last executing test programs: 1m45.232154641s ago: executing program 2 (id=154): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x3}, {0xe, 0x6}, 0x2, 0x6, 0x2b}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x2, {{0xa, 0x4e21, 0x1, @local, 0x9}}}, 0x88) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ifreq(r2, 0x8911, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_map={0x3, 0x1, 0x2, 0x2, 0x3, 0x4}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r4 = syz_open_procfs(0x0, 0x0) connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @multicast1}, 0x2, 0x3}}, 0x26) fchdir(r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = fcntl$dupfd(r3, 0x0, r3) unshare(0x2c020400) r6 = io_uring_setup(0x5ae4, &(0x7f0000005840)) r7 = epoll_create1(0x0) r8 = dup3(r7, r6, 0x0) epoll_pwait2(r8, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0xfffffffffffffc8a) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000002000000f000000001"], 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2505"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x1, 0x1, 0x94, 0xef9, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x65, 0x0, 0x4, 0x0, 0x0, @remote, @remote, {[@noop]}}}}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r9, @ANYRESDEC=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1m42.271256204s ago: executing program 2 (id=157): close(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getpid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000500)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_connect(0x6, 0xce2, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0xc1, 0xb3, 0xad, 0x10, 0x1b3d, 0x16d, 0x2f1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd0, 0x3, 0x3, 0x4, 0x40, 0x8, [{{0x9, 0x4, 0xec, 0xfb, 0x10, 0x5a, 0x4d, 0x6e, 0x8, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "f0a4cc"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x6, 0x9, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x118}, @mdlm={0x15, 0x24, 0x12, 0xfff9}, @dmm={0x7, 0x24, 0x14, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x1000}]}], [{{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x2, 0x4, 0x5}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x8, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}, @generic={0xeb, 0x6, "5669a80f35d2d24b94e3dd3a66f5786e313aafbb2beed6f32bf189790a08afdc25cfab375ca3a01e439c08a5e1740315d1936c1fc2fb94e75904c46200e6537b88a924442b3ac979c0f14e8686ed60e50f7c0a7551eb108380fba6c8ff23e690838857a629bc5045ff4a951eb5d835bfe08266a38219d3187beee85d02d14acbc3f28f66bfe231a754fa8065630404533081118e9ae226609a4d5abb168d43f25877568a077319cfbbf5ade9baa8565c62a712c570e0fadaa65c8e166634870c97771a5bdcf4b46424359348357f36f89e99b1cad914f6192c1fccfc7567b60414b79dc590de42e697"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x4c, 0x5, 0x8, [@generic={0x97, 0xe, "b4c16245a1e75fa82e5f5730e0c618ddfc45d007219240b02b4485e03a680d4dcaf6a9bef9123f8773a119b93c39515d58fbbe3b19ba79e14372356f96e444775ea7f44ec22206157028a53b0cb776df50ba77d0a7436825fe1c62dc0d737ffb4407d0b52c8c418c5fab25936b5e74aaac40688e293b0749da8739cee8cc568242cc6c1d38593b01e8217bbbfb6459708bc3c21508"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x9, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0xd1b}, @generic={0x4b, 0x3, "ad8bba8a89d5121fac803dfe889903b8b036cab4444db4189f17d7cc7841218cc264099916587bc31c35ca1a575fe35065a27de5010a9e52ccf448e1516e961d8854393894450defa4"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x9, 0x0, 0x8, [@generic={0xc1, 0xe, "9d952b6ac833e4c1a43069a0e506fe9e25e57ecec750038494f551a95305dfa1022fe4118b6a32fc961a5c51efa6dbe715225b2113b20711d02d5fd0fcb4ca75df628a7c3fac885024d0efa2df4c9ccece20d10bebf0b1497322b5c2da700142e8c53f7f08cd3867f45a7464d41b76a3d184427439c8abc537cac441862eabb34a7b02b5ffa9581bd066e9e1823d7611236a09dbae7f41256ae2f36aa7f27127f6d232d4d3bf1a546daf36ac6c073b548bcc8b5b2f07c1d1285e1c6f0e4c00"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x0, 0x4, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xb9, 0x4, "57e2cdaa5ea050f6fa8c9c26233fcae80aa51671ae53dc94bc97bf5b87345672c9d45548cd666c15bbdab5a77f8b575ffd9940300df1eae33c23b00084e6a5bae02c2ae1928bc53d4645a1d6d0e043f563ed52cbd2ab1a5157a100e9b5f003c63cba853a7bc642c9051361d84ee38112457f79ff3ab2d34f8892dd68157db9b8c716faf7d9757cd0195991c7b128e922cdc84944eef53806c42a6f66199a0a28f527431d8dd294221940711b51254267a6add547ccb89a"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x6, 0xb, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xc5d}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4, 0x7, 0x3, [@generic={0x7f, 0x10, "f061dcc5f51a229469468530f02cc8cd06b0878373d3ec05a1aa436a422a64ac6875b2c3f6a36daf40d15927f6e6f619c68e8e99f1a783b81e3c6b7333a5f967d6ed0866911446c903be46c9a032e6e348b77fe99cd8a16429d50b962c6b4837a2983e0c7eeedcfc4cffc56565942623318e796cb27166efa6def66412"}, @generic={0x2b, 0x2c, "162fa586e7a5d69cc1e667c3cf50bcbfbab65cc8d1b3855e49f0b6c50d91ba0515ac20e5a9c00ac1d8"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x1, 0xd9}}, {{0x9, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8e, 0xb}, @generic={0x29, 0x7, "e6779507e66ec1632c2bd15cb37c94108f2a3b39e58244de65417e4aa5f2a03df6df5088eb325e"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x2, 0xa, 0x1}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x7, 0xeb, 0x3, [@generic={0xf, 0x31, "a2fad1baaea767501c07657ddc"}, @generic={0x88, 0x24, "b5e9a8fc7873946ea0393239e2b2b1d278cc65b450f497ba04a05e9db2bcdd40394c20d6184b7d0df0bad653269335a4bb45977e308412397fb3e8ffe81b1dd85c260a7563a6dd79ecf3a8c7834d8a169332b5df5caf3e6dc116f5ae3c8670979c410b82e1cb6726c6cea777eb9d530b1cff97a6dc70182d37fb64afd189c796c96240a220f2"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0xff, 0xc9, 0x53, [@generic={0xa6, 0x6, "5d8a904b5022934e78a23d6853d18890656c53769674ab6720dad35771a83fb60387020634f4933ddacff442212266ae9b401e92afb41e3a1b5071e53302cc5cdd3459557d407aaa8fcaaa84456880fb80018f4703fd7f446aa2ce465dabf1ca1e205cdba271db6b5ca99fc34d297cb491bf9606e736d7df71848afa765421071645e24d41618320a62fc75541038f82a480abfd1256a743c8f8209a704f0ac3b6528a1c"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x4, 0x0, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x80827500ffd0013b, 0x7, 0xfc00}, @generic={0x73, 0x28, "597e2584746448b91f117e833d9a5159be64353761d4899b8654a1d05c9feb15c80852b48301cfacda28a3f438ce2c92093999cd4b66719a47dddd29e6f61e0e2e8527e7bdaa36d4ecbe1146f527536335d78fa4e97dc9fc7aab9c33206df27f192a2f51adbdeaee04bc5f2ed726b14c71"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x7f, 0xa, 0x9}}, {{0x9, 0x5, 0xd, 0x2, 0x0, 0x0, 0xdd, 0x39}}]}}, {{0x9, 0x4, 0x1c, 0xc0, 0x3, 0xff, 0x0, 0xff, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x6}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0x2, 0x1, "1a399529"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xf, 0x80}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x5, 0x1, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x2, 0x1, [0xa], 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x3, 0x4, [0x5, 0x6, 0x7, 0x5], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x2, 0x6, 0x3}]}], [{{0x9, 0x5, 0x7, 0x8, 0x200, 0x2, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x2, 0x9}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x2, 0x41, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x8, 0xc3}}]}}, {{0x9, 0x4, 0x32, 0x10, 0xf, 0xff, 0x1, 0x7, 0x7f, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x7, 0x1, 0x69}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0xb, 0x6, [@generic={0xfb, 0x30, "e1e52495473708f55001e5b12d506a0a0ada0ed4e1a1d0bfd5c082823a82d4850e7e91a712408c14007f3b16831733fd153a2e50693718b01dc1049fcc0dc85b13ffdead4d49fef63cd3025d78213df12b1125daf37c9a3a808c09486375de43c92a31340d0ff91e31004cf9f4497112d62907e398946aadef29eabe4802dc8f3d42f5469ad3d762d1ae58c442166a48c96e83dd257a101b1f17eec9efffdbe4b8a0b3e2c7fc09f8ecc54b73ae2b10194ec839e52cb036095783f15befd43dc128b2ffe05f3bcaf75e0f25f9e14880b48f68f07417385410a2f02ddd42a77126602e70f2f730dd27857d2cde094a09df3d0494f8be94211c7c"}, @generic={0x1e, 0x6, "5e84a626a0a431e7132df7261e21a5cb5181fe792bb6755896b0de72"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x40, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8a, 0x1000}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x6, 0xfb, 0x4, [@generic={0x9d, 0xb, "4ec54210b2f9e18cf96cd3b6254fbc0564563be75a6d99fbbaaf7b137bfe0804234ec7ab665f991a7c76fb8be191c9586bcbc269be60ee6c9639a551590c25d958e230d2213afac0427a82a066c9d22993d8ba93bb6ba8edc1a5752d061f02958fe19da7d4d53c81821cdeb577cd5cf2688089d107b6770544430282a1c4ac3315b6080743c59479ddbf78973d527e3f4fe5d8700ad392794dc7a7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x6, 0x9, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x28, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x1, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}, @generic={0x32, 0xe, "a1eaf786f05f834bcf4cddc5e4e0af208af82636249bc09fafd0abf1a67edf2476fb774795b681b1c13d7eaad92eebec"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x4, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x9, 0xab7}, @generic={0x4e, 0x23, "c0dbf3382ef743e3e2dd8fa49224db02e88b46480946afedae75a78ee13f13b6b3b144b8da7c389a97b2793b9fceb31f89a249923780cf398e1bbff8312a15d7c25fd2bdc6af96fac759ef95"}]}}, {{0x9, 0x5, 0x6, 0x16, 0x200, 0x0, 0x35, 0x1, [@generic={0x6e, 0x4, "ba9d63edc67c4154a3d5726ffd44e32345cc3b988a6ab2ebe9382dc4d9db80b2ff889a786b208010c6544de6538a035d4ffc603acb918200dd35d26396a66f6b8a0788cf809ecaefa4e98e8432efa4209fb8180bcde7dcdc6c324cee17edeef5c39db05d6723af82e73f4484"}, @generic={0x27, 0x21, "74d457fd074d494900926fef1a62ccccd63756ab806f300d543044ae488972d3499cef07b6"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x3, 0xd9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x60, 0xe0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfffc}, @generic={0xd9, 0x30, "4426b7eb157e872693d1d4e1935f8b208359bfbd3fcae634b46f0ead502137c18025c9ef3858f5dc2a7455c483e1f431f2baa58ac951357a7993fec4f6ce6bef99aa609c358feb9032921a0ee9ccc3e755148ea0c125c97ba8420c11c5997a6d30a308ddf03df97de61dd0955f50243e72e50aa042409b0b084aacfbad5222c704e68e06f1812df362a0bf35c9d38e61edc1b60b34e026d539c1ebacf7926fe7e62d1f558b68e94467b7a89f42e294c95e494ccc87db1bf51604da186e0b4f5813ea9fbbf98072930f44ac14154e191f2a27424a6fa838"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x9, 0x5, 0xac, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}]}}, {{0x9, 0x5, 0xf, 0x13, 0x40, 0x5, 0x31, 0x2, [@generic={0xfe, 0x2, "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"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0xb, 0x10, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xe, 0x1, 0xc, 0x10, 0x10}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x41, &(0x7f0000000200)=@string={0x41, 0x3, "b3ab33aa4b015774563f4d6cc051423571eb4fc088a2c31dff1efd57ad46326ee7e983e5b67f67f46f0c6597356d85258eaa6faa2d2361982c575f54916abd"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x877}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x5d, &(0x7f0000000300)=@string={0x5d, 0x3, "6ab70f8563a316211a006ae7a23120d6bf3804287e05d952e3d1ada2e4b8a46139cc3c396ff3ed0bc8430acce7b0557e88d050481dc81518b4ee987814476db725d7c2f936b2077fed8df30040dfbb1a8885b370eb8227dfd28935"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44a}}]}) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x20000}], 0x0, 0x0, 0x0}) 1m39.764639501s ago: executing program 2 (id=160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "14"}]}], {0x14}}, 0x6c}}, 0x0) 1m33.973413432s ago: executing program 2 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x4a, &(0x7f0000000040)=0xf1, 0x4) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @remote, @null}, &(0x7f00000000c0)=0x1c, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000100)=@null) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000e9ff06"], 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) 1m33.799346299s ago: executing program 2 (id=168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r4 = io_uring_setup(0x37af, &(0x7f00000003c0)={0x0, 0x4b675, 0x4, 0x3, 0x226}) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000300)={0x0}, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x8000000000000000) kexec_load(0x3e00, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x2}], 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 1m32.141245827s ago: executing program 2 (id=171): r0 = socket$igmp(0x2, 0x3, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000003, 0x10000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1m27.075036522s ago: executing program 4 (id=184): setreuid(0xffffffffffffffff, 0xee01) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x500000000000000) 1m26.718962729s ago: executing program 4 (id=187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800, 0x10001, 0x123}, &(0x7f0000000700)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001bc0)=[{0x0}, {0x0, 0x55}], 0x2}}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000580), 0x5a1000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x17, 0x1b, &(0x7f0000000800)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7056701fa82ee2cafa757fe3d00000800000085000000a5"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000940)=""/254, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl=0x12, r4, 0x8, &(0x7f0000000ac0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x7, 0x3b99, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000f40)=[r4, r6, r4, r4], &(0x7f0000000f80)=[{0x4, 0x1, 0x2, 0xa}, {0x3, 0x1, 0xf, 0x5}, {0x5, 0x4, 0x0, 0x3}], 0x10, 0x8}, 0x94) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf2509000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000900010000000e0001006e657464657673692d0000000f0002006e657464657673696d30000008000300030000000800090006000000"], 0x70}, 0x1, 0x0, 0x0, 0x4004841}, 0x10040000) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4000810}, 0x4001) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001400)="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", 0x7d0}], 0x1}}], 0x1, 0x11) r8 = epoll_create1(0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$IMADDTIMER(r12, 0x80044940, &(0x7f0000000300)=0x32) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000080)={r13, 0x0, 0x4c, 0xfffc, 0x640, 0xc, 0x3, 0x0, {r13, @in6={{0xa, 0x4e23, 0x8, @loopback, 0x9}}, 0x8, 0x0, 0xfffffff9, 0x9a3, 0x10001}}, &(0x7f0000000140)=0xb0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendto$packet(r10, &(0x7f0000000480)="e25a216bcc68042902c83a0e7a63af7e0925f8b1c1255a9762179dccbf4caefb54a86106b4f8a1a19eec3b173930e82610e1c18d82cbfdd80df28288a0a30e8adb8c7f624bccbcc8156caaba2ea54e918476f0179eb18c83ba6e679fb2a0655fc9306e39d779134920493017037dda11c579e83814dfaaa6196e60a68b97275282ef752d1de6b186487a2459cec97e80b123a2c33cc78643421e16166c42948d11019f01d2932fc2f5f33e9e0f640b22ff10a242e4254abd1fe601da5e7a29f253719d1329f846b561c5a56ab071affc6f", 0xd1, 0x20040000, &(0x7f0000000240)={0x11, 0x16, r14, 0x1, 0x5, 0x6, @local}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000380)={r13, @in6={{0xa, 0x4e24, 0x8001, @rand_addr=' \x01\x00', 0xffff}}, [0x3, 0x7ff, 0x6, 0x1, 0x2, 0xd6f4, 0x1ff, 0x9, 0x2, 0x81, 0x2, 0x5, 0x0, 0x2, 0xc01]}, &(0x7f0000000000)=0x100) dup(r8) 1m25.687328002s ago: executing program 4 (id=191): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 1m25.018637889s ago: executing program 4 (id=195): mknodat(0xffffffffffffff9c, 0x0, 0x1, 0xfffffffb) (async, rerun: 64) r0 = socket(0x10, 0x3, 0x0) (rerun: 64) write(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {0x0}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) (async, rerun: 32) execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) (async, rerun: 32) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, 0x0, 0x0) (async) iopl(0x3) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x30, 0x5f, 0x56, 0xfffff000}, {0x6, 0xff, 0x8, 0x3}]}, 0x10) (async) rt_sigaction(0x4000000f, &(0x7f0000000180)={&(0x7f00000003c0)="10d1c441ef196ec866400fe2de0fae4e0afaf2469c6f6f0fc01ec4b322e10399c565d38f0100000020df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) 1m19.034991527s ago: executing program 4 (id=205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ab0000020000000004000000010000002b87798b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) unshare(0x2c020400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x208201, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x20000000, 0x0, 0x7ff}) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r5, 0x402, 0x5) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x20004050) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000d0429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000019500000240012800c0001006d6163766c616e00140002800800030000c4"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r9, 0x4018f514, &(0x7f0000000300)={0x3, 0x9c34, 0x3}) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, 0x0, &(0x7f0000000380)={0x5, 0x1da4f1dc, 0x6, 0x8000000000000000, 0x2, 0x10001, 0xfffffffffffffffe, 0x8000000000000000, 0x40005}) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000100)) 1m15.4885033s ago: executing program 32 (id=171): r0 = socket$igmp(0x2, 0x3, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000003, 0x10000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1m15.430299218s ago: executing program 4 (id=208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x8, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x6}, {0xd000, 