last executing test programs: 20m5.741980362s ago: executing program 32 (id=4809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 16m25.911985389s ago: executing program 2 (id=6107): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16m21.521469832s ago: executing program 2 (id=6121): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323", 0x47}, {&(0x7f0000000900)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x2}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000005e00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d40)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x408c0}, 0x40801) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m20.090728578s ago: executing program 2 (id=6130): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$packet(0x11, 0x3, 0x300) getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) pipe(&(0x7f0000000500)) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)={0x14, 0x3e, 0x321, 0x0, 0x0, {0xa}}, 0x14}}, 0x4004010) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0xfffffd12}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 16m18.185126138s ago: executing program 2 (id=6135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 16m17.960609859s ago: executing program 2 (id=6138): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m16.538504508s ago: executing program 2 (id=6142): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x15, 0xe42ef}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4c080) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x15, 0xe42ef}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4c080) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x101240, 0x111) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) 11m36.223125301s ago: executing program 0 (id=8550): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='3', 0x1, 0x7) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m35.613254997s ago: executing program 0 (id=8554): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r4}) 11m35.187752521s ago: executing program 0 (id=8559): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 11m34.858799578s ago: executing program 0 (id=8562): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, 0x0) 11m31.152400087s ago: executing program 0 (id=8586): getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540), 0x0, 0x40800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x2) 11m30.335490486s ago: executing program 36 (id=8586): getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540), 0x0, 0x40800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x2) 10m2.075867899s ago: executing program 6 (id=8938): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x10, 0x5, 0x0, 0x3, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xfeffffffffffffff, 0x0, 0x7, 0x7fffffff, 0x10000}, {0x2, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x1000}]}, 0xc0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080012400000000805001500ff0300000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x200012, 0x40, 0x3, 0x45, r3}, 0x50) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000000080)) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4, 0x3, 0xc1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_clone3(&(0x7f00000003c0)={0x100001000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x240280d1) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@RTA_NEWDST={0x84}]}, 0xa0}, 0x1, 0x0, 0x0, 0x88d0}, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f00000001c0)=""/18, 0x1020000, 0x1800, 0x1000, 0x6}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(r7, 0x4, 0x44400) sendto$inet6(r6, &(0x7f0000000100)="85622fed99e8ceccbf19f4dcb2ce082d9018cc18c57b55e8282cb75ec1ede9acd2c1008d66e2c70e9eaac969d01b75c645b73f9df138c8175bc0f116d36a8c826e2129976235bc8c32d15bbaa25a2957df51508639ed3bb147d98f902aba78d6ee42dac9916e5857eedf2ab9d84bfbdc18770817866b60b381c9c165", 0x7c, 0x8010, 0x0, 0x0) 10m0.962716942s ago: executing program 6 (id=8945): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='mpo']) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f00000000c0)=0x48000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x2, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0xffffffffffff8001, 0xfffffffffffffffe}, {0x0, 0x0, 0x200000000000, 0xb}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x2a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x32}}, @redirect={0x5, 0xbfea782ca9645394, 0x0, @loopback, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x66, 0x7f2, 0x48, 0x1, 0x9, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0xa}}}}}}}, 0x0) 9m58.194788595s ago: executing program 6 (id=8948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) timerfd_create(0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='ecryptfs\x00', 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd601569090013"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x1f, 0x0, 0x0) 9m56.51511604s ago: executing program 6 (id=8954): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4004081) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002540), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x62bf, 0x3a, '\x00\x00\x00\x00\x00\x00', 0x3a, '\xc0\x18\x04\x9c\xd0\x9c\xb6\x93\xd2l\n\xc9Ft\xe01\xedC>\xa7\xee\xb9\x840`\xfb-Z\xb4\x1c\xcfXB\x9d\a\xaf\xd4\xeb\x8cm@(\a7\xb3\xb5c\xf8\xef\x8f\x94\x1aB\xd4*\xae\r\x18WE\xdfY7QMb@B\xe3\x89#zv\xb5\x1a\xe4\x98e\x87\x11P7\n=\xde\aj\x038\x92\x1a\x85\x9dv\x18RpJ\b\x7fGT\xf8\f%f\xbf\xe3kz\xd0\xfao\xdc#x\xd2^\x81\x05\xf0\x11\x1e\x0f*\xddBJ\xd2,\xf8\x1d\xf9\x17\xbb\xedG\xfa}\x1b(\x92g\xb2\xb6X\xae[\xe2', 0x3a, './file0'}, 0xc2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x90004) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x1cf0, 0x12) 9m55.519147085s ago: executing program 6 (id=8966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f000001e680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x20000000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xc0000804) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001e80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e40)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf25010000002800028024000000000800010000000000080a010007000000600001801400020067656e6576653100000000000000000008000100000000000000000000000000000000d03e44b6351df54791685ce02cbee2f0ed4a8df2a5273cb76d6d1453e5686dc4f479261e4c53fa56b0b65462efa935c400c1ab8b138c2a56bf7b1547cb67", @ANYRES8=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000100", @ANYBLOB="140002006970766c616e3000000000000000000048000280440001800800010007000000080001000200000008000100040000000800010000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000004000300f40002802400018008000100030000000800010004000000080001000a000000080001000000000014000180080001000600000008000100050000004c000180080001000300000008000100030000000800010003000000080001000600000008000100020000000800010006000000080001000700000008000100040000000800010003000000340001800800010003000000080001000200000008000100040000000800010007000000080001000100000008000100050000001400018008000100040000000800010006000000240001800800010007000000080001000300000008000100000000000800010006000000"], 0x204}}, 0x24044091) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0x40, 0xc288, 0xf863, 0x8}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) writev(r3, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x9, 0x12) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x1000000}) 9m54.460356563s ago: executing program 6 (id=8973): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpgid(0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r1}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x1405, 0x131}, 0x10}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f36000/0x4000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m38.812591513s ago: executing program 37 (id=8973): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpgid(0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r1}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x1405, 0x131}, 0x10}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f36000/0x4000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m6.792580226s