940209][ T38] RDX: 0000000000000003 RSI: 00007ffca84a6df0 RDI: 0000000000000005 [ 1444.941975][ T38] RBP: 00007f67715b7438 R08: 0000000000000000 R09: 0000000000000000 [ 1444.941993][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1444.942007][ T38] R13: 00007ffca84a6df0 R14: 00007ffca84a7630 R15: 0000000000000003 [ 1444.942040][ T38] [ 1444.942061][ T38] INFO: task syz-executor:22448 blocked for more than 143 seconds. [ 1444.942079][ T38] Tainted: G L syzkaller #0 [ 1444.942091][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1444.942101][ T38] task:syz-executor state:D stack:22384 pid:22448 tgid:22448 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1444.942150][ T38] Call Trace: [ 1444.942157][ T38] [ 1444.942170][ T38] __schedule+0x171d/0x56f0 [ 1444.942201][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1444.942261][ T38] ? __pfx___schedule+0x10/0x10 [ 1444.942298][ T38] rt_mutex_schedule+0x76/0xf0 [ 1444.942325][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 1444.942367][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1444.942402][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1444.942430][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1444.942518][ T38] ? del_device_store+0xd6/0x370 [ 1444.942551][ T38] ? del_device_store+0xd6/0x370 [ 1444.942574][ T38] mutex_lock_nested+0x163/0x1d0 [ 1444.942599][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1444.942631][ T38] del_device_store+0xd6/0x370 [ 1444.942656][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1444.942684][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1444.942710][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1444.942739][ T38] ? sysfs_kf_write+0x166/0x260 [ 1444.942761][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1444.942779][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1444.942811][ T38] vfs_write+0x61e/0xbb0 [ 1444.942848][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1444.942878][ T38] ? do_sys_openat2+0x18d/0x200 [ 1444.942899][ T38] ? kmem_cache_free+0x187/0x6d0 [ 1444.942926][ T38] ? fdget+0x171/0x250 [ 1444.942960][ T38] ksys_write+0x156/0x270 [ 1444.942990][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1444.943028][ T38] do_syscall_64+0x166/0x520 [ 1444.943050][ T38] ? trace_irq_disable+0x3b/0x140 [ 1444.943070][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.943091][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1444.943115][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.943135][ T38] RIP: 0033:0x7f83f3dafd8e [ 1444.943153][ T38] RSP: 002b:00007ffcfd90d398 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1444.943174][ T38] RAX: ffffffffffffffda RBX: 000055556a5f0500 RCX: 00007f83f3dafd8e [ 1444.943190][ T38] RDX: 0000000000000001 RSI: 00007ffcfd90d420 RDI: 0000000000000005 [ 1444.943203][ T38] RBP: 00007f83f3e87414 R08: 0000000000000000 R09: 0000000000000000 [ 1444.943216][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.943229][ T38] R13: 00007ffcfd90d420 R14: 00007ffcfd90dc60 R15: 0000000000000003 [ 1444.943262][ T38] [ 1444.943297][ T38] [ 1444.943297][ T38] Showing all locks held in the system: [ 1444.943307][ T38] locks held by kworker/u8:1/13: 4, on CPU#1: [ 1444.943332][ T38] #0: ffff88801c290940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.943438][ T38] #1: ffffc90000127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.943492][ T38] #2: ffffffff908030a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1444.943580][ T38] #3: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8f0 [ 1444.943634][ T38] locks held by ktimers/0/16: 5, last CPU#0: [ 1444.943649][ T38] #0: ffffffff8f255b00 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1444.943701][ T38] #1: ffffffff8f3c1600 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1444.943753][ T38] #2: ffff8880b8428938 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7d/0x2e0 [ 1444.943807][ T38] #3: ffff8880b84288f8 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 1444.943859][ T38] #4: ffff88803175e4d8 (&p->tcfa_lock){+...}-{3:3}, at: __hrtimer_rearm_deferred+0x99/0x4d0 [ 1444.943925][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 1444.945426][ T38] #0: ffffffff8f3c1600 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1444.945491][ T38] locks held by kworker/u8:12/1375: 3, on CPU#1: [ 1444.945506][ T38] #0: ffff88801cf1b140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.945560][ T38] #1: ffffc90006e2fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.945615][ T38] #2: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1444.945750][ T38] locks held by kworker/1:2/4933: 3, on CPU#1: [ 1444.945765][ T38] #0: ffff88813ff3f540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.945819][ T38] #1: ffffc900111e7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.945872][ T38] #2: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1444.945967][ T38] locks held by dhcpcd/5268: 1, on CPU#1: [ 1444.945982][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1444.946033][ T38] locks held by getty/5360: 2, on CPU#1: [ 1444.946047][ T38] #0: ffff88802a41c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1444.946148][ T38] #1: ffffc900044eb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1444.946198][ T38] locks held by kworker/1:5/5725: 3, on CPU#1: [ 1444.946213][ T38] #0: ffff88813ff3f540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.946265][ T38] #1: ffffc90005d3fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.946318][ T38] #2: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x232/0x800 [ 1444.946411][ T38] locks held by kworker/u8:9/22048: 3, on CPU#1: [ 1444.946426][ T38] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.946480][ T38] #1: ffffc9000728fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.946533][ T38] #2: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1444.946637][ T38] locks held by kworker/u8:13/22067: 2, on CPU#1: [ 1444.946652][ T38] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.946705][ T38] #1: ffffc9000727fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.946760][ T38] locks held by kworker/u8:18/22069: 5, last CPU#1: [ 1444.946775][ T38] #0: ffff888034b5e940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.946828][ T38] #1: ffffc90006d9fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1444.948367][ T38] #2: ffffffff8f3c1600 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1444.948425][ T38] #3: ffff8880b853cd60 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1444.948481][ T38] #4: ffff8880b8524808 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 1444.948532][ T38] locks held by syz-executor/22256: 4, on CPU#1: [ 1444.948546][ T38] #0: ffff888036ad8528 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1444.948602][ T38] #1: ffff888064167478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1444.948654][ T38] #2: ffff88802b539f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1444.948710][ T38] #3: ffffffff90063f78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6c0 [ 1444.948763][ T38] locks held by syz-executor/22348: 7, on CPU#1: [ 1444.948778][ T38] #0: ffff888036ad8528 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1444.948834][ T38] #1: ffff8880687e5478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1444.948884][ T38] #2: ffff88802b6a1f08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1444.948939][ T38] #3: ffffffff90063f78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1444.948990][ T38] #4: ffff88806ecb7160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0 [ 1444.949081][ T38] #5: ffff88803924a310 (&devlink->lock_key#44){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1444.949179][ T38] #6: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1444.949260][ T38] locks held by syz-executor/22448: 4, on CPU#1: [ 1444.949276][ T38] #0: ffff888036ad8528 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1444.949346][ T38] #1: ffff8880622b2078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1444.949404][ T38] #2: ffff88802b6a1f08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1444.949459][ T38] #3: ffffffff90063f78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1444.949511][ T38] locks held by syz-executor/22465: 4, on CPU#1: [ 1444.949526][ T38] #0: ffff888036ad8528 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1444.949582][ T38] #1: ffff888022f52478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1444.949634][ T38] #2: ffff88802b6a1f08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1444.949689][ T38] #3: ffffffff90063f78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1444.949741][ T38] locks held by syz-executor/22480: 2, on CPU#1: [ 1444.951223][ T38] #0: ffffffff8ff2f228 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1444.951277][ T38] #1: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1444.951333][ T38] locks held by syz-executor/22595: 1, on CPU#1: [ 1444.951348][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1444.951407][ T38] locks held by syz-executor/22619: 1, on CPU#1: [ 1444.951422][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.951473][ T38] locks held by syz-executor/22627: 1, on CPU#1: [ 1444.951488][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.951538][ T38] locks held by syz-executor/22635: 1, on CPU#1: [ 1444.951553][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.951602][ T38] locks held by syz-executor/22643: 1, on CPU#1: [ 1444.951617][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.951667][ T38] locks held by syz-executor/22651: 1, on CPU#1: [ 1444.951681][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.951731][ T38] locks held by syz-executor/22660: 1, on CPU#1: [ 1444.951745][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.951795][ T38] locks held by syz-executor/22666: 1, on CPU#1: [ 1444.951810][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.951861][ T38] locks held by syz-executor/22673: 1, on CPU#1: [ 1444.951875][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.951924][ T38] locks held by syz-executor/22681: 1, on CPU#1: [ 1444.951939][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.951990][ T38] locks held by syz-executor/22690: 1, on CPU#1: [ 1444.952004][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.952055][ T38] locks held by syz-executor/22697: 1, on CPU#1: [ 1444.952070][ T38] #0: ffffffff90811d58 