0xf000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x6}, {0x1, 0xffff1000, 0xc, 0x1, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x90}, {0x2, 0x100000, 0x0, 0x6, 0xf}, {0x8000000, 0xeeee8000, 0xa, 0x0, 0x2, 0x0, 0x9, 0x7, 0x3a, 0x2, 0xff}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfa, 0x0, 0x0, 0x5}, {0x0, 0x400}, {0xdddd0000}, 0xddf8fffb, 0x0, 0xeeee0000, 0x100, 0x8, 0x8000, 0xffff1000, [0x0, 0x10000000000, 0x2]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x1, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0xfffffffb, 0x60faefe1, 0x9, 0x9}]}, 0x30}, 0x1, 0x7}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xf3a, 0x0) tee(r6, r9, 0xf3a, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@none, 0x6, 0x6, 0xc0, '\x00', 0x1000, 0xc}, {@any, 0x7, 0x5, 0x76, '?Zg', 0x2, 0x1}]}}}, 0x22) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r12, 0x4058534c, &(0x7f0000000080)={0xd, 0x7, 0x8, 0x0, 0x7, 0xb}) 59.473464848s ago: executing program 33 (id=208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x8, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x6}, {0xd000, 0xf000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x6}, {0x1, 0xffff1000, 0xc, 0x1, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x90}, {0x2, 0x100000, 0x0, 0x6, 0xf}, {0x8000000, 0xeeee8000, 0xa, 0x0, 0x2, 0x0, 0x9, 0x7, 0x3a, 0x2, 0xff}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfa, 0x0, 0x0, 0x5}, {0x0, 0x400}, {0xdddd0000}, 0xddf8fffb, 0x0, 0xeeee0000, 0x100, 0x8, 0x8000, 0xffff1000, [0x0, 0x10000000000, 0x2]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x1, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0xfffffffb, 0x60faefe1, 0x9, 0x9}]}, 0x30}, 0x1, 0x7}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xf3a, 0x0) tee(r6, r9, 0xf3a, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@none, 0x6, 0x6, 0xc0, '\x00', 0x1000, 0xc}, {@any, 0x7, 0x5, 0x76, '?Zg', 0x2, 0x1}]}}}, 0x22) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r12, 0x4058534c, &(0x7f0000000080)={0xd, 0x7, 0x8, 0x0, 0x7, 0xb}) 45.375297231s ago: executing program 1 (id=252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ab0000020000000004000000010000002b87798b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) unshare(0x2c020400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x208201, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x20000000, 0x0, 0x7ff}) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r5, 0x402, 0x5) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x20004050) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000d0429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000019500000240012800c0001006d6163766c616e00140002800800030000c4"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000100)) 42.579792331s ago: executing program 1 (id=255): r0 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x404, 0x0, 0x0, 0x0, @ib={0x1b, 0x7fff, 0x2, {"08bed31c15e563858e657d168d8bd21b"}, 0x101, 0x7fffffffffffffff, 0x8000}, @in6={0xa, 0x4e24, 0x601, @private1, 0x8}}}, 0x118) socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xc39a5000) prlimit64(r0, 0x3, 0x0, &(0x7f0000000340)) 38.831784144s ago: executing program 1 (id=260): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 37.3237885s ago: executing program 3 (id=261): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x100000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x40, &(0x7f0000000100)={0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) r5 = socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x2, 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0xa) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) syz_open_dev$tty1(0xc, 0x4, 0x1) 37.29822019s ago: executing program 1 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 36.128900403s ago: executing program 3 (id=264): r0 = memfd_create(&(0x7f0000000340)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x9e\x99\x17*\x8fe\x89`[mX\xa8p\x0eY\xe1\xe0)\xc0\x16\xc3v\xd5\xbe\x14\xf9\x1aA\v\xb6]\xec\xe5F%y\xf0\x1b\x06\xf3|\xe8\xe4\x984B\xb9\xedj\x17\xc2\xc2\x19Nd\"\x86\xe6?~Ye\x90in+\x8f\xd3\x06\xb2In\x1f\xb4\x8e\xe3\xb9-\xc8@\xb4\x84\xe3\\\xf5V %) <\t\xfd\x11\xe4\xae\x8e\xdd~\x88\xb0&\x9f\xee\x9a\x01\xba\x00\x8bx\xdeh\xc8p\x00\x00\x00\x00\x00\x00\x00w\xacR\xff)\xb8/\xd23\xd73\x1e\xe9\xa8\x9d\xdc\xfa\x0e\x95q\xf4\x80\x12`\xdc\x02\x009U\xfd>k\xfc`\xbbx;1\xab\x86\x9e\x99\xf92\xb5', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x100010, r0, 0x83e16000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_get$pid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = semget$private(0x0, 0x207, 0x0) getpriority(0x1, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) semctl$GETALL(r1, 0x0, 0xd, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) writev(r6, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x1) 35.878266636s ago: executing program 1 (id=265): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x40040, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x100000000, 0x3}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x24004880) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000019c0)={0x2000200e}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d000000006424818327b2369deca65eb2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(0x0, 0x1, 0x500) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="286c05405899005332653d", @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="0c007d80050000cfa287c80575d8"], 0x28}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) epoll_pwait2(r4, &(0x7f0000000580)=[{}], 0x1, 0x0, 0x0, 0x0) 32.237922307s ago: executing program 3 (id=268): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)=ANY=[@ANYBLOB="0372616e7a3d66642c726664646f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) syz_usb_connect(0x2, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c02100005000107"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="04000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x4, 0xff, 0x7, 0x1000, r2, 0xffffffff, '\x00', r4, r2, 0x0, 0x3, 0x3, 0x3d9}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) socket$packet(0x11, 0x0, 0x300) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sched_setscheduler(r7, 0x6, &(0x7f0000000000)=0x401) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xf9}}, './file0\x00'}) 30.442396089s ago: executing program 0 (id=269): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x18, 0x76, 0x1, 0x0, 0x25dfdbfb, {0x3}}, 0x18}}, 0x0) 30.146350821s ago: executing program 1 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000004c0)={0x38, r1, 0x201, 0x8000000, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1396af3151918b0f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x24000840) 30.138367737s ago: executing program 0 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x38}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004841}, 0x1004155a) 27.387343178s ago: executing program 0 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000018000000", @ANYBLOB='\x00'/10, @ANYBLOB='\x00\x00\x00'], 0x48) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x5}) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000040)={0xffffffffffffff85, 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r5 = syz_open_pts(r4, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$uinput_user_dev(r6, 0x0, 0x0) r7 = dup(r5) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x19) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0xd}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x0, @win={{0x24000, 0x1, 0x401, 0x40}, 0x3, 0x8, &(0x7f00000000c0)={{0x4, 0x42a, 0xfffffff1, 0x3}, &(0x7f0000000040)={{0x7fff, 0x2, 0x3, 0x1000}, &(0x7f0000000000)={{0x1, 0x0, 0xea3}}}}, 0x6, 0x0, 0x8c}}) 25.487709696s ago: executing program 0 (id=273): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}}}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x8, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r3, 0x110, 0x6, 0x0, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000009000), 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xc39a5000) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000340)) 23.184730717s ago: executing program 0 (id=274): r0 = gettid() r1 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}}}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x8, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000009000), 0x4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xc39a5000) prlimit64(r0, 0x3, 0x0, &(0x7f0000000340)) 22.195614877s ago: executing program 3 (id=275): r0 = gettid() r1 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}}}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x8, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000009000), 0x4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xc39a5000) prlimit64(r0, 0x3, 0x0, &(0x7f0000000340)) 19.708386653s ago: executing program 0 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="75f5ee", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYRES32=r1]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x768, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="9bbd22b09fbd2fb35c4f7fd619bd3f7c64ac7b8ebe80ae3d5dcd944f2b79b2842d41aae592aa845deef381a80aa7000f8ec7ad6835a2b2bd7ed495fe7708123c7ca939e44487767828a5540224c52f7759c76928a175cde8c466344c4e61cb1357369d39eeec5c10cc9ed903b5bf5e851caa15dc6cfbaf077b10bc33c50dfcdd1568e5dd22687fa5d27245c36f46720886a604aa7bcee412c6f4c81c00494b5edb406b12962be767a244f1111281ac50796ce046e8817563d60f095fd6b33e9f5214180cd24101b202df4a4e62cea9ef6a9592eabca774407b89cd6c9caf17d68c847a7782be6c9d327267cc1e16b22f1a4f6c695dfa15a7e996f51070c66dd9cb7ac18432239b8dc180a80c13af3b912c12a38e581584906aa2bcad8f8280e0ee33a77b5c62e13fe5914b67f181b0814cef360fbcfb5359a4f8864640d0aa1daf6c1c3fb42ad066d3b4e875caf74d7305cda51c9f7b1a8daf737cf88815b148363445e1f008000000b4b402a8eed7ad3d2e1f304f3b4658bf6aa1d0ab381de53bad621f9c9bd0e173845ae01d70ab29ba41130e64b872da5bd8f3d5451d3ac83219ede2870aca306595b25794d1bbe211822f35ef5fe723dcb4c6d93eaafc6ab33cfca9a706e297fb74a384548499a80ec36d2e84ec14bd8aefad4fa4e907c464331c93d196be202117d5a5a32df60b632650153aa698577e61dbf40c1f5e6547eafaaef0884826af5451f2b36bfa5f4bf19694bd78c9c788a6cc534ee2860ec20bc107b38c3a779ceb468e0a1260d22950ffab2ec9e2a5a255b62fa3373ccfe6ea4e08bfbfcffb9a83e3d2d2b43604362778f7c13f25e3771168af6383930b95b66c624b52d8690d868d3a38057a5ec3c5f2c58f2df49c3459e02db42c1c195723c0c9b5ad2a3ada677548d0bac7e492a3e304d1591aa57671fb62f35aec55639f869a84dce1172e5dfdb905bc7601325abb63b070ce3164b1e41422a728f17f4a711c92ff2b86fddf698637c4c6a68090a8f858af81f3542f3ab180329a018debe6d6ae2abe87024e5ef4c2ad70aec80fafea78e45db2e83e171ef10108377675bd7cfca148dc488f735da15d99cb458ed38823535f572f0f2b053053bd0e7758c3d7956f7ba812d6099bfc3d4c1ca1adc8687bf308c4450987f6a5e19ee44da0d2be18ccfb540c6e73cce2d2518c3b5047491e67a965f0aaf3aa40ac80b1c5ba599b934f00a58c832417ebf5b0a6ae240e82e7dcbd7a26ba1510ba18f3ae053f2154a6ce1285e89c4a61de3678ad098e327dc50907ce3360adb5197bd87651aee3982fa2bfee595fe7c65a41cef22308bb25169f69918aab5686cfb604ad36773babfa7f10d8e519b38c03fa5566209f7bc157d957eaf19eb015be54a90254e2af44942990f577000057212c5c5443a1f94a8f2004195ff623a411fc75a3c8b6f236f44215c2479b95abf0ace41ab9a6abaddbe4c524910e69b2079dc84d0742377b8106eb5accd294808acafbccd1e58748c3aa2c0598bf26ad850402b150bd409aff39142adb1aaf2a239cec020b9db50c64b0237ab6e8637fec4038997635fe37d1668d59ba429da7153a0bcca25b4f17145c17894c58d773fa710472b16f2bc10f22535a656d4920221beb1cfe05ea501e8973b5da9fcbed991a055f975896f23d9404a2521733806a507f0f9ec9a6a4d7558536ffc20e4b4aee4c64a8906b0678ee08771717e58e8b4914c873283dcbd9ee1c4531c54768b91f13ac89e068306f8213325267e780d085393ca537e7809eaece0766731103b20e82bff4c93b7d26703733775daf296088fea8fd8319a2a7c3737a732cafb852189d64642bc23dac076bc204fa94a077ce4448ddb03b902a03f93f89068415b224cb88b7b8bb357282312f53f6b4e85af6b3cac0ffa8b97e5cecfd68f239a02c2cd46378c81ab2aead8d6c0a294504dd850c7e274ab1228b31bebc69e547cefad34883256633e4868f05295f55f3d4b1478ea51f7ad8a6b417e69963ed63ef01c1ff38bcd1c4021c1ade7f244e6cadc0eba641b0dea1b459e6f9f44d46c1732cea0144caf86439f4d7fb12ba24d2fa40fa94fb88b61252e336692f322c27a0a77ef81a08947de399ec7304e27b27259e32cd1d3abb5d2e3a76514792001d00fba8fc8beb88cf17235d9c28664e3a6c458000a5c7afef521c9001c2dfcde37edf6536341f392f1321b79b599327b8b2b2a77ebd03e0ec1a1604f25d61b41053f520d1982a8cf5cfb9bbf870ee995ea5420e790e2ab0034b55779b9125779bc5e5d0997b80b3369cfc931e3498fd9e294c10468e0a2375f69774d21e7b73dc4da2a5d314c05ec53228768b8a8ffd65d198f5a01a69acaff78fb3949de9860279d8b3f8de626014d7e0c941c2b31218878ceec30ad572de29b34095946788cd58eef8841d76af16731be640b437eaedd7ad38b7a4a0190f79950b60476a9197d56b456d466bb37822753790ce9d7b4c4abb929bf71ff2e49c6d0ca24ea4ae69c140a4926475d1ae9ac23e19a35ec68087507ab89b54912da66ca9949ceb7599845b91e4a93533b66841250818d9c45c6ec8f42ea95d5c0408023dfdcc1fdb9072d1c654089e6b115b9c2a3644c44834e0d92f5d77d0120d937e87c25fe4009d10b3c4cd6dd8662e29bb8cab13eed5a0fc4ee37896fe9a55dd60700d926047b6f041ea74abb9cc6022fd0236d6190f14531ce6edb0c4fbeef03621b61591131318f5637e57d325e12279c0e2e8949d6f5d6f8c7eb9dd0a199333cdc6a9b5edb245b360513cd3f0258dd641ad9fbead8cabdefb76ab6727d1a2a4d9a3a9997eb9e8abf6bcdc0ad4fd96089a35c09c5e65491cfaea8dc0435a2c395cd0f4bc016b4d0bbaca58c8e3f501b64b8cc69c105c29ace6e5424316850781bc3366e92039ad7252bf8293b9ca227e67bb4ec0c56fda7fef8d6c604886999eaa553a44016503edc00e363ddb409ef57642df4847012ea49ee38fc3fc9a4bd2ed71c944e1483089d6ba48009f2931f10000000000000002b469951cc8b84bbabc4f8ae1d1538061841898d02eae7795fbc9a1b919fa6898c0a8788ca5e77727ef60978b29630a74ed7f183dbacba8ab2f92a4af09b955266f72a908d6703699155108602f63542e0807fe6c13a7152652015ea75316ff56faee5b5f49e6bc01a85f28139afa2e50b10f370a2d5afa19306433a7ff5051de4b112588b9cb8c499c381e469fd83efc15d84dedd41a3bf57b1e8406d588f73ccfc5a0caa70ca9424be0f44f6a694b2230045cf15a8aa0eec1706a51d7f8e7e629f65f9ba232602edfae26df589adb1fec36f81fd86afbd02f79f3b5914c209588b82d292277adaa97c4e68eb20841d33603596072975c8aec91d090c56898aa41710fda2d4696da86b79b9f47a2c875755e9fc9d230f971c2d5284f3e401c748f2e75f5d537b0b593c8e97c498bcb2fedc846e49d0183a15e3424dfc0093c39d1644f2b4b4e49306e8e77a44d006c19f4dc4b0f36ff2bc3452840dd012bb238a79f0699c2f1078634e462a65d4458e9cba6a728bf6be3bf377f793828ee16153e62d432f91d911ccf45f546ba1746b55ca3e44a69dc444d2c85ccbcb5fd47ca7acfb55707674e08bc24d471b91a3c578d0b9890f034e3eaefeb9ea1db15474698dc6b84c3fc2e7a916b0ae90abfa3dea205013398393afa639f4b8545a1b7d50979f73b7a05a457a02335f420df57db60e081111f242df9375e61f7eadcb427b9794770e6791919bd527af1c972dbeb6ac304c9a450c4fd95d478610e2121b802e1bee84f6ccea3c7fc1a2ab4412ddd82c66b5036732c27f77311307d78306a137d8c437ee9d4711328780528f09313f41a64ee547c3f64e0973c9511309121838af913c782bae812cf0a1131818d3650406f34473986034fd69e7ba0c6dd199243324d103693d31fcf0ba29b3262049456a08efea1c8c0ae73f5e5ff0f3eb52805abbabba0755a9e34e5fc1f0a2c4fd1793cc9ff1d8ea10a1acc2788b9703746e96be176ac358c4a18fe399c0a65f955cfe799dfbd155edec413093a5c9defefc88dbbff2582d73282e6eb5d839eccad5667cb56b5fa1f76252a0b7d181b27a000ab281ec86678d92badcb6035fee52c166aa1fa8767db8928a451e9b15804e1c95ea7fb047ea3acbbb4d0fcea400eeefa0196524b3cfe1dbab2ab76d5d7b595b0ef8ec7e31ec4ebde01c438bf4c676e6cddfedadb73c002e3b83d6ec09bd48404f49235ea56c51b7b378338d9a5067f2353cc43c1f37dbd3b1f48514df51d64c536456cf8ee1acc3953e8076cf6cae2d827cf4f94d8f20744aeccacd86c3368e381ebdc47d1364f251842e66c2932927314e2bae663bb83df11e627d142d4eed812febb06a3c3856cc12a6ce1a33bddee122a4d5a6c6c0cc3502627b31fa45c2902e0b670d9e5a4d30bcd208011fa92d313f7974372ae5dff3f9ce8a44d189c63ae6e33a5beb6444a96e425ba70a83339909b5c01b3566378cc89e1a77b97c1989a2e9e2901f9469311af108d8ffb09e2fdf7e036ffe243f741f972b3bf4987e5357b9bf6a2dd2152afd38aceb0379616c20eb2f5dd55224dd6eba0ede705e0b5ddc478f3f430137dd482b049ab059889cd99e2f9e8ec9a93dc46a45a91a7e83e0ba3381265bb7ad865d38a7f2a78e3d0166cb8991fe68ddd69d16037d709486e1ca6b82305eb1b8049d6bd3feb614dcdd2d6681cabb1ce8cbb2973788eacbd8b86dc6474cf758a8df04368b50892145e0c5a38420af39a24e861f149fa357e103c2261e12e8c3c1765ec5989b7b3fafcb701817f3188589ab90bdd5e3639ff3e8dce970d9e11e342fb5fa615f31f92d82dad8bc246c8d110721f9d95f2b6929e1b0748928dfd6e62b2689347a1d067a8317aebb488dfbe599d4c0bae7d7fc4979dfc1d630e32652ae39e7d10806da0eeb18c30961619024c5d2deca5f65138423fe0d7196db681d01936209fd2131b4b57d74be0cf7e59b7cfbe33094e8dcff731c89d619d94a84f63d930e46880a2e9d45eee741082752c83dca96135bf29d35fdd4fd75d0bc58ea1a290ad9f4576256df7812ce408cfd3beb89758137065425f07c1bfe2c62d050ff303197f0ed01057ca9d58f18db1aad542905dd26d584aa47953275cd62ced0cefcee714dc0ea6e08bb639d436d0ebe312c5c5bd20977ce7944853b681ae71dda0780691c8ad142047b5fbc821f0f5292330e8e9e2f7a4d7e8b42e85cc35923bde0041d1d0a5a5c96962b4ff99c1bf88ca1bb3ebfdf96a89e8ebc4992cb3ca27bdcc1ca80f52d78f344090126b32a4c6cb42ca281cd14e5de431ef4d5a64993083e85c4e2a8bc9dd9ce18a70d12f4d59fade9c3794abb679f6014dda15126b66e04bc3055870cdef12ff9d43e18ce948d58cf02ef065d8647054905232d525000dab5999cbd6ebe212d32d2c80599b79428f77b27ffb53eae6eb755cf786a4566e02435eacf932db4201aaab7d5a0a4cb44e95c1674cdbb48fdd02136b65177e5fc1bbd6b63e6eb65c12730ee9b495be6d27a5f05c4b2a4c99afbc25efb61ac1a051b1260bed695350b1f305850d699b501806b34e5334f184bc847153aee13892d8397bfd4104ff0f2abe211ff01df42c28fa7650e0e1c72a4b91403bb127abe163d367e6f9b16b0b671c4cf2c76dd5041c0256a84de0a52641dea1f5ae2d036de136eabaf5fefce8a678b71f6ad6b8ce19da13e1c9a6d0262e6f88de33e1b6ed427f6c9e3ddc3065aa892d986fafb7718ec842c9f00dca0c750dcfa80b6f87c6e60d5dcfde176495066aaa547f3353edb3a1abd10d15cbb92b40e4ad5072d29ae1628acecb532b36c6baf4b5af55628a7850