ago: executing program 3 (id=10421): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7e, 0x5, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xf, 0xfd}}}}}]}}]}}, 0x0) ptrace(0x10, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0x5]}, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000429"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m4.746207494s ago: executing program 3 (id=10443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 7m4.443261206s ago: executing program 3 (id=10446): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 7m4.346933619s ago: executing program 3 (id=10447): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 7m4.133188015s ago: executing program 3 (id=10450): r0 = semget$private(0x0, 0x6, 0x1b5) semop(r0, &(0x7f0000000040)=[{0x0, 0xff43}], 0x1) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) 7m2.25283883s ago: executing program 3 (id=10468): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) close(0x3) 7m1.694398008s ago: executing program 38 (id=10468): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) close(0x3) 2m59.496177857s ago: executing program 8 (id=12018): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x3f, 0x40, 0x8, 0x1000}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m59.049036204s ago: executing program 8 (id=12021): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000"], 0x18, 0x48800}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/85, 0x55}], 0x1}, 0x0) 2m58.770415194s ago: executing program 8 (id=12024): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) 2m57.668124246s ago: executing program 8 (id=12036): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) 2m57.438389897s ago: executing program 8 (id=12039): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) syz_open_procfs(0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000140)=""/16) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m54.05828102s ago: executing program 8 (id=12059): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100), 0x2200040, 0x0) 2m53.589446865s ago: executing program 39 (id=12059): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100), 0x2200040, 0x0) 2.671257088s ago: executing program 9 (id=13131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="580300001000090500000000000000008802118008002d0009000000960021800400f7800c004c00060000000000000014005400fe800000000000000000000000000024e84e99c1842fb2ead0feb3ae42be274f1541afb210c46fdbc31a6c25dd6e26fd940578480b480ee16a1f2dcc9a203c29559517a08f78f9eb5fd595d885e8e79cdd9defdc0a3c3a008ec445caa11ef84c6b5a60b8ba0dda4af1f834d84e18a83faaa00400008004002c80040088000000c81b436efe291b021a7294a4109302cbab04a6a8185d5b1d7c770330a6b475799e27"], 0x358}], 0x1}, 0x40040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611814000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) recvmsg(r2, &(0x7f0000000a80)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/130, 0x82}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000800)=""/238, 0xee}, {&(0x7f0000000900)=""/68, 0x44}], 0x9, &(0x7f0000000a40)=""/26, 0x1a}, 0x40010000) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2004410, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 2.583296534s ago: executing program 4 (id=13132): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) poll(&(0x7f0000000140)=[{r0, 0x44}], 0x1, 0xe6) 2.433208999s ago: executing program 9 (id=13134): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1, 0x2, 0x11}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x478e, &(0x7f0000000040)={0x0, 0xfc64, 0xc000, 0x8, 0x3d2, 0x0, r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"], 0x50) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000b00)=[{&(0x7f0000000300)="8a", 0x1}], 0x1) write(r4, &(0x7f0000000000)="ea", 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f00000000000000000c000200010000001500100004000c80"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000181900010073797a310000000008000540000000020900020073797a3100000000f5ff0a40fffffffc0800034000000090140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) close(r4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0xba}) close(r2) r9 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x345641, 0x110) openat2(r9, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x3, 0x0, 0x8}, 0x18) 2.05194164s ago: executing program 4 (id=13137): prctl$PR_GET_NAME(0x10, 0xffffffffffffffff) close(0xffffffffffffffff) 1.851231275s ago: executing program 9 (id=13138): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_ident={0x2, 0xb, 0x5, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x3, 0x4) 1.850719058s ago: executing program 4 (id=13140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x810) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0xff, 0xe, 0x200}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0xea5bc50b619917ee) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0xc810) 1.608767374s ago: executing program 9 (id=13142): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x24b4}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2040400) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392d, 0x11, r4, 0x100000000) (async) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392d, 0x11, r4, 0x100000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6) close(0x3) mmap(&(0x7f0000743000/0x2000)=nil, 0x2000, 0x1000007, 0x4000010, r2, 0x94164000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000540)={'vxcan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@deltaction={0x290, 0x31, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdab}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f4a}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x69}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcf}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001000) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000100)=0x3, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000100)=0x3, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x4044815) 1.092762277s ago: executing program 4 (id=13145): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4004) connect$l2tp(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket(0x1, 0x4, 0x0) getsockopt(r6, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) getsockopt(r3, 0xfff, 0x8, &(0x7f0000000100)=""/134, &(0x7f00000001c0)=0x86) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x20044085) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4890}, 0x0) fchdir(r1) 1.026810168s ago: executing program 1 (id=13146): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000340)="17000000020001000003be8c5e687a8a6a002b00020100ecff3f0000000300000a7f1c000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900", 0x60) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x40c8a3, 0xc000, 0x1, 0xad}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8002, 0x100, 0x9}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000038c0)=""/4080, 0xff0}], 0x1}, 0x7ffe}], 0x2, 0x2101, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000dc3000/0x4000)=nil, 0x4000}}) open_tree(r3, &(0x7f00000001c0)='./file0\x00', 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) connect$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x2, 0x1}, 0xc) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000890000/0x1000)=nil, 0x1000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000240)="f2435f010008ba00000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 916.281306ms ago: executing program 1 (id=13147): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mount$afs(&(0x7f0000000e00)=ANY=[@ANYBLOB='%'], &(0x7f0000000e40)='.