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1444.952122][ T38] [ 1444.952128][ T38] ============================================= [ 1444.952128][ T38] [ 1444.952139][ T38] NMI backtrace for cpu 1 [ 1444.952156][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1444.952183][ T38] Tainted: [L]=SOFTLOCKUP [ 1444.952191][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1444.952202][ T38] Call Trace: [ 1444.952211][ T38] [ 1444.952220][ T38] dump_stack_lvl+0xe8/0x150 [ 1444.952251][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1444.952281][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1444.952307][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1444.952338][ T38] sys_info+0x135/0x170 [ 1444.952362][ T38] watchdog+0x1073/0x10f0 [ 1444.952396][ T38] ? watchdog+0x209/0x10f0 [ 1444.952423][ T38] kthread+0x38b/0x470 [ 1444.952446][ T38] ? __pfx_watchdog+0x10/0x10 [ 1444.952464][ T38] ? __pfx_kthread+0x10/0x10 [ 1444.952487][ T38] ret_from_fork+0x514/0xb70 [ 1444.952515][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1444.952537][ T38] ? __switch_to+0xc78/0x1410 [ 1444.952560][ T38] ? __pfx_kthread+0x10/0x10 [ 1444.952583][ T38] ret_from_fork_asm+0x1a/0x30 [ 1444.952620][ T38] [ 1444.952629][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1444.952676][ C0] NMI backtrace for cpu 0 [ 1444.952693][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1444.952718][ C0] Tainted: [L]=SOFTLOCKUP [ 1444.952725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1444.952735][ C0] RIP: 0010:__lock_acquire+0x5bb/0x2de0 [ 1444.952764][ C0] Code: 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c5 00 00 00 49 83 ff 31 0f 83 84 00 00 00 48 8b 03 25 ff 1f 00 00 48 0f a3 05 95 a7 33 13 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 90 69 77 94 eb 32 83 3d 9c 37 [ 1444.952781][ C0] RSP: 0018:ffffc900001579b8 EFLAGS: 00000003 [ 1444.952797][ C0] RAX: 000000000000000b RBX: ffff88801de98cb0 RCX: 0000000000000004 [ 1444.952811][ C0] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 6600000000000000 [ 1444.952823][ C0] RBP: ffff88801de98cb8 R08: ffffffff81b41135 R09: 0000000000000001 [ 1444.952837][ C0] R10: dffffc0000000000 R11: fffffbfff21ab298 R12: 0000000000000003 [ 1444.952851][ C0] R13: 0000000000000000 R14: ffff88801de98000 R15: 0000000000000003 [ 1444.952864][ C0] FS: 0000000000000000(0000) GS:ffff888124716000(0000) knlGS:0000000000000000 [ 1444.952884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1444.952898][ C0] CR2: 00007f1412e1a1e0 CR3: 0000000093018000 CR4: 00000000003526f0 [ 1444.952914][ C0] Call Trace: [ 1444.952922][ C0] [ 1444.952932][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1444.952954][ C0] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1444.952980][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 1444.953000][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1444.953027][ C0] lock_acquire+0x115/0x350 [ 1444.953052][ C0] ? __hrtimer_run_queues+0x495/0xaf0 [ 1444.953078][ C0] ? rt_spin_unlock+0x165/0x200 [ 1444.953104][ C0] ? rcu_is_watching+0x16/0xb0 [ 1444.953126][ C0] _raw_spin_lock_irq+0x3d/0x50 [ 1444.953144][ C0] ? __hrtimer_run_queues+0x495/0xaf0 [ 1444.953167][ C0] __hrtimer_run_queues+0x495/0xaf0 [ 1444.953200][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 1444.953227][ C0] handle_softirqs+0x1d4/0x6c0 [ 1444.953256][ C0] run_ktimerd+0x6a/0x100 [ 1444.953272][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 1444.953293][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 1444.953315][ C0] kthread+0x38b/0x470 [ 1444.953335][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1444.953353][ C0] ? __pfx_kthread+0x10/0x10 [ 1444.953374][ C0] ret_from_fork+0x514/0xb70 [ 1444.953395][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1444.953416][ C0] ? __switch_to+0xc78/0x1410 [ 1444.953434][ C0] ? __pfx_kthread+0x10/0x10 [ 1444.953454][ C0] ret_from_fork_asm+0x1a/0x30 [ 1444.953481][ C0] [ 1444.954623][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1447.354021][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1447.365230][ T38] Tainted: [L]=SOFTLOCKUP [ 1447.369552][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1447.379611][ T38] Call Trace: [ 1447.382894][ T38] [ 1447.385827][ T38] vpanic+0x26f/0x710 [ 1447.389821][ T38] panic+0xc5/0xd0 [ 1447.393542][ T38] ? __pfx_panic+0x10/0x10 [ 1447.397955][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1447.403446][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1447.408830][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1447.414997][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1447.421170][ T38] watchdog+0x10e7/0x10f0 [ 1447.425516][ T38] ? watchdog+0x209/0x10f0 [ 1447.429938][ T38] kthread+0x38b/0x470 [ 1447.434013][ T38] ? __pfx_watchdog+0x10/0x10 [ 1447.438687][ T38] ? __pfx_kthread+0x10/0x10 [ 1447.443280][ T38] ret_from_fork+0x514/0xb70 [ 1447.447878][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1447.452992][ T38] ? __switch_to+0xc78/0x1410 [ 1447.457674][ T38] ? __pfx_kthread+0x10/0x10 [ 1447.462272][ T38] ret_from_fork_asm+0x1a/0x30 [ 1447.467053][ T38] [ 1447.470310][ T38] Kernel Offset: disabled [ 1447.474623][ T38] Rebooting in 86400 seconds..