d12ea32bfb79a39f3f54ccbde37c99b61563502039a204ee848998e8f327c1f67bff899d4c06346f7fd47755374e1ac6eb6682b922cdc594c4f4c274d259f965218b4d4d71140f93ba328a1d5d9e6a9714835faafe8eddad1222fd8423c9f0aba7d348e57d533686954e0dfd0dc2133cd685f6c06d7e641fc71126943971a721f3fe62e145a40d4e0baeca04bc6e285a220aff92ebd8513456ca19e15fcce7b0172c44edb1a6b5b80feaaab986921033da2d09499ebcbbd2a02d7d6609c7c51b2944b6e062966d838e36d895a07f420a9c8879024dd23bca910e292f1e3bfb968454c50eedafb63b4901cc369aebb1ad439c1213fbaa6db03618f7358445492c83a0cf06211635ae4d7da841fc923dfa16e681cb3d1593706cc8a67b3cb5908e33562159af99f69f805bc251ea6bb01f3360efd86ff198c7c6cd46e6ba6c9f0d43228b4a9919e3d59d58111bbd299073bfbb10143dd6d1ab332bff605e133adc91f01977397be4e584c662e541ff428fc6446f49e3cc6a3567049922b043591d3a890e7d2be8358a22cd2ce168b631f6a863a3ab64fff52654befd1e38adf2e5df935dae73236a2a6dd1c85ae55fdb126f394c340aa6d2ddb2863a8b9b4ebd5bc41b69ba704a9e1ea60814771774d22d3876377d4e389b8a86e5de267646a684e93e7e273050401c007bc91f2e1a24a20e3c732fe5a67ecf155de295dd6b12e01ccc7b46f5b298af30a2b73512b5aaf3b5b0393fb5d888c3779047984ec69fb308e68f8c3bc5db797dca978592a14a97f9ddaba08d0286aa412b2cd067b625db60180e404a428b7929509b1239e6a266c737d83ba0fba35c256e86b446b8a23312fe0fdcd220536b62488f4f8198b63eca167ab1602da2a6dcffc6eb838e0576fe4518e79f1b1a84fc526b1bdbd2111fb1ff7ed1f2fe422eef43597a2fdacb418a62962ec9c29d5fbe69425dc9373cd093f1b55a3297ec5ad515a5103f62b21299048759321868e51a890c314b08cc227b8b2d8f4fa9bb46a095b11cad830aa64bd6719b215b86a63851e99b949ea1c88ee9d06900818496e6195c29eb16cb3bcf522924d69a5e8eb9c0166928ed9eec0e26151903b08539ddae09c0fcd8d1d4386b919cd6235b17f95025e71791d03b3b82e8dc5f778f6c88a7fab5c18e37cfebbeeb9950433dd0ab0d62c7bc19636977722b0aebb7f3c2922086205783132607973df951d5aaf0daceb0824683b3b81a93ca4df16691c03308c4cb041126e995ec70294b57cd23019e50b05733ad39d7ee1d88d837e2e152433925877bdf54413d4a17ead6d3df87005e17a4bf4d8afc9a77d3059a6dd18bbdcaa1710313cec1ac69efd5177c702138fae70f81f27857094e6a269c4dd0eab3acbc74a52607ab890958778534dd136c7c6f2c8a54d194ee82d69a1781db65356f21498783815beb97438c6aabf268ae734288c7283a741b8734caa8771114f44bb1b7e649630877e18663a2cf2b41f1252035ce05094a6fe9dfd571ade2fcd7769b2ebe15ba79b9a9182da09390e752c628cfe531460b5eeed03fce13532d8ea33f33cef98035f3b921bd83672365495599d50177c9d641d7f3d1d99821802167ff48e636bc9faa200512cde00e8bca8d566c4fa91fc7408cfd2cd1010e4e2e6eb8677c0f0d51e52f68cb64b10b31ed55730c2ae2a78c1978ea138d33f84e0db4a4d046f260880c7749f45805cf1a1b0d4b392742dee43b5ec91d78bd586fe7237e7515f7f0be70f0ed8641214a2355ce888f85c4d8072a5bfc57bab423206de7ab49f8cbde332a1d4b9837773f44a8923858855716721146cada79c581070dbfb3a53bd9c13ffc75b94c338e929a202597ba8408c4ef360630301ee80fc648687d7d5eff51e0bc0a0b3b5b18e633e6730b3acf86a3a34a22aa9ab1367aaa447bb23e9b2100993583c46b9d5ccc1443f8cc2dd2bb07a64a0cbcd142bc44d26e0a5271a6d5af3568ddad172df09272a6097f901921723e8786807da23968b585804fe5a41e94deb3d9dc4069a1ad1cb0f52bd1cae687807df01a1fbe26442cb80dacf61f50e93fca12c9bfbd7e0dc7fe90fb2783ff0df4525969af851839d8dee7115d6010d7ca5565a921ea9bbef7c0987bb1224ecedfdbf9c9256822738d5c7b56036fda0615514146d32a9a3b247f848b6b9782c879aafe22e6060902fd0f49033b6c5419c3dc001ce257e9e6b902f4ce3497b331ca8e669b569a03784547dd9a3ce08bb44ef98e7eb564fbfb7c42b79508d12f93406392a422bd377e1ca208bc93be50e18f3b8daf1545a49f291e86047967d5961c20694e6ce3af71c15ff5afb27635c47e88d16f5ea16efe35f78e402077b0201e1e48b21fc40fed6ae942373da5d49b2be8a0b320113221bb7cad503516ea2af3cc8418aa53bdcf3cbff028f9cb4b1b7a3a9ead9e86e28b8e8252e3ad6de8272a16bee4a358dfff2e2efdd9e25e409eb715586b369093a303663554610680d7175652917a22f9eaec6678fff8c030a0b40e43c42dd6745460e2d08780e516661f8d3c54d30723e849d92355d25ef70ad4f1f4f27aecd5231e0a5a832b7d4a395421a61e949fb059cddd8069e32c8872a1bb7beddc78e426cd14cf6c2001b992dfaaf6e53869881c6963ed018dd3b063be5dae2bdc99fc7c26afdb6142ebd5c3f2d5056828dac7acace9d12c3f5228159292dab681fb754a92e7f7af33bb3b25fa85b8018e46b034469e750c9e20c891dc2929830e37ab43d4ddf57d06c34977e54e923a65578bdc66362eeceb5617835f7690efb60720d113348b1dfab4d2f26686f670f05bcbb4f998d4c48a821d1d8f08c3d51193ea51a538ad8ef303d07e263e96d50d70f9492984b51af87f9b5e8af13393fb1cd0159be29149cade47b11ea4296383531aa00c6e8ec7a6d1cf55303257fb125214eae7d9d54bd8d26bec5d2d5aa47793210400051cb7e33c54148ebacbc7092f5ea7196559328c32fb674d9a84a055ffeb7283496ad3dbfa07cee420f0ca10d2a4ac9beeef58980f9b2a0ebc7f9531e59cfa8b6fb216cd9604989ff3f1e7bf11c081afa1b806c3f383f3a3f92e31508574ba916f813490bf70891e88046e658a422c76fd337ddeceb409f46fce4b4046b5c7e6dc99883b57a4d9b273fda7800af6b5fbed3aa753c1ec33a4c8c5fdd26578e23108e43e933078517a37f655115e5901ac88d8f53b3aa23b3bd8bbe29a2181543be86fea34c79ffc66c6f1b6e64092b4c6d6d4ea30e3a98e2b0f09dee7b8eb0cd48b0a8a1415f9c2ebbd52c7ea65dfa9235e513b348ef8fa6cef16fa54f2514318e5b3b7aa18712202b59991340b37291436597dbe64146c6be04b46e9021a4a0d926552f2bdd3af76915fb177c9534c5453d0ebb9f261275c2075c4d133bbee85bf43c2b6901a701b02affa810609ba04e5f2de9418cf59ba451186876f6b8e5f2f0b9c324b6525ae1fe60ba935ab42ce60dba23549515034156e3dd8eda6ac9064ffc0518e317266a39aabe53dc2db76c13edb74111b97aeb8db268248b7a39fcc197afa7cd77fc67f7e46f848b00ac928b818facf5572d73338849cc2939f9f2194771604cb7f65645cc91a45645531306576ad7d3f854bf901570e721df8ebf4c3c04147660905bbfec0e50889ff4060a8053ee7085f48e12d4222b51ad841f822dcbe52ab88032fc4288e3e44f77bc673a7ba7b979760988aa7022d5460adca5151fd59c39f5d9e744662b917b52c9fdc2f313a6ef1549ff5e205926a60bbe31a76bc88489259b41c8816e61da3c75a0a1c94227d779d75a7268ea7b50abf219dd61ae92d5e13850d1ab5e51784f4b96298ce2eb3b3bf33c03c0a95a72e8b3933b79c3d18357124df7e0f7d99429a80bd97d0edb83f2fe638cb9081384d4b29d80b7178aaba8aa0a09b3743ca664557d3dc6d7e6f7a78f4b1cfcc6c0341794b5c49d76b5974fbdba19d0fdfee0a9dd39e7245ca0dc0ef33b09d0fcf0c4b31cab9a0cd5257f2f849a08162052818e5269c16812e7b0bd2cab8d1265deaba07259f3c36b73982973f373fa17bb7c6601aed5e16618ee760be125e4a0f927fdfebb0a76e5a78fd5e524f71e794e21b3782b48234a6e7eeae677c5bff4ec6eb403729f1452bfd59aea767df48e43b8dbf0c1e4f05b483b48170ae707a672a36887b11b53505457f2d3607db31c6d0c941199e5b3b2e55983e5ecbf71cd0302517590b5455a1de29441fe537055de1fc825b24eca9fe647556e6e8b1b2cb6b1f01dd437328eb5dd442dee1bad29a3c3d333e076c2441d164009c26280ba3d1299651f30628d2a31e9a5fff5a0577aed2a255ed919329bc8d8969187a8bb58b7f6e9c94ef01773d74638ade95dbd2ab820c6fa62db1e9e906abd46f22c919a8c7e5ffa0979258ad418b5111b119d668b3e3bf3d9a0b8b2910b5cfc4d301341b56e7f5920362e2e0f34cbd882ca3af65c4af44615e25aedfc3f660aa5de3058dcd0ffa42f6ca9bb0eca9ac276263894d074ce93d68d84d8b453adce98a9562bc7d85e2e9dda1b13c86e345983daebe5ea6fcfc22cc30cc9da517b8dd090986267e93936b9bb5fecdb337b3a52eb134855dc4f3883c8fc39332c93901eaca70be9cdf9cd2e075f190be29726ffe97d06f337a0cf9d796a562fa4ae905706188a5fc5ed1152156519fe5ea0eb7dc0d2327c5e3f8e9c134db8563525a9b0aefada63a0bd50d8acfab5f2db169e828f725f825ff2b3464dcbab76d5b9b556f171320f7abe47b18a65ba474a64b6fa766937fee1eb8dc0d1602d326363c20dd1e1d17e2ff3f081406640025eb576cd3b3f03eb82a8667d7ce70a3d026fc5a98fbaffa978f68e52fb07da0d70d97e10c620b1d73f3ac11c32446a782b7627d4ebf4d44552cec25741f11cf2285721c8b054c291d987340ff3e2f989d45f5a3e34d413e3e91ada49127a8cafcf86629c59eeca15e004815a0429dec7b1ab30ea57d7720c695eee4cd678c1c41da30194ace06fe7da9feecd795f9a5122ed7e2ea66c106f8ae8cc12edddb24903151c536363151e615fc2d504fabe9de44b605d4ac3d483e1fee4d3e631204ca833792a168d1a9289530c2b7883320b5149a1a9bf36344f903429f5c4f3a8efa4b3c55280954505435b251a05978c0a511cd737b4a1a52163f12be04dfb9216d8535962654cdefba38ecd19c3ec2f18a8f03d1f8893e6fad55be75694f0be4065a0592356aa7310606359696189a834bac7cbaab260bd303729343a31cd28732d3c8149724280127156a8631ff492285f149451dc021a310122a77a3e21f22e45acd214792b205ee82f30bca3f066cc05ca3c40dca2bb9b158423ee03bf28996284215722ecb7e6cb0d256bc1bf2d2571ec3baafac8b84845f92dc8d88d27f8957c71590a9c56703f4d158f2fa7b813c480f5bcfbd5db0e47a8097e24f1d5f2091eae4b608329b0c31a82bdd02f645ce0484215c11266d89c5671138a819f249278399b16b6396bf06fc1a3501b235d8e450acb6b0ae50ae254ad4a7f1f95daab3c9a9819e72fda00e28d3f3df651d73c7204086d3fb07fb8f4577a0479defa3f3772cc91d81646ed88923522406793fa1b074aa498a9eddeb824d3cf2bc0f2a971c24203fa6f9f2bb4ea059a6ef00", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xeea, {0x4, 0x2, 0x5, 0xfffffffffffffffe, 0xa002, 0x1ff, {0x800000008, 0x9, 0x6, 0x5, 0xa, 0xf173, 0x85, 0x6, 0x4000000d, 0x1000, 0x0, 0x0, r3, 0x800, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02eea400edffe9000000000400000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="040001000000000008000400", @ANYRES32=r4, @ANYBLOB="10000000000000002000060000000000"], 0x44, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x1ac, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0x6, 0x9, 0x0, 0x4, 0x86, 0x1}}, {0x6, 0x2, [0x100]}}, {{0x1c, 0x1, {0x7, 0x6, 0x0, 0xd30d, 0x2, 0x7, 0x6, 0x3}}, {0xa, 0x2, [0xa, 0x7, 0x400]}}, {{0x1c, 0x1, {0x1, 0x4, 0x7, 0x6, 0x2, 0x200, 0xd, 0x2}}, {0x8, 0x2, [0x3, 0x40]}}, {{0x1c, 0x1, {0x0, 0x40, 0x7, 0x1, 0x2, 0x3, 0x7, 0x5}}, {0xe, 0x2, [0x3, 0x7, 0x8001, 0x0, 0x1000]}}, {{0x1c, 0x1, {0x8, 0x7, 0x8, 0x69, 0x1, 0x0, 0x6, 0x4}}, {0xc, 0x2, [0x9, 0x5, 0xf, 0x0]}}, {{0x1c, 0x1, {0xf, 0x32, 0x400, 0xffffffff, 0x3, 0x8, 0x53, 0x2}}, {0x8, 0x2, [0x0, 0xfc00]}}, {{0x1c, 0x1, {0x4, 0x6, 0x9, 0x7, 0x0, 0x7, 0x7, 0x2}}, {0x8, 0x2, [0xfff, 0x3]}}, {{0x1c, 0x1, {0x91, 0xb, 0x8, 0x3, 0x2, 0x6f7728c1, 0x4, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6, 0xf7, 0x7d, 0x2, 0x2, 0x2, 0x4, 0x7}}, {0x12, 0x2, [0x8000, 0x1, 0x2, 0x3, 0x888, 0x7, 0x5]}}, {{0x1c, 0x1, {0x81, 0x0, 0x46, 0x6b2, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x2, [0x100, 0x89d]}}]}]}, 0x1ac}}, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2002, 0x0, 0x0, 0x0, 0x5}, 0xfffffffffffffe59) syz_emit_ethernet(0xef, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xd227d64325f41116, 0x2000, &(0x7f0000fe8000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 19.043170406s ago: executing program 3 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x10b042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9cd54000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ptrace(0x8, r7) wait4(0x0, 0x0, 0x0, 0x0) recvfrom$phonet(r3, 0x0, 0x0, 0x60, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000100}, 0x4811) r8 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400000, 0x0) dup3(r2, r8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 15.812345534s ago: executing program 3 (id=278): mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xc) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x2020048}) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="4e760ccae47ebb084ad5e51ccb6d02545ad06f6f746d6f64653d303030309eb8cf96339459bd30dee73030303430898b8cc2bd9a8d5a3030306c", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f6964f9ffffff2b1f5d2de7fff1733d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa040, 0xac) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x20000000000002aa, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}, {0x200, 0x5, 0x0, 0x3ff}, {0x7, 0x3, 0xf9, 0x8}, {0xe, 0xe, 0x4, 0x5}, {0x9, 0x7, 0x3, 0x4}, {0x2, 0xfe, 0xf4, 0x5}, {0xfffc, 0x4c, 0x0, 0xc7}]}) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0x34, r5, 0x2}, 0xc) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0xef, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000180)='%', 0x0, 0xfff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 14.397178616s ago: executing program 34 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000004c0)={0x38, r1, 0x201, 0x8000000, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1396af3151918b0f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x24000840) 4.347302958s ago: executing program 35 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="75f5ee", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYRES32=r1]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x768, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xeea, {0x4, 0x2, 0x5, 0xfffffffffffffffe, 0xa002, 0x1ff, {0x800000008, 0x9, 0x6, 0x5, 0xa, 0xf173, 0x85, 0x6, 0x4000000d, 0x1000, 0x0, 0x0, r3, 0x800, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02eea400edffe9000000000400000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="040001000000000008000400", @ANYRES32=r4, @ANYBLOB="10000000000000002000060000000000"], 0x44, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x1ac, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0x6, 0x9, 0x0, 0x4, 0x86, 0x1}}, {0x6, 0x2, [0x100]}}, {{0x1c, 0x1, {0x7, 0x6, 0x0, 0xd30d, 0x2, 0x7, 0x6, 0x3}}, {0xa, 0x2, [0xa, 0x7, 0x400]}}, {{0x1c, 0x1, {0x1, 0x4, 0x7, 0x6, 0x2, 0x200, 0xd, 0x2}}, {0x8, 0x2, [0x3, 0x40]}}, {{0x1c, 0x1, {0x0, 0x40, 0x7, 0x1, 0x2, 0x3, 0x7, 0x5}}, {0xe, 0x2, [0x3, 0x7, 0x8001, 0x0, 0x1000]}}, {{0x1c, 0x1, {0x8, 0x7, 0x8, 0x69, 0x1, 0x0, 0x6, 0x4}}, {0xc, 0x2, [0x9, 0x5, 0xf, 0x0]}}, {{0x1c, 0x1, {0xf, 0x32, 0x400, 0xffffffff, 0x3, 0x8, 0x53, 0x2}}, {0x8, 0x2, [0x0, 0xfc00]}}, {{0x1c, 0x1, {0x4, 0x6, 0x9, 0x7, 0x0, 0x7, 0x7, 0x2}}, {0x8, 0x2, [0xfff, 0x3]}}, {{0x1c, 0x1, {0x91, 0xb, 0x8, 0x3, 0x2, 0x6f7728c1, 0x4, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6, 0xf7, 0x7d, 0x2, 0x2, 0x2, 0x4, 0x7}}, {0x12, 0x2, [0x8000, 0x1, 0x2, 0x3, 0x888, 0x7, 0x5]}}, {{0x1c, 0x1, {0x81, 0x0, 0x46, 0x6b2, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x2, [0x100, 0x89d]}}]}]}, 0x1ac}}, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2002, 0x0, 0x0, 0x0, 0x5}, 0xfffffffffffffe59) syz_emit_ethernet(0xef, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xd227d64325f41116, 0x2000, &(0x7f0000fe8000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 0s ago: executing program 36 (id=278): mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xc) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x2020048}) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="4e760ccae47ebb084ad5e51ccb6d02545ad06f6f746d6f64653d303030309eb8cf96339459bd30dee73030303430898b8cc2bd9a8d5a3030306c", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f6964f9ffffff2b1f5d2de7fff1733d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa040, 0xac) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x20000000000002aa, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}, {0x200, 0x5, 0x0, 0x3ff}, {0x7, 0x3, 0xf9, 0x8}, {0xe, 0xe, 0x4, 0x5}, {0x9, 0x7, 0x3, 0x4}, {0x2, 0xfe, 0xf4, 0x5}, {0xfffc, 0x4c, 0x0, 0xc7}]}) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0x34, r5, 0x2}, 0xc) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0xef, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000180)='%', 0x0, 0xfff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 81.291486][ T5788] cgroup: Unknown subsys name 'net' [ 81.542943][ T5788] cgroup: Unknown subsys name 'cpuset' [ 81.598095][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.385060][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.108941][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.110898][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.111856][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.111992][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.116234][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.117105][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.127637][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.129531][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.133539][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.134563][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.135933][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.136685][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.162189][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.189163][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.191033][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.228189][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.239143][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.241982][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.242126][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.246406][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.319378][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.333339][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.335392][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.336565][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.337353][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.872292][ T991] cfg80211: failed to load regulatory.db [ 87.181118][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 87.264783][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 87.429757][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 87.555890][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 87.563300][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 88.088713][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.089731][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.090098][ T5803] bridge_slave_0: entered allmulticast mode [ 88.091763][ T5803] bridge_slave_0: entered promiscuous mode [ 88.210417][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.210904][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.211092][ T5803] bridge_slave_1: entered allmulticast mode [ 88.213834][ T5803] bridge_slave_1: entered promiscuous mode [ 88.218367][ T5119] Bluetooth: hci1: command tx timeout [ 88.218374][ T5815] Bluetooth: hci0: command tx timeout [ 88.220136][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.220265][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.220430][ T5802] bridge_slave_0: entered allmulticast mode [ 88.222937][ T5802] bridge_slave_0: entered promiscuous mode [ 88.377602][ T5815] Bluetooth: hci4: command tx timeout [ 88.377744][ T5119] Bluetooth: hci3: command tx timeout [ 88.377804][ T5815] Bluetooth: hci2: command tx timeout [ 88.448594][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.448694][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.448808][ T5802] bridge_slave_1: entered allmulticast mode [ 88.450405][ T5802] bridge_slave_1: entered promiscuous mode [ 88.678616][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.678723][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.678834][ T5819] bridge_slave_0: entered allmulticast mode [ 88.680450][ T5819] bridge_slave_0: entered promiscuous mode [ 88.891830][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.979120][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.979256][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.979392][ T5819] bridge_slave_1: entered allmulticast mode [ 88.980919][ T5819] bridge_slave_1: entered promiscuous mode [ 89.112148][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.114826][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.198408][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.198523][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.201154][ T5811] bridge_slave_0: entered allmulticast mode [ 89.202707][ T5811] bridge_slave_0: entered promiscuous mode [ 89.204725][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.204854][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.205021][ T5810] bridge_slave_0: entered allmulticast mode [ 89.206818][ T5810] bridge_slave_0: entered promiscuous mode [ 89.310578][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.368527][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.368671][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.368849][ T5811] bridge_slave_1: entered allmulticast mode [ 89.370611][ T5811] bridge_slave_1: entered promiscuous mode [ 89.371660][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.371755][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.372043][ T5810] bridge_slave_1: entered allmulticast mode [ 89.373523][ T5810] bridge_slave_1: entered promiscuous mode [ 89.691295][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.810034][ T5803] team0: Port device team_slave_0 added [ 89.890600][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.071109][ T5803] team0: Port device team_slave_1 added [ 90.072777][ T5802] team0: Port device team_slave_0 added [ 90.142750][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.145810][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.199778][ T5802] team0: Port device team_slave_1 added [ 90.260818][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.262966][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.297725][ T61] Bluetooth: hci0: command tx timeout [ 90.297758][ T61] Bluetooth: hci1: command tx timeout [ 90.399707][ T5819] team0: Port device team_slave_0 added [ 90.457594][ T61] Bluetooth: hci2: command tx timeout [ 90.457620][ T5119] Bluetooth: hci4: command tx timeout [ 90.468399][ T5119] Bluetooth: hci3: command tx timeout [ 90.550174][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.550185][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.550199][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.930243][ T5819] team0: Port device team_slave_1 added [ 91.079000][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.079015][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.079033][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.080854][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.080868][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.080882][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.179810][ T5811] team0: Port device team_slave_0 added [ 91.197218][ T5810] team0: Port device team_slave_0 added [ 91.201079][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.201094][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.201118][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.300283][ T5811] team0: Port device team_slave_1 added [ 91.303541][ T5810] team0: Port device team_slave_1 added [ 91.313429][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.313443][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.313466][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.470570][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.470583][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.470597][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.716172][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.716189][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.716204][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.889413][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.889429][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.889452][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.970236][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.970247][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.970261][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.976170][ T5803] hsr_slave_0: entered promiscuous mode [ 91.977196][ T5803] hsr_slave_1: entered promiscuous mode [ 91.981616][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.981630][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.981654][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.173387][ T5802] hsr_slave_0: entered promiscuous mode [ 92.174180][ T5802] hsr_slave_1: entered promiscuous mode [ 92.174883][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 92.174967][ T5802] Cannot create hsr debugfs directory [ 92.314757][ T5819] hsr_slave_0: entered promiscuous mode [ 92.315521][ T5819] hsr_slave_1: entered promiscuous mode [ 92.316086][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 92.316104][ T5819] Cannot create hsr debugfs directory [ 92.377641][ T5119] Bluetooth: hci1: command tx timeout [ 92.377672][ T5119] Bluetooth: hci0: command tx timeout [ 92.537684][ T61] Bluetooth: hci3: command tx timeout [ 92.537718][ T61] Bluetooth: hci4: command tx timeout [ 92.537738][ T61] Bluetooth: hci2: command tx timeout [ 92.800980][ T5811] hsr_slave_0: entered promiscuous mode [ 92.801794][ T5811] hsr_slave_1: entered promiscuous mode [ 92.802360][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 92.802380][ T5811] Cannot create hsr debugfs directory [ 93.003718][ T5810] hsr_slave_0: entered promiscuous mode [ 93.004558][ T5810] hsr_slave_1: entered promiscuous mode [ 93.005135][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 93.005155][ T5810] Cannot create hsr debugfs directory [ 94.263171][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.305405][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.342215][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.394759][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.457709][ T5119] Bluetooth: hci0: command tx timeout [ 94.458811][ T5119] Bluetooth: hci1: command tx timeout [ 94.493403][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.533026][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.576244][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.618243][ T5119] Bluetooth: hci2: command tx timeout [ 94.618275][ T5119] Bluetooth: hci4: command tx timeout [ 94.618307][ T5119] Bluetooth: hci3: command tx timeout [ 94.630443][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.749874][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.801105][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.844627][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.898721][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.050635][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.086455][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.124456][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.161764][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.264741][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.308868][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.349376][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.384297][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.405741][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.463806][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.495406][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.509890][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.510247][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.555202][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.555304][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.602258][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.634675][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.645531][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.645651][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.692552][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.692675][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.755688][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.793576][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.793710][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.820866][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.861520][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.861736][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.959459][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.993115][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.023611][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.023894][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.093462][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.093606][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.171560][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.227103][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.227973][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.266714][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.266885][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.315131][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.474235][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.586752][ T5803] veth0_vlan: entered promiscuous mode [ 96.656750][ T5803] veth1_vlan: entered promiscuous mode [ 96.774941][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.812373][ T5819] veth0_vlan: entered promiscuous mode [ 96.855707][ T5819] veth1_vlan: entered promiscuous mode [ 96.886669][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.911209][ T5803] veth0_macvtap: entered promiscuous mode [ 96.936020][ T5803] veth1_macvtap: entered promiscuous mode [ 96.965853][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.031400][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.049314][ T5811] veth0_vlan: entered promiscuous mode [ 97.073007][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.076584][ T5819] veth0_macvtap: entered promiscuous mode [ 97.119162][ T5811] veth1_vlan: entered promiscuous mode [ 97.123256][ T5819] veth1_macvtap: entered promiscuous mode [ 97.126313][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.133771][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.144470][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.163402][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.183919][ T5810] veth0_vlan: entered promiscuous mode [ 97.298204][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.302825][ T5810] veth1_vlan: entered promiscuous mode [ 97.383203][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.443370][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.447005][ T5811] veth0_macvtap: entered promiscuous mode [ 97.454026][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.461646][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.474050][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.485406][ T5811] veth1_macvtap: entered promiscuous mode [ 97.630669][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.630695][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.751942][ T5810] veth0_macvtap: entered promiscuous mode [ 97.763403][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.812254][ T5810] veth1_macvtap: entered promiscuous mode [ 97.832532][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.832552][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.845367][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.880940][ T5802] veth0_vlan: entered promiscuous mode [ 97.918160][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.918181][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.920181][ T1474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.926938][ T1474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.938873][ T1474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.947161][ T1474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.965725][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.976575][ T5802] veth1_vlan: entered promiscuous mode [ 98.080575][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.096253][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.096272][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.179028][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.226925][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.236392][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.260616][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.574214][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.574235][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.332678][ T5802] veth0_macvtap: entered promiscuous mode [ 99.524523][ T5802] veth1_macvtap: entered promiscuous mode [ 99.626972][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.626992][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.765918][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.795636][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.795657][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.823986][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.858716][ T5806] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.948720][ T88] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.952179][ T88] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.952257][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.952271][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.953875][ T88] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.956419][ T88] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.037548][ T5806] usb 2-1: Using ep0 maxpacket: 16 [ 100.046690][ T5806] usb 2-1: config 1 has an invalid interface number: 62 but max is 0 [ 100.046719][ T5806] usb 2-1: config 1 has no interface number 0 [ 100.046809][ T5806] usb 2-1: config 1 interface 62 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.046839][ T5806] usb 2-1: config 1 interface 62 altsetting 253 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.046861][ T5806] usb 2-1: config 1 interface 62 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 0 [ 100.046886][ T5806] usb 2-1: config 1 interface 62 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 100.046914][ T5806] usb 2-1: config 1 interface 62 has no altsetting 0 [ 100.049949][ T5806] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.049979][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.050006][ T5806] usb 2-1: SerialNumber: syz [ 100.148783][ T5806] cdc_acm 2-1:1.62: probe with driver cdc_acm failed with error -12 [ 100.201798][ T5935] process 'syz.2.3' launched '/dev/fd/8' with NULL argv: empty string added [ 100.355070][ T31] usb 2-1: USB disconnect, device number 2 [ 100.861341][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.861363][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.539311][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.544320][ T1429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.544339][ T1429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.811016][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 101.811046][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.829824][ T9] usb 3-1: config 0 descriptor?? [ 101.896984][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 102.060959][ T5953] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 102.218635][ T9] gspca_spca508: reg_read err -71 [ 102.220759][ T9] gspca_spca508: reg_read err -71 [ 102.221938][ T9] gspca_spca508: reg_read err -71 [ 102.224959][ T9] gspca_spca508: reg_read err -71 [ 102.225889][ T9] gspca_spca508: reg_read err -71 [ 102.256446][ T9] gspca_spca508: reg write: error -71 [ 102.256531][ T9] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 102.283467][ T9] usb 3-1: USB disconnect, device number 2 [ 102.763425][ T5878] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 102.917130][ T5878] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 102.917159][ T5878] usb 1-1: config 0 has no interface number 0 [ 102.917209][ T5878] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 102.954863][ T5878] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 102.954892][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.954912][ T5878] usb 1-1: Product: syz [ 102.954926][ T5878] usb 1-1: Manufacturer: syz [ 102.954940][ T5878] usb 1-1: SerialNumber: syz [ 103.013001][ T5878] usb 1-1: config 0 descriptor?? [ 103.013778][ T5967] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.016328][ T5878] usb-storage 1-1:0.20: USB Mass Storage device detected [ 103.052000][ T5878] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 103.248720][ T5967] fuse: Unknown parameter '' [ 