\x00', &(0x7f0000000e80), 0x3000000, 0x0) 899.793995ms ago: executing program 9 (id=13148): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x34}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 587.771327ms ago: executing program 1 (id=13149): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x8a, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_clone(0xb8376109c00c4162, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 587.458447ms ago: executing program 4 (id=13150): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x2, 0xe8, 0x65b5, 0x2}}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/58, 0x3a}], 0x1, 0x6, 0x5) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/176) 427.433262ms ago: executing program 1 (id=13151): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x466}}]}}) read$FUSE(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x101800) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x7fc3, "b9abecfe9100a72ead3b3be3b6795e80561559bf34037168c9eebad8f163d551"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x70, &(0x7f0000000100)}, 0x1c) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001010000000000000900000037110c00000000009500000000000000c41935a7b4c28b2bf825b4fd63d7e2717617178075f0146fa9c060c9f64f20e0f78ba9bc47c65a6f89d7baf055b7521d0767aab59e5dbcea35c54ffbe7fcf1e463c2f91c4f973e252fe71e472048f3cf4aeb44ac1fba7743ac03fb8931b86a05f649"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 327.638714ms ago: executing program 1 (id=13152): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000006848b960c121824"], 0x36) 162.969161ms ago: executing program 1 (id=13153): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x3, 0x1, "f7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xeb) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x20, 0xf, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 162.808583ms ago: executing program 4 (id=13154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000390800024000000002240001800a000100726564697200000014000280100001400000000c08000240000000080900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 0s ago: executing program 9 (id=13155): syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30) syz_usb_connect$uac2(0x4, 0x11c, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x3, 0x1, 0x40, 0x60, 0x90, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x4, 0x40, 0x6}, [@selector_unit={0x5, 0x24, 0xb, 0x7}, @sample_rate={0xf, 0x24, 0xd, 0x6, 0x2, 0x2, [0x3, 0x2, 0x2, 0x0]}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x4, [0x1, 0x3, 0x9, 0xc, 0xe]}, @sample_rate={0xd, 0x24, 0xd, 0x3, 0x1, 0x2, [0x3, 0x0, 0x1]}, @selector_unit={0x7, 0x24, 0xb, 0xfb, 0x2, 'w\b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0xf6, 0x9, "", 'w'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x7b, 0x2, 0xf}, @as_header={0x10, 0x24, 0x1, 0x5, 0x6, 0x0, 0x4, 0x0, 0xfa, 0x9}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1e, 0x2, 0x8, 0x0, 'Q'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0x4, 0x2, 0xa}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7f, 0x4, "894126", 'k'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7f, 0x5, 0x5, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x6, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0xab, 0x3, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa000, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x73}, @as_header={0x10, 0x24, 0x1, 0x0, 0x4, 0x2, 0x1, 0x14, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7e, 0x7, 0x7, {0x8, 0x25, 0x1, 0x1, 0x0, 0x5, 0x4}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x1, 0x4, 0x3, 0x8, 0x6}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x3, [{0x8d, &(0x7f0000000280)=@string={0x8d, 0x3, "6ad78bdc1cd7019801b6180458d0d9e8e2749c89118b6ab0e0e0e8a05ea3bfc99ae2edea0061e2e517c763a5cbacbfc208c77a301cc41bdf41bfbc4fd5d292f7a683cbc81455229e1f2fd3eb8d11617926c5ea482cb1fc35f5017b46d7000354de87d40b4182dd4beb8f06c8d1c9254b4921f0d8fa4006f93238daca2536a0c3fd7f1d16b6be29611adb44"}}, {0x6e, &(0x7f0000000340)=@string={0x6e, 0x3, "6c1267f742a9ba9f467e2191eb4681d61f61d34fa6038e69c693cc64c526340eceaf33f153221fa802964ebd353c8c63621219b49c7be715fa555aca2f360e80768dae38696e52c4150d2d3063e4425b5f34ba42ea581081baad197523e4d2a2de7a7d8cc85ba7e3496dbddb"}}, {0x7, &(0x7f0000000400)=@string={0x7, 0x3, "14422c2bcd"}}]}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x3, 0x0, [0x2], [0x800, 0x1, 0xfffffffd], [0x0, 0x0, 0x0, 0x3], [0x0, 0x1ffe0000]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="8c08050000000000000000000000000000000009", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000030000000e00"/28], 0x50) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 554.223525][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.223905][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.224284][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.224679][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.225063][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.225462][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.225711][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.226118][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.226567][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.226947][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.227355][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.227799][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.228218][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.228628][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.229018][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.229467][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.229875][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.230329][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.230724][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.231132][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.231533][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.232159][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.232577][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.232977][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.233427][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.233885][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.234295][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.234701][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.235022][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.235421][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.235845][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.236202][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.236521][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.236964][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.237378][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.237800][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.238225][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.238635][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.239045][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.239476][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.239904][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.240312][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.240707][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.241145][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.241612][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.242022][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.242511][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.242977][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.243389][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.243993][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.244380][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.244797][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.245216][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.245714][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.246111][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.246531][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.246931][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.247169][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.247383][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.247598][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.247819][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.248029][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.252063][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.252292][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.252502][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.252709][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.252926][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.253133][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.253361][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.253590][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.253800][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.254007][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.254214][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.254421][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.254642][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.254851][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.255057][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.255316][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.255523][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.255751][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.255969][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.256177][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.256393][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.256604][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.256824][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.257054][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.257265][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.257478][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.257684][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.257907][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.258127][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.258333][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.258537][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.258739][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.258945][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.259151][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.259356][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.259559][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.259761][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.259963][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.260170][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.260371][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.260570][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.260779][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.260989][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.261245][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.261475][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.261693][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.261907][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.262114][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.262321][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.262538][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.262748][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.262966][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.263189][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.263412][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.263637][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.263849][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.264062][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.264279][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.264504][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.264719][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.264935][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.265147][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.265405][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.265624][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.265848][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.266067][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.266291][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.266510][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.266733][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.266955][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.267167][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.267444][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.267659][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.269400][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.269636][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.269876][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.270095][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.270309][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.270527][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.270748][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.270978][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.271219][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.271476][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.271712][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.272162][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.272574][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.272977][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.273312][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.273746][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.274148][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.274564][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.274979][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.275436][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.275861][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.276314][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.276713][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.277075][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.277539][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.277978][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.278945][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.279392][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.279796][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.280220][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.280615][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.280847][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.281083][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.281318][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.281550][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.281793][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.282027][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.282261][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.282500][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.282733][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.282966][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.283198][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.283426][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.283674][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.283930][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.284165][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.284595][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.284984][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.285421][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.285664][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.285900][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.286131][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.286362][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.286593][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.286901][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.287152][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.287382][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.287602][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.287827][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.288