103.256366][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.261708][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.363682][ T5982] capability: warning: `syz.1.17' uses deprecated v2 capabilities in a way that may be insecure [ 103.382846][ T5878] scsi host1: usb-storage 1-1:0.20 [ 103.508937][ T5950] usb 1-1: USB disconnect, device number 2 [ 104.203237][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.288244][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 104.384993][ T5885] usb 5-1: config index 0 descriptor too short (expected 27675, got 27) [ 104.385022][ T5885] usb 5-1: config 15 has an invalid descriptor of length 238, skipping remainder of the config [ 104.385043][ T5885] usb 5-1: config 15 has 0 interfaces, different from the descriptor's value: 10 [ 104.420926][ T5885] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=46.8f [ 104.420956][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.420975][ T5885] usb 5-1: Product: syz [ 104.420989][ T5885] usb 5-1: Manufacturer: syz [ 104.421003][ T5885] usb 5-1: SerialNumber: syz [ 104.527548][ T5950] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.697805][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 104.701429][ T5950] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 104.701459][ T5950] usb 2-1: config 0 has no interface number 0 [ 104.701512][ T5950] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 104.709513][ T5950] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fd.f5 [ 104.709548][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 104.709567][ T5950] usb 2-1: Product: syz [ 104.709581][ T5950] usb 2-1: SerialNumber: syz [ 104.736579][ T5950] usb 2-1: config 0 descriptor?? [ 104.771029][ T5885] usb 5-1: USB disconnect, device number 2 [ 104.967838][ T5950] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 104.968133][ T5950] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 104.989031][ T5950] usb 2-1: USB disconnect, device number 3 [ 106.117130][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.567171][ T6014] Invalid ELF header magic: != ELF [ 106.647959][ T5885] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.864749][ T5885] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 106.864768][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.864875][ T5885] usb 4-1: Product: syz [ 106.864891][ T5885] usb 4-1: Manufacturer: syz [ 106.864905][ T5885] usb 4-1: SerialNumber: syz [ 109.269671][ T5878] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.430547][ T5885] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 109.430609][ T5885] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 109.430630][ T5885] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 109.454612][ T5878] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 109.454641][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.487713][ T5878] usb 1-1: config 0 descriptor?? [ 109.495432][ T5878] gspca_main: spca508-2.14.0 probing 8086:0110 [ 109.521691][ T5885] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 109.835837][ T5885] usb 4-1: USB disconnect, device number 2 [ 111.146558][ T5878] gspca_spca508: reg_read err -110 [ 111.146984][ T5878] gspca_spca508: reg_read err -71 [ 111.147443][ T5878] gspca_spca508: reg_read err -71 [ 111.147840][ T5878] gspca_spca508: reg_read err -71 [ 111.148217][ T5878] gspca_spca508: reg_read err -71 [ 111.148627][ T5878] gspca_spca508: reg write: error -71 [ 111.148717][ T5878] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 112.639279][ T5878] usb 1-1: USB disconnect, device number 3 [ 113.595748][ T37] audit: type=1326 audit(1762299797.439:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.184362][ T37] audit: type=1326 audit(1762299798.019:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.403769][ T37] audit: type=1326 audit(1762299798.209:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.403821][ T37] audit: type=1326 audit(1762299798.209:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.403860][ T37] audit: type=1326 audit(1762299798.209:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.403900][ T37] audit: type=1326 audit(1762299798.229:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.403947][ T37] audit: type=1326 audit(1762299798.229:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.403988][ T37] audit: type=1326 audit(1762299798.229:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.404025][ T37] audit: type=1326 audit(1762299798.239:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.404065][ T37] audit: type=1326 audit(1762299798.239:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6061 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8123acf6c9 code=0x7ffc0000 [ 114.551545][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 114.954664][ T6076] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 114.954725][ T6076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 114.992104][ T6070] netlink: 'syz.4.45': attribute type 4 has an invalid length. [ 114.992126][ T6070] netlink: 152 bytes leftover after parsing attributes in process `syz.4.45'. [ 114.994715][ T6070] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 115.273303][ T6082] Zero length message leads to an empty skb [ 115.289686][ T6083] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.294118][ T6083] netlink: 'syz.1.48': attribute type 12 has an invalid length. [ 115.294139][ T6083] netlink: 'syz.1.48': attribute type 29 has an invalid length. [ 115.294152][ T6083] netlink: 148 bytes leftover after parsing attributes in process `syz.1.48'. [ 115.620026][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.774243][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.774278][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.774324][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 115.774348][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.823285][ T9] usb 3-1: config 0 descriptor?? [ 115.947498][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.082867][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.083763][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.121586][ T5878] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 116.121618][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.880423][ T5878] usb 1-1: config 0 descriptor?? [ 116.901971][ T5878] gspca_main: spca508-2.14.0 probing 8086:0110 [ 117.048684][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 117.048884][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 117.127485][ T5878] gspca_spca508: reg_read err -71 [ 117.127904][ T5878] gspca_spca508: reg_read err -71 [ 117.128291][ T5878] gspca_spca508: reg_read err -71 [ 117.131230][ T5878] gspca_spca508: reg_read err -71 [ 117.131697][ T5878] gspca_spca508: reg_read err -71 [ 117.132089][ T5878] gspca_spca508: reg write: error -71 [ 117.132176][ T5878] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 117.162893][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input6 [ 117.187293][ T5878] usb 1-1: USB disconnect, device number 4 [ 117.403880][ T9] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 117.446081][ T9] usb 3-1: USB disconnect, device number 3 [ 117.967446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.061088][ T6116] fido_id[6116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 118.062676][ T6129] netlink: 'syz.0.64': attribute type 12 has an invalid length. [ 118.062694][ T6129] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 118.062707][ T6129] netlink: 148 bytes leftover after parsing attributes in process `syz.0.64'. [ 118.648876][ T6135] warning: `syz.2.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.017310][ T61] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 122.204003][ T6167] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.77'. [ 123.245847][ T6192] FAULT_INJECTION: forcing a failure. [ 123.245847][ T6192] name failslab, interval 1, probability 0, space 0, times 1 [ 123.245959][ T6192] CPU: 1 UID: 0 PID: 6192 Comm: syz.3.83 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 123.245981][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.245999][ T6192] Call Trace: [ 123.246011][ T6192] [ 123.246020][ T6192] dump_stack_lvl+0x189/0x250 [ 123.246051][ T6192] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.246077][ T6192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.246122][ T6192] should_fail_ex+0x46c/0x600 [ 123.246153][ T6192] should_failslab+0xa8/0x100 [ 123.246181][ T6192] __kmalloc_noprof+0xcc/0x7d0 [ 123.246204][ T6192] ? ovl_lookup+0x5f7/0x1bc0 [ 123.246234][ T6192] ovl_lookup+0x5f7/0x1bc0 [ 123.246263][ T6192] ? __pfx_smack_inode_permission+0x10/0x10 [ 123.246298][ T6192] ? smk_tskacc+0x2fc/0x370 [ 123.246334][ T6192] ? __pfx_ovl_lookup+0x10/0x10 [ 123.246355][ T6192] ? ovl_permission+0x182/0x2c0 [ 123.246384][ T6192] ? make_vfsgid+0x49/0xa0 [ 123.246404][ T6192] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 123.246436][ T6192] ? bpf_lsm_inode_create+0x9/0x20 [ 123.246464][ T6192] path_openat+0x110d/0x3840 [ 123.246529][ T6192] ? __pfx_path_openat+0x10/0x10 [ 123.246567][ T6192] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 123.246591][ T6192] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.246615][ T6192] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 123.246648][ T6192] do_filp_open+0x1fa/0x410 [ 123.246672][ T6192] ? __pfx_do_filp_open+0x10/0x10 [ 123.246690][ T6192] ? rt_mutex_slowunlock+0x493/0x8a0 [ 123.246737][ T6192] ? alloc_fd+0x64f/0x6c0 [ 123.246774][ T6192] do_sys_openat2+0x121/0x1c0 [ 123.246791][ T6192] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.246816][ T6192] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.246842][ T6192] ? __x64_sys_openat+0x30/0x170 [ 123.246869][ T6192] __x64_sys_openat+0x138/0x170 [ 123.246894][ T6192] do_syscall_64+0xfa/0xfa0 [ 123.246919][ T6192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.246937][ T6192] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 123.246954][ T6192] ? clear_bhb_loop+0x60/0xb0 [ 123.246977][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.246995][ T6192] RIP: 0033:0x7f81ec34f6c9 [ 123.247018][ T6192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.247032][ T6192] RSP: 002b:00007f81ea574038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.247056][ T6192] RAX: ffffffffffffffda RBX: 00007f81ec5a6180 RCX: 00007f81ec34f6c9 [ 123.247070][ T6192] RDX: 000000000000275a RSI: 0000200000000580 RDI: ffffffffffffff9c [ 123.247083][ T6192] RBP: 00007f81ea574090 R08: 0000000000000000 R09: 0000000000000000 [ 123.247094][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.247105][ T6192] R13: 00007f81ec5a6218 R14: 00007f81ec5a6180 R15: 00007ffdac7fe648 [ 123.247161][ T6192] [ 128.049760][ T6234] fuse: Bad value for 'fd' [ 133.697881][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.699510][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.970663][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'. [ 137.898139][ T6316] netlink: 48 bytes leftover after parsing attributes in process `syz.0.123'. [ 138.017487][ T5878] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.201392][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.203804][ T5878] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 138.203830][ T5878] usb 4-1: config 16 has no interface number 0 [ 138.203878][ T5878] usb 4-1: config 16 interface 19 altsetting 13 bulk endpoint 0xC has invalid maxpacket 1023 [ 138.203903][ T5878] usb 4-1: config 16 interface 19 altsetting 13 endpoint 0xF has an invalid bInterval 250, changing to 7 [ 138.203930][ T5878] usb 4-1: config 16 interface 19 has no altsetting 0 [ 138.271591][ T5878] usb 4-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=ec.72 [ 138.271621][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.271641][ T5878] usb 4-1: Product: syz [ 138.271656][ T5878] usb 4-1: Manufacturer: syz [ 138.271670][ T5878] usb 4-1: SerialNumber: syz [ 138.319026][ T6314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.679024][ T5878] ti_usb_3410_5052 4-1:16.19: TI USB 5052 2 port adapter converter detected [ 138.681844][ T5878] ti_usb_3410_5052 4-1:16.19: missing endpoints [ 138.796140][ T5878] usb 4-1: USB disconnect, device number 3 [ 140.832709][ T6339] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.250546][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.630608][ T6345] netlink: 112 bytes leftover after parsing attributes in process `syz.3.135'. [ 144.336512][ T44] usb 5-1: device descriptor read/all, error -71 [ 144.777581][ T5885] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 144.941525][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.941558][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.941597][ T5885] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 144.941620][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.950627][ T5885] usb 4-1: config 0 descriptor?? [ 146.231718][ T6367] syz.0.143 (6367) used greatest stack depth: 17776 bytes left [ 146.377833][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.527647][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 146.550486][ T44] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 146.550570][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.550591][ T44] usb 2-1: Product: syz [ 146.550605][ T44] usb 2-1: Manufacturer: syz [ 146.550619][ T44] usb 2-1: SerialNumber: syz [ 146.634959][ T44] usb 2-1: config 0 descriptor?? [ 150.368115][ T44] usb 2-1: USB disconnect, device number 4 [ 150.458739][ T5885] usbhid 4-1:0.0: can't add hid device: -32 [ 150.458870][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 151.075546][ T5885] usb 4-1: USB disconnect, device number 4 [ 151.354614][ T37] kauditd_printk_skb: 48 callbacks suppressed [ 151.354632][ T37] audit: type=1326 audit(1762299835.189:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 151.409115][ T37] audit: type=1326 audit(1762299835.209:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 151.409165][ T37] audit: type=1326 audit(1762299835.269:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 151.409205][ T37] audit: type=1326 audit(1762299835.269:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 151.409253][ T37] audit: type=1326 audit(1762299835.269:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 151.409292][ T37] audit: type=1326 audit(1762299835.269:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 151.409331][ T37] audit: type=1326 audit(1762299835.269:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 151.683346][ T37] audit: type=1326 audit(1762299835.539:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 151.683395][ T37] audit: type=1326 audit(1762299835.539:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 151.683435][ T37] audit: type=1326 audit(1762299835.539:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ee6f6c9 code=0x7ffc0000 [ 152.305151][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.499170][ T44] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 152.606412][ T44] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 152.606432][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.606443][ T44] usb 4-1: Product: syz [ 152.606450][ T44] usb 4-1: Manufacturer: syz [ 152.606458][ T44] usb 4-1: SerialNumber: syz [ 152.643744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 152.682555][ T44] usb 4-1: config 0 descriptor?? [ 152.709272][ T44] go7007-loader 4-1:0.0: can't handle multiple config [ 152.709287][ T44] go7007-loader 4-1:0.0: probe failed [ 152.857395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.144405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 153.656104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 153.807438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.847418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.887406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.897450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.967402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.422190][ T6036] usb 4-1: USB disconnect, device number 5 [ 156.359655][ T6433] overlayfs: overlapping lowerdir path [ 157.261626][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.847435][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 157.851321][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 157.851336][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.851346][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.851368][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 157.854058][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.854087][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.854107][ T10] usb 5-1: Product: Г [ 157.854122][ T10] usb 5-1: Manufacturer: Ѝ [ 157.854137][ T10] usb 5-1: SerialNumber: о [ 158.405207][ T6036] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.701242][ T6036] usb 4-1: Using ep0 maxpacket: 8 [ 163.285803][ T10] usb 5-1: 0:2 : does not exist [ 163.401447][ T6036] usb 4-1: device descriptor read/all, error -71 [ 163.530280][ T6447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.162'. [ 163.813339][ T10] usb 5-1: USB disconnect, device number 5 [ 165.766179][ T6469] FAULT_INJECTION: forcing a failure. [ 165.766179][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 165.766212][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.4.170 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.766234][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.766245][ T6469] Call Trace: [ 165.766253][ T6469] [ 165.766261][ T6469] dump_stack_lvl+0x189/0x250 [ 165.766293][ T6469] ? __pfx____ratelimit+0x10/0x10 [ 165.766317][ T6469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.766342][ T6469] ? __pfx__printk+0x10/0x10 [ 165.766370][ T6469] ? __lock_acquire+0xab9/0xd20 [ 165.766401][ T6469] should_fail_ex+0x46c/0x600 [ 165.766430][ T6469] ? skb_clone+0x212/0x3a0 [ 165.766451][ T6469] should_failslab+0xa8/0x100 [ 165.766477][ T6469] ? skb_clone+0x212/0x3a0 [ 165.766496][ T6469] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 165.766529][ T6469] skb_clone+0x212/0x3a0 [ 165.766554][ T6469] __netlink_deliver_tap+0x404/0x850 [ 165.766589][ T6469] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.766610][ T6469] netlink_deliver_tap+0x19c/0x1b0 [ 165.766632][ T6469] netlink_unicast+0x811/0xa10 [ 165.766668][ T6469] ? __pfx_netlink_unicast+0x10/0x10 [ 165.766696][ T6469] ? netlink_sendmsg+0x642/0xb30 [ 165.766713][ T6469] ? skb_put+0x11b/0x210 [ 165.766737][ T6469] netlink_sendmsg+0x805/0xb30 [ 165.766754][ T6469] ? is_bpf_text_address+0x26/0x2b0 [ 165.766790][ T6469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.766818][ T6469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.766843][ T6469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.766864][ T6469] __sock_sendmsg+0x21c/0x270 [ 165.766899][ T6469] ____sys_sendmsg+0x508/0x820 [ 165.766927][ T6469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.766959][ T6469] ? import_iovec+0x74/0xa0 [ 165.766983][ T6469] ___sys_sendmsg+0x21f/0x2a0 [ 165.767008][ T6469] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.767069][ T6469] ? __fget_files+0x2a/0x420 [ 165.767092][ T6469] ? __fget_files+0x3a6/0x420 [ 165.767127][ T6469] __x64_sys_sendmsg+0x1a1/0x260 [ 165.767151][ T6469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.767183][ T6469] ? __pfx_ksys_write+0x10/0x10 [ 165.767210][ T6469] ? do_syscall_64+0xbe/0xfa0 [ 165.767238][ T6469] do_syscall_64+0xfa/0xfa0 [ 165.767259][ T6469] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.767282][ T6469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.767300][ T6469] ? clear_bhb_loop+0x60/0xb0 [ 165.767323][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.767342][ T6469] RIP: 0033:0x7fdfbda8f6c9 [ 165.767356][ T6469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.767371][ T6469] RSP: 002b:00007fdfbbcf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.767390][ T6469] RAX: ffffffffffffffda RBX: 00007fdfbdce5fa0 RCX: 00007fdfbda8f6c9 [ 165.767404][ T6469] RDX: 0000000024000840 RSI: 0000200000000180 RDI: 0000000000000003 [ 165.767416][ T6469] RBP: 00007fdfbbcf6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.767428][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.767439][ T6469] R13: 00007fdfbdce6038 R14: 00007fdfbdce5fa0 R15: 00007ffdceeb20f8 [ 165.767473][ T6469] [ 166.688842][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.176'. [ 166.689006][ T6473] FAULT_INJECTION: forcing a failure. [ 166.689006][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 166.689032][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.689054][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.689064][ T6473] Call Trace: [ 166.689072][ T6473] [ 166.689080][ T6473] dump_stack_lvl+0x189/0x250 [ 166.689110][ T6473] ? __pfx____ratelimit+0x10/0x10 [ 166.689134][ T6473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.689159][ T6473] ? __pfx__printk+0x10/0x10 [ 166.689188][ T6473] ? __pfx___might_resched+0x10/0x10 [ 166.689218][ T6473] should_fail_ex+0x46c/0x600 [ 166.689248][ T6473] ? security_inode_alloc+0x39/0x330 [ 166.689270][ T6473] should_failslab+0xa8/0x100 [ 166.689297][ T6473] ? security_inode_alloc+0x39/0x330 [ 166.689317][ T6473] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 166.689349][ T6473] security_inode_alloc+0x39/0x330 [ 166.689374][ T6473] inode_init_always_gfp+0x9bf/0xd70 [ 166.689406][ T6473] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 166.689430][ T6473] alloc_inode+0x82/0x1b0 [ 166.689455][ T6473] new_inode+0x22/0x170 [ 166.689483][ T6473] __debugfs_create_file+0x14d/0x4f0 [ 166.689512][ T6473] debugfs_create_file_full+0x3f/0x60 [ 166.689539][ T6473] ref_tracker_dir_debugfs+0x154/0x270 [ 166.689564][ T6473] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 166.689617][ T6473] ? rcu_is_watching+0x15/0xb0 [ 166.689650][ T6473] alloc_netdev_mqs+0x277/0x11c0 [ 166.689672][ T6473] ? __pfx_hsr_dev_setup+0x10/0x10 [ 166.689698][ T6473] rtnl_create_link+0x31f/0xd10 [ 166.689729][ T6473] rtnl_newlink_create+0x25c/0xb00 [ 166.689770][ T6473] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 166.689789][ T6473] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 166.689817][ T6473] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 166.689844][ T6473] ? bpf_lsm_capable+0x9/0x20 [ 166.689863][ T6473] ? security_capable+0x7e/0x2e0 [ 166.689896][ T6473] rtnl_newlink+0x16e4/0x1c80 [ 166.689916][ T6473] ? netlink_deliver_tap+0x19c/0x1b0 [ 166.689949][ T6473] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.689985][ T6473] ? __local_bh_enable+0x27b/0x410 [ 166.690013][ T6473] ? __local_bh_enable+0x28c/0x410 [ 166.690032][ T6473] ? reacquire_held_locks+0x127/0x1d0 [ 166.690061][ T6473] ? __pfx___local_bh_enable+0x10/0x10 [ 166.690091][ T6473] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 166.690113][ T6473] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.690144][ T6473] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 166.690164][ T6473] ? dev_hard_start_xmit+0x7f5/0x870 [ 166.690186][ T6473] ? __dev_queue_xmit+0x26f/0x3b70 [ 166.690216][ T6473] ? __dev_queue_xmit+0x26f/0x3b70 [ 166.690237][ T6473] ? __dev_queue_xmit+0x26f/0x3b70 [ 166.690261][ T6473] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 166.690289][ T6473] ? __lock_acquire+0xab9/0xd20 [ 166.690340][ T6473] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.690358][ T6473] rtnetlink_rcv_msg+0x7cf/0xb70 [ 166.690380][ T6473] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 166.690397][ T6473] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.690412][ T6473] ? ref_tracker_free+0x61e/0x7c0 [ 166.690437][ T6473] ? __asan_memcpy+0x40/0x70 [ 166.690457][ T6473] ? __pfx_ref_tracker_free+0x10/0x10 [ 166.690479][ T6473] ? __skb_clone+0x63/0x7a0 [ 166.690511][ T6473] netlink_rcv_skb+0x208/0x470 [ 166.690531][ T6473] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.690552][ T6473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.690584][ T6473] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.690613][ T6473] netlink_unicast+0x846/0xa10 [ 166.690649][ T6473] ? __pfx_netlink_unicast+0x10/0x10 [ 166.690677][ T6473] ? netlink_sendmsg+0x642/0xb30 [ 166.690694][ T6473] ? skb_put+0x11b/0x210 [ 166.690718][ T6473] netlink_sendmsg+0x805/0xb30 [ 166.690736][ T6473] ? is_bpf_text_address+0x26/0x2b0 [ 166.690777][ T6473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.690806][ T6473] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.690830][ T6473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.690851][ T6473] __sock_sendmsg+0x21c/0x270 [ 166.690879][ T6473] ____sys_sendmsg+0x508/0x820 [ 166.690907][ T6473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.690939][ T6473] ? import_iovec+0x74/0xa0 [ 166.690964][ T6473] ___sys_sendmsg+0x21f/0x2a0 [ 166.690988][ T6473] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.691051][ T6473] ? __fget_files+0x2a/0x420 [ 166.691074][ T6473] ? __fget_files+0x3a6/0x420 [ 166.691109][ T6473] __x64_sys_sendmsg+0x1a1/0x260 [ 166.691134][ T6473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.691167][ T6473] ? __pfx_ksys_write+0x10/0x10 [ 166.691194][ T6473] ? do_syscall_64+0xbe/0xfa0 [ 166.691221][ T6473] do_syscall_64+0xfa/0xfa0 [ 166.691242][ T6473] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.691265][ T6473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.691283][ T6473] ? clear_bhb_loop+0x60/0xb0 [ 166.691306][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.691324][ T6473] RIP: 0033:0x7fe2d324f6c9 [ 166.691340][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.691355][ T6473] RSP: 002b:00007fe2d14b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.691375][ T6473] RAX: ffffffffffffffda RBX: 00007fe2d34a5fa0 RCX: 00007fe2d324f6c9 [ 166.691388][ T6473] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 166.691400][ T6473] RBP: 00007fe2d14b6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.691412][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.691423][ T6473] R13: 00007fe2d34a6038 R14: 00007fe2d34a5fa0 R15: 00007ffda6514718 [ 166.691457][ T6473] [ 166.691524][ T6473] debugfs: out of free dentries, can not create file 'netdev@ffff88805d570698' [ 168.347477][ T5790] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.507569][ T5790] usb 4-1: Using ep0 maxpacket: 16 [ 168.548877][ T5790] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 168.548908][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.548928][ T5790] usb 4-1: Product: syz [ 168.548943][ T5790] usb 4-1: Manufacturer: syz [ 168.548957][ T5790] usb 4-1: SerialNumber: syz [ 168.627518][ T5790] r8152-cfgselector 4-1: Unknown version 0x0000 [ 168.627554][ T5790] r8152-cfgselector 4-1: config 0 descriptor?? [ 168.796872][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.257591][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.398163][ T5878] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 169.409287][ T10] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 169.409314][ T10] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 169.409333][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.409352][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 169.409371][ T10] usb 1-1: config 0 has no interface number 0 [ 169.409421][ T10] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 169.409443][ T10] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 169.409468][ T10] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.409489][ T10] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.409529][ T10] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 169.409552][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.626044][ T10] usb 1-1: config 0 descriptor?? [ 169.737852][ T6499] mmap: syz.2.171 (6499) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.873495][ T6499] dvmrp1: entered allmulticast mode [ 169.896876][ T6502] dvmrp1: left allmulticast mode [ 170.012552][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 171.091681][ T10] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 171.093326][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.093425][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 171.307513][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 171.478633][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 171.505952][ T5878] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 171.505981][ T5878] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 171.506000][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.506019][ T5878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 171.506040][ T5878] usb 2-1: config 0 has no interface number 0 [ 171.565808][ T5878] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 171.565837][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.565857][ T5878] usb 2-1: Product: syz [ 171.565872][ T5878] usb 2-1: Manufacturer: syz [ 171.565886][ T5878] usb 2-1: SerialNumber: syz [ 171.610767][ T10] usb 1-1: USB disconnect, device number 5 [ 171.643426][ T5878] usb 2-1: config 0 descriptor?? [ 172.060933][ T5790] usb 2-1: USB disconnect, device number 5 [ 174.222494][ T6544] sctp: [Deprecated]: syz.3.197 (pid 6544) Use of int in max_burst socket option. [ 174.222494][ T6544] Use struct sctp_assoc_value instead [ 178.007200][ T6563] netlink: 'syz.1.202': attribute type 12 has an invalid length. [ 178.007221][ T6563] netlink: 'syz.1.202': attribute type 29 has an invalid length. [ 178.007235][ T6563] netlink: 148 bytes leftover after parsing attributes in process `syz.1.202'. [ 178.007256][ T6563] netlink: 59 bytes leftover after parsing attributes in process `syz.1.202'. [ 178.357538][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.327588][ T5950] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.450409][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 179.754799][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 179.754827][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 179.794138][ T5950] usb 1-1: config index 0 descriptor too short (expected 27675, got 27) [ 179.794167][ T5950] usb 1-1: config 15 has an invalid descriptor of length 238, skipping remainder of the config [ 179.794187][ T5950] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 10 [ 179.798575][ T5950] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=46.8f [ 179.798656][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.798677][ T5950] usb 1-1: Product: syz [ 179.798691][ T5950] usb 1-1: Manufacturer: syz [ 179.798706][ T5950] usb 1-1: SerialNumber: syz [ 181.293129][ T9] usb 4-1: device descriptor read/all, error -71 [ 181.314878][ T5950] usb 1-1: USB disconnect, device number 6 [ 183.502548][ T6583] binder: 6575:6583 ioctl c018620c 200000000000 returned -22 [ 184.039037][ T6587] overlayfs: overlapping lowerdir path [ 184.625609][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.001089][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.123178][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.156005][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.007675][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.477105][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.523656][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.555298][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.659837][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.847858][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.910228][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.941685][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.974380][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.006470][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.063398][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.081038][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.118468][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.150375][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.183293][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.215151][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.243624][ T6610] veth0: entered promiscuous mode [ 187.244810][ T6609] veth0: left promiscuous mode [ 187.291809][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.322876][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.355557][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.384954][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.460071][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.489020][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.520090][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.576531][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.608810][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.638716][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.668653][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.699934][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.749361][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.845340][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.877954][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.944026][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.993720][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.026914][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.058794][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.090302][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.177364][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.208443][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.241647][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.273007][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.327575][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.378162][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.444762][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.476606][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.529077][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.561095][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.611791][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.644072][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.675846][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.705847][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.811566][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.844588][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.864079][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.911389][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.944613][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.976199][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.007764][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.050851][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.387091][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.420330][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.886908][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.901752][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.903217][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.905423][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.908291][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.928820][ T6626] FAULT_INJECTION: forcing a failure. [ 191.928820][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 191.928866][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.1.220 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.928887][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.928898][ T6626] Call Trace: [ 191.928905][ T6626] [ 191.928914][ T6626] dump_stack_lvl+0x189/0x250 [ 191.928951][ T6626] ? __pfx____ratelimit+0x10/0x10 [ 191.928973][ T6626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.928999][ T6626] ? __pfx__printk+0x10/0x10 [ 191.929026][ T6626] ? __pfx___might_resched+0x10/0x10 [ 191.929045][ T6626] ? fs_reclaim_acquire+0x7d/0x100 [ 191.929074][ T6626] should_fail_ex+0x46c/0x600 [ 191.929103][ T6626] should_failslab+0xa8/0x100 [ 191.929136][ T6626] __kmalloc_noprof+0xcc/0x7d0 [ 191.929159][ T6626] ? sock_kmalloc+0xd6/0x160 [ 191.929187][ T6626] sock_kmalloc+0xd6/0x160 [ 191.929215][ T6626] ____sys_sendmsg+0x1b5/0x820 [ 191.929244][ T6626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.929275][ T6626] ? import_iovec+0x74/0xa0 [ 191.929299][ T6626] ___sys_sendmsg+0x21f/0x2a0 [ 191.929323][ T6626] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.929381][ T6626] ? __fget_files+0x2a/0x420 [ 191.929405][ T6626] ? __fget_files+0x3a6/0x420 [ 191.929439][ T6626] __sys_sendmmsg+0x22d/0x430 [ 191.929465][ T6626] ? __pfx___sys_sendmmsg+0x10/0x10 [ 191.929496][ T6626] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 191.929532][ T6626] ? ksys_write+0x230/0x260 [ 191.929555][ T6626] ? __pfx_ksys_write+0x10/0x10 [ 191.929581][ T6626] __x64_sys_sendmmsg+0xa0/0xc0 [ 191.929606][ T6626] do_syscall_64+0xfa/0xfa0 [ 191.929627][ T6626] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.929649][ T6626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.929667][ T6626] ? clear_bhb_loop+0x60/0xb0 [ 191.929689][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.929706][ T6626] RIP: 0033:0x7fe2d324f6c9 [ 191.929730][ T6626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.929744][ T6626] RSP: 002b:00007fe2d14b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.929763][ T6626] RAX: ffffffffffffffda RBX: 00007fe2d34a5fa0 RCX: 00007fe2d324f6c9 [ 191.929776][ T6626] RDX: 0000000000000003 RSI: 000020000000d040 RDI: 0000000000000006 [ 191.929787][ T6626] RBP: 00007fe2d14b6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.929799][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.929810][ T6626] R13: 00007fe2d34a6038 R14: 00007fe2d34a5fa0 R15: 00007ffda6514718 [ 191.929842][ T6626] [ 191.977519][ T5119] Bluetooth: hci5: command tx timeout [ 194.217782][ T5119] Bluetooth: hci5: command tx timeout [ 194.561409][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561480][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.317445][ T5119] Bluetooth: hci5: command tx timeout [ 197.120413][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 197.137729][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 197.137757][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 198.049581][ T5878] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 198.397459][ T5119] Bluetooth: hci5: command tx timeout [ 198.645378][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.645411][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.645455][ T5878] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.645477][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.297611][ T5878] usb 4-1: config 0 descriptor?? [ 199.373736][ T5878] hub 4-1:0.0: USB hub found [ 199.377630][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.231'. [ 199.377657][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 201.757833][ T5878] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 201.805903][ T5878] usbhid 4-1:0.0: can't add hid device: -71 [ 201.806031][ T5878] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 201.908187][ T5878] usb 4-1: USB disconnect, device number 11 [ 201.948835][ T6663] macvlan0: entered allmulticast mode [ 201.948857][ T6663] veth1_vlan: entered allmulticast mode [ 203.411424][ T6678] netlink: 'syz.3.237': attribute type 12 has an invalid length. [ 203.411448][ T6678] netlink: 'syz.3.237': attribute type 29 has an invalid length. [ 203.411462][ T6678] netlink: 148 bytes leftover after parsing attributes in process `syz.3.237'. [ 203.435231][ T6678] netlink: 59 bytes leftover after parsing attributes in process `syz.3.237'. [ 203.467469][ T5878] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 203.675489][ T5878] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 203.675515][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.675534][ T5878] usb 2-1: config 0 has no interface number 0 [ 203.675580][ T5878] usb 2-1: config 0 interface 214 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.675607][ T5878] usb 2-1: config 0 interface 214 has no altsetting 0 [ 203.734908][ T5878] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 203.734940][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.734961][ T5878] usb 2-1: Product: syz [ 203.734976][ T5878] usb 2-1: Manufacturer: syz [ 203.734990][ T5878] usb 2-1: SerialNumber: syz [ 203.793383][ T5878] usb 2-1: config 0 descriptor?? [ 203.863156][ T5878] ax88179_178a 2-1:0.214: probe with driver ax88179_178a failed with error -22 [ 204.397935][ T5878] usb 2-1: USB disconnect, device number 6 [ 205.137657][ T5950] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 205.221471][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.226257][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.231087][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.232379][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.233217][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.277462][ T5950] usb 1-1: device descriptor read/64, error -71 [ 205.410112][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.410246][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.410483][ T6615] bridge_slave_0: entered allmulticast mode [ 205.429036][ T6615] bridge_slave_0: entered promiscuous mode [ 205.471590][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.471727][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.471959][ T6615] bridge_slave_1: entered allmulticast mode [ 205.474794][ T6615] bridge_slave_1: entered promiscuous mode [ 205.617572][ T5950] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 205.747605][ T5950] usb 1-1: device descriptor read/64, error -71 [ 205.858095][ T5950] usb usb1-port1: attempt power cycle [ 205.902818][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 205.902847][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 206.957498][ T5950] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.196529][ T5950] usb 1-1: device descriptor read/8, error -71 [ 207.257475][ T5119] Bluetooth: hci6: command tx timeout [ 207.487478][ T5950] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.697466][ T5950] usb 1-1: device not accepting address 10, error -71 [ 207.745590][ T5950] usb usb1-port1: unable to enumerate USB device [ 209.337423][ T5119] Bluetooth: hci6: command tx timeout [ 209.341878][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.508675][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.422397][ T5805] Bluetooth: hci6: command tx timeout [ 211.825499][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 211.825621][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 211.825647][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 211.825671][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 213.165865][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 213.165894][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 213.497543][ T61] Bluetooth: hci6: command tx timeout [ 213.799702][ T6615] team0: Port device team_slave_0 added [ 213.837451][ T44] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 213.979599][ T6615] team0: Port device team_slave_1 added [ 214.595705][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 214.747421][ T44] usb 1-1: not running at top speed; connect to a high speed hub [ 214.747491][ T44] usb 1-1: too many configurations: 40, using maximum allowed: 8 [ 214.756856][ T44] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 214.756902][ T44] usb 1-1: can't read configurations, error -61 [ 214.936538][ T44] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 216.750518][ T6732] Driver unsupported XDP return value 0 on prog (id 66) dev N/A, expect packet loss! [ 221.058488][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.058505][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.058530][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.499210][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.499226][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.499252][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.157441][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 223.311025][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 223.313720][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.313753][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.313793][ T44] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 223.313815][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.338861][ T44] usb 2-1: config 0 descriptor?? [ 224.600940][ T44] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 224.795737][ T44] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 224.913450][ T44] ft260 0003:0403:6030.0002: failed to retrieve system status [ 224.914421][ T44] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 225.480422][ T44] usb 2-1: USB disconnect, device number 7 [ 226.976258][ T6615] hsr_slave_0: entered promiscuous mode [ 227.192355][ T5790] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 227.246080][ T6615] hsr_slave_1: entered promiscuous mode [ 227.277657][ T6615] debugfs: 'hsr0' already exists in 'hsr' [ 227.277683][ T6615] Cannot create hsr debugfs directory [ 227.483966][ T5790] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.484708][ T5790] usb 4-1: not running at top speed; connect to a high speed hub [ 227.486202][ T5790] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 227.486226][ T5790] usb 4-1: config 1 has no interface number 0 [ 227.486547][ T5790] usb 4-1: config 1 interface 138 has no altsetting 0 [ 227.518219][ T5790] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 227.518250][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.518269][ T5790] usb 4-1: Product: syz [ 227.518283][ T5790] usb 4-1: Manufacturer: syz [ 227.518297][ T5790] usb 4-1: SerialNumber: syz [ 227.546060][ T6784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.271'. [ 229.181845][ T6785] syz.3.268 uses obsolete (PF_INET,SOCK_PACKET) [ 234.037766][ T5790] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.745016][ T5790] usb 4-1: USB disconnect, device number 12 [ 236.304596][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.502682][ T6809] fuse: Unknown parameter 'u0x0000000000000003' [ 238.925527][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 242.296174][ T37] audit: type=1326 audit(1762299926.149:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6816 comm="syz.3.278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81ec34f6c9 code=0x0 [ 244.166756][ T5119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.187112][ T5119] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.200698][ T5119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.201914][ T5119] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.202692][ T5119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.337567][ T5119] Bluetooth: hci7: command tx timeout [ 247.438878][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.439017][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.439281][ T6686] bridge_slave_0: entered allmulticast mode [ 247.441978][ T6686] bridge_slave_0: entered promiscuous mode [ 247.657720][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.657860][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.658101][ T6686] bridge_slave_1: entered allmulticast mode [ 247.697044][ T6686] bridge_slave_1: entered promiscuous mode [ 249.421507][ T5119] Bluetooth: hci7: command tx timeout [ 249.481762][ T5812] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 249.499914][ T5812] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 249.501204][ T5812] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 249.514310][ T5812] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 249.541376][ T5812] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 251.597355][ T5812] Bluetooth: hci7: command tx timeout [ 251.657611][ T5812] Bluetooth: hci8: command tx timeout [ 253.657484][ T5812] Bluetooth: hci7: command tx timeout [ 253.737449][ T5812] Bluetooth: hci8: command tx timeout [ 255.835270][ T5119] Bluetooth: hci8: command tx timeout [ 255.853965][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.859321][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.937698][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.978171][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.978241][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.008722][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.009556][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.007466][ T5812] Bluetooth: hci8: command tx timeout [ 258.059693][ T5812] Bluetooth: hci4: command tx timeout [ 259.009649][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.147457][ T5812] Bluetooth: hci4: command tx timeout [ 262.247349][ T5812] Bluetooth: hci4: command tx timeout [ 262.328166][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.346768][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.354909][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.356173][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.367519][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.692526][ T5119] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 263.706584][ T5119] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 263.716862][ T5119] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 263.739566][ T5119] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 263.747625][ T5119] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 264.439983][ T61] Bluetooth: hci4: command tx timeout [ 265.758783][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 265.887617][ T61] Bluetooth: hci9: command tx timeout [ 265.887831][ T61] Bluetooth: hci5: command tx timeout [ 267.897516][ T61] Bluetooth: hci9: command tx timeout [ 267.898892][ T5812] Bluetooth: hci5: command tx timeout [ 269.977523][ T61] Bluetooth: hci9: command tx timeout [ 269.979723][ T5812] Bluetooth: hci5: command tx timeout [ 272.097455][ T5812] Bluetooth: hci5: command tx timeout [ 272.097489][ T5812] Bluetooth: hci9: command tx timeout [ 274.167825][ T6833] chnl_net:caif_netlink_parms(): no params data found [ 280.437534][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.437670][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.437892][ T6826] bridge_slave_0: entered allmulticast mode [ 280.472937][ T6826] bridge_slave_0: entered promiscuous mode [ 280.484228][ T6837] chnl_net:caif_netlink_parms(): no params data found [ 280.569411][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.569621][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.569872][ T6826] bridge_slave_1: entered allmulticast mode [ 280.663877][ T6826] bridge_slave_1: entered promiscuous mode [ 286.071643][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.330990][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.514661][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.514816][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.515072][ T6833] bridge_slave_0: entered allmulticast mode [ 287.528191][ T6833] bridge_slave_0: entered promiscuous mode [ 290.732294][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.732433][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.732661][ T6833] bridge_slave_1: entered allmulticast mode [ 290.735500][ T6833] bridge_slave_1: entered promiscuous mode [ 293.773258][ T6826] team0: Port device team_slave_0 added [ 300.199678][ T6826] team0: Port device team_slave_1 added [ 300.200363][ T6837] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.200509][ T6837] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.200715][ T6837] bridge_slave_0: entered allmulticast mode [ 300.313022][ T6837] bridge_slave_0: entered promiscuous mode [ 300.503606][ T6833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.996684][ T6837] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.017647][ T6837] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.017939][ T6837] bridge_slave_1: entered allmulticast mode [ 302.020883][ T6837] bridge_slave_1: entered promiscuous mode [ 302.030917][ T6833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.751875][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.754470][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.755616][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.757169][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.788427][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.149403][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.149420][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.149444][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.660658][ T61] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 307.686950][ T61] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 307.743749][ T61] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 307.745326][ T61] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 307.746076][ T61] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 307.821877][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 307.828669][ T5812] Bluetooth: hci6: command tx timeout [ 307.871653][ T6837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.955394][ T6837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.984624][ T6843] chnl_net:caif_netlink_parms(): no params data found [ 309.819339][ T5812] Bluetooth: hci10: command tx timeout [ 309.897464][ T5812] Bluetooth: hci6: command tx timeout [ 311.897471][ T5812] Bluetooth: hci10: command tx timeout [ 312.003660][ T5812] Bluetooth: hci6: command tx timeout [ 313.977593][ T5812] Bluetooth: hci10: command tx timeout [ 314.057408][ T5812] Bluetooth: hci6: command tx timeout [ 315.411040][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.417161][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.432967][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.442047][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.447522][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.057444][ T5812] Bluetooth: hci10: command tx timeout [ 317.263462][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.263532][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.658909][ T5812] Bluetooth: hci7: command tx timeout [ 318.776344][ T6837] team0: Port device team_slave_0 added [ 319.857423][ T5812] Bluetooth: hci7: command tx timeout [ 321.379703][ T6845] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 321.897385][ T5812] Bluetooth: hci7: command tx timeout [ 323.977662][ T5812] Bluetooth: hci7: command tx timeout [ 325.301365][ T61] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 325.314781][ T61] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 325.321586][ T61] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 325.341024][ T61] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 325.343498][ T61] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 325.558605][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 325.562194][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 325.566159][ T5119] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 325.618552][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 325.786277][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 327.577403][ T61] Bluetooth: hci11: command tx timeout [ 328.046268][ T61] Bluetooth: hci8: command tx timeout [ 328.782156][ T38] INFO: task syz.4.208:6575 blocked for more than 143 seconds. [ 328.782179][ T38] Not tainted syzkaller #0 [ 328.782189][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.782198][ T38] task:syz.4.208 state:D stack:25160 pid:6575 tgid:6575 ppid:5802 task_flags:0x400040 flags:0x00080003 [ 328.782266][ T38] Call Trace: [ 328.782273][ T38] [ 328.782288][ T38] __schedule+0x16f3/0x4c20 [ 328.782346][ T38] ? __pfx___schedule+0x10/0x10 [ 328.782392][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.782420][ T38] rt_mutex_schedule+0x77/0xf0 [ 328.782441][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 328.782462][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 328.782501][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 328.782523][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 328.782545][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 328.782563][ T38] ? __lock_acquire+0xab9/0xd20 [ 328.782600][ T38] ? rcu_barrier+0x4c/0x570 [ 328.782628][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 328.782653][ T38] ? rcu_barrier+0x4c/0x570 [ 328.782670][ T38] mutex_lock_nested+0x16a/0x1d0 [ 328.782688][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 328.782714][ T38] rcu_barrier+0x4c/0x570 [ 328.782736][ T38] ? rt_write_unlock+0x191/0x230 [ 328.782763][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 328.782790][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 328.782818][ T38] kvm_put_kvm+0x6ca/0xa80 [ 328.782860][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 328.782884][ T38] kvm_vm_release+0x46/0x50 [ 328.782906][ T38] __fput+0x45b/0xa80 [ 328.782939][ T38] task_work_run+0x1d4/0x260 [ 328.782963][ T38] ? __pfx_task_work_run+0x10/0x10 [ 328.782986][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 328.783015][ T38] exit_to_user_mode_loop+0xe9/0x130 [ 328.783039][ T38] do_syscall_64+0x2bd/0xfa0 [ 328.783062][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.783084][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.783103][ T38] ? clear_bhb_loop+0x60/0xb0 [ 328.783127][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.783146][ T38] RIP: 0033:0x7fdfbda8f6c9 [ 328.783163][ T38] RSP: 002b:00007ffdceeb2258 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 328.783183][ T38] RAX: 0000000000000000 RBX: 00007fdfbdce7da0 RCX: 00007fdfbda8f6c9 [ 328.783196][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 328.783207][ T38] RBP: 00007fdfbdce7da0 R08: 00000000000001e4 R09: 00000019ceeb254f [ 328.783218][ T38] R10: 00007fdfbdce7cb0 R11: 0000000000000246 R12: 000000000002cc8b [ 328.783231][ T38] R13: 00007fdfbdce6180 R14: ffffffffffffffff R15: 00007ffdceeb2370 [ 328.783266][ T38] [ 328.783308][ T38] [ 328.783308][ T38] Showing all locks held in the system: [ 328.783320][ T38] 3 locks held by kworker/0:1/10: [ 328.783333][ T38] 4 locks held by ksoftirqd/0/15: [ 328.783344][ T38] 4 locks held by rcuc/0/20: [ 328.783355][ T38] 3 locks held by rcuc/1/28: [ 328.783366][ T38] 3 locks held by kworker/1:0/31: [ 328.783377][ T38] 1 lock held by khungtaskd/38: [ 328.783387][ T38] #0: ffffffff8d5aa800 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 328.783437][ T38] 4 locks held by kworker/u8:3/59: [ 328.783448][ T38] 3 locks held by kworker/u8:5/88: [ 328.783458][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 328.783511][ T38] #1: ffffc900015efba0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 328.783557][ T38] #2: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.783609][ T38] 10 locks held by kworker/u8:11/1499: [ 328.783631][ T38] 2 locks held by getty/5561: [ 328.783640][ T38] #0: ffff88823bf360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 328.783686][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 328.783734][ T38] 1 lock held by syz-executor/5819: [ 328.783744][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.783792][ T38] 1 lock held by syz.2.171/6502: [ 328.783802][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.783852][ T38] 1 lock held by syz.4.208/6575: [ 328.783863][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.783906][ T38] 1 lock held by syz-executor/6615: [ 328.783917][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.783961][ T38] 1 lock held by syz-executor/6686: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.783971][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.784013][ T38] 1 lock held by syz.0.276/6808: [ 328.784024][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.784067][ T38] 1 lock held by syz.3.277/6814: [ 328.784077][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.784120][ T38] 1 lock held by syz.3.278/6816: [ 328.784130][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.784174][ T38] 1 lock held by syz-executor/6826: [ 328.784184][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.784224][ T38] 1 lock held by syz-executor/6833: [ 328.784235][ T38] #0: ffffffff8d5b01b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 328.784278][ T38] 1 lock held by syz-executor/6837: [ 328.784288][ T38] #0: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 328.784335][ T38] 4 locks held by syz-executor/6843: [ 328.784346][ T38] #0: ffff88806fbbce88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 328.784391][ T38] #1: ffff88806fbbc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 328.784438][ T38] #2: ffffffff8e9cb6b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 328.784488][ T38] #3: ffff8880354a4b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 328.784541][ T38] 3 locks held by syz-executor/6845: [ 328.784552][ T38] #0: ffff88805ddc4e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 328.784596][ T38] #1: ffff88805ddc40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 328.784643][ T38] #2: ffffffff8e9cb6b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 328.784695][ T38] 2 locks held by syz-executor/6872: [ 328.784705][ T38] #0: ffffffff8ed7e828 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 328.784754][ T38] #1: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 328.784796][ T38] 2 locks held by syz-executor/6877: [ 328.784807][ T38] #0: ffffffff8ed64438 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 328.784858][ T38] #1: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 328.784898][ T38] 2 locks held by syz-executor/6887: [ 328.784908][ T38] #0: ffffffff8e856320 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 328.784949][ T38] #1: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 328.784994][ T38] 1 lock held by syz-executor/6899: [ 328.785004][ T38] #0: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 328.785046][ T38] 1 lock held by syz-executor/6900: [ 328.785056][ T38] #0: ffffffff8e863238 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 328.785104][ T38] [ 328.785109][ T38] ============================================= [ 328.785109][ T38] [ 328.785123][ T38] NMI backtrace for cpu 0 [ 328.785137][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 328.785157][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.785167][ T38] Call Trace: [ 328.785175][ T38] [ 328.785182][ T38] dump_stack_lvl+0x189/0x250 [ 328.785212][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.785238][ T38] ? __pfx__printk+0x10/0x10 [ 328.785273][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 328.785296][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 328.785317][ T38] ? __pfx__printk+0x10/0x10 [ 328.785343][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.785367][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 328.785389][ T38] watchdog+0xf60/0xfa0 [ 328.785419][ T38] ? watchdog+0x1e2/0xfa0 [ 328.785449][ T38] kthread+0x711/0x8a0 [ 328.785477][ T38] ? __pfx_watchdog+0x10/0x10 [ 328.785499][ T38] ? __pfx_kthread+0x10/0x10 [ 328.785520][ T38] ? rt_spin_unlock+0x150/0x200 [ 328.785544][ T38] ? rt_spin_unlock+0x161/0x200 [ 328.785562][ T38] ? __pfx_kthread+0x10/0x10 [ 328.785588][ T38] ret_from_fork+0x4bc/0x870 [ 328.785612][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 328.785641][ T38] ? __switch_to_asm+0x39/0x70 [ 328.785658][ T38] ? __switch_to_asm+0x33/0x70 [ 328.785675][ T38] ? __pfx_kthread+0x10/0x10 [ 328.785721][ T38] ret_from_fork_asm+0x1a/0x30 [ 328.785758][ T38] [ 328.785765][ T38] Sending NMI from CPU 0 to CPUs 1: [ 328.785793][ C1] NMI backtrace for cpu 1 [ 328.785807][ C1] CPU: 1 UID: 0 PID: 1499 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 328.785825][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.785835][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 328.785857][ C1] RIP: 0010:stack_trace_consume_entry+0xd/0x280 [ 328.785875][ C1] Code: cc cc cc e8 75 83 15 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 18 48 ba 00 00 00 00 00 fc ff df 4c 8d 47 10 4c 89 c5 [ 328.785888][ C1] RSP: 0018:ffffc9000561e5d8 EFLAGS: 00000286 [ 328.785901][ C1] RAX: ffffffff889d57bd RBX: ffffc9000561e6c0 RCX: f3a9ac122fbab200 [ 328.785914][ C1] RDX: 0000000000000001 RSI: ffffffff889d57bd RDI: ffffc9000561e6c0 [ 328.785924][ C1] RBP: ffffc9000561e690 R08: ffffc9000561ea00 R09: 0000000000000000 [ 328.785936][ C1] R10: ffffc9000561e658 R11: ffffffff81aadd90 R12: ffff888027781e00 [ 328.785948][ C1] R13: 00000000ffffffff R14: ffffffff81aadd90 R15: ffffc9000561e608 [ 328.785959][ C1] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 328.785972][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.785983][ C1] CR2: 00007ffd0ed24da8 CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 328.785998][ C1] Call Trace: [ 328.786003][ C1] [ 328.786010][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 328.786027][ C1] arch_stack_walk+0x110/0x150 [ 328.786049][ C1] ? kmalloc_reserve+0xbd/0x290 [ 328.786067][ C1] stack_trace_save+0x9c/0xe0 [ 328.786089][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 328.786104][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 328.786126][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 328.786145][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.786165][ C1] kasan_save_track+0x3e/0x80 [ 328.786182][ C1] ? kasan_save_track+0x3e/0x80 [ 328.786198][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 328.786216][ C1] ? kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 328.786259][ C1] ? __slab_alloc+0xc6/0x1f0 [ 328.786274][ C1] __kasan_slab_alloc+0x6c/0x80 [ 328.786293][ C1] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 328.786311][ C1] ? kmalloc_reserve+0xbd/0x290 [ 328.786325][ C1] ? __alloc_skb+0x112/0x2d0 [ 328.786338][ C1] ? rcu_is_watching+0x15/0xb0 [ 328.786355][ C1] kmalloc_reserve+0xbd/0x290 [ 328.786372][ C1] __alloc_skb+0x142/0x2d0 [ 328.786389][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 328.786414][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 328.786431][ C1] ? nft_fib_netdev_eval+0xa0/0x250 [ 328.786449][ C1] ? synproxy_pernet+0x45/0x270 [ 328.786471][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 328.786495][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 328.786515][ C1] ? nf_ip_checksum+0x13c/0x510 [ 328.786537][ C1] nft_synproxy_do_eval+0x345/0x570 [ 328.786559][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 328.786587][ C1] nft_do_chain+0x40c/0x1920 [ 328.786605][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.786624][ C1] ? finish_task_switch+0x266/0x950 [ 328.786649][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 328.786678][ C1] ? __pfx___schedule+0x10/0x10 [ 328.786697][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.786720][ C1] nft_do_chain_inet+0x25d/0x340 [ 328.786739][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 328.786757][ C1] ? __lock_acquire+0xab9/0xd20 [ 328.786781][ C1] ? NF_HOOK+0x9a/0x3a0 [ 328.786795][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 328.786815][ C1] nf_hook_slow+0xc5/0x220 [ 328.786834][ C1] NF_HOOK+0x206/0x3a0 [ 328.786849][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 328.786863][ C1] ? NF_HOOK+0x9a/0x3a0 [ 328.786876][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 328.786889][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 328.786905][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 328.786921][ C1] ? skb_dst+0x4f/0xd0 [ 328.786935][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 328.786951][ C1] NF_HOOK+0x30c/0x3a0 [ 328.786966][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 328.786979][ C1] ? NF_HOOK+0x9a/0x3a0 [ 328.786993][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 328.787008][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 328.787027][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 328.787040][ C1] __netif_receive_skb+0x143/0x380 [ 328.787063][ C1] ? process_backlog+0x27b/0x900 [ 328.787085][ C1] process_backlog+0x31e/0x900 [ 328.787109][ C1] __napi_poll+0xb6/0x540 [ 328.787131][ C1] net_rx_action+0x5f7/0xda0 [ 328.787153][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 328.787169][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 328.787192][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 328.787214][ C1] handle_softirqs+0x22f/0x710 [ 328.787237][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 328.787263][ C1] __local_bh_enable_ip+0x1a0/0x2e0 [ 328.787279][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 328.787300][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 328.787316][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 328.787333][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 328.787351][ C1] ? rt_spin_unlock+0x150/0x200 [ 328.787369][ C1] ? rt_spin_unlock+0x161/0x200 [ 328.787383][ C1] ? nsim_dev_trap_report_work+0x72e/0xbc0 [ 328.787404][ C1] nsim_dev_trap_report_work+0x7f2/0xbc0 [ 328.787431][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 328.787450][ C1] process_scheduled_works+0xae1/0x17b0 [ 328.787482][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.787508][ C1] worker_thread+0x8a0/0xda0 [ 328.787538][ C1] kthread+0x711/0x8a0 [ 328.787559][ C1] ? __pfx_worker_thread+0x10/0x10 [ 328.787577][ C1] ? __pfx_kthread+0x10/0x10 [ 328.787595][ C1] ? rt_spin_unlock+0x150/0x200 [ 328.787613][ C1] ? rt_spin_unlock+0x161/0x200 [ 328.787627][ C1] ? __pfx_kthread+0x10/0x10 [ 328.787648][ C1] ret_from_fork+0x4bc/0x870 [ 328.787665][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 328.787686][ C1] ? __switch_to_asm+0x39/0x70 [ 328.787701][ C1] ? __switch_to_asm+0x33/0x70 [ 328.787714][ C1] ? __pfx_kthread+0x10/0x10 [ 328.787735][ C1] ret_from_fork_asm+0x1a/0x30 [ 328.787758][ C1] [ 330.022572][ T61] Bluetooth: hci11: command tx timeout [ 330.222320][ T61] Bluetooth: hci8: command tx timeout [ 332.057378][ T61] Bluetooth: hci11: command tx timeout [ 332.297474][ T61] Bluetooth: hci8: command tx timeout [ 334.137574][ T61] Bluetooth: hci11: command tx timeout [ 334.377441][ T61] Bluetooth: hci8: command tx timeout