053][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.288301][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.288527][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.288759][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.288976][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.289189][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.289404][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.289631][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.289848][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.290070][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.290287][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.290499][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.290708][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.290914][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.291140][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.291348][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.291556][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.291770][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.291981][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.292195][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.292404][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.292630][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.292838][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.293106][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.293312][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.293515][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.293720][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.293924][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.294131][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.294336][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.294544][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.294763][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.294970][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.295188][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.295422][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.295631][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.295834][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.296038][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.296243][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.296458][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.296669][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.296875][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.297082][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.297295][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.297505][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.297726][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.297935][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.298147][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.298363][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.298573][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.298787][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.299060][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.299270][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.299483][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.299702][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.299912][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.300125][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.300332][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.300540][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.300760][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.302107][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.306346][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.330255][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.330771][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.331173][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.331602][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.332006][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.332482][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.332892][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.333315][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.333729][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.334128][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.377935][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.378191][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.378429][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.378685][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.378917][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.379155][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.379558][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.380256][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.380637][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.381051][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.381454][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.381942][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.382391][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.382809][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.383225][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.383665][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.384086][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.384525][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.384944][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.385419][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.385795][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.386176][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.386510][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.386893][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.387262][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.387658][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.388074][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.388528][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.388909][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.389340][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.389770][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.390176][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.390576][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.391043][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.391434][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.392073][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.392506][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.392915][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.393318][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.393816][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.394282][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.394780][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.395204][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.395615][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.395935][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.396370][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.396728][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.397132][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.397508][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.397929][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.398408][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.398838][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.399228][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.399631][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.510943][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.511196][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.511464][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.511706][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.511937][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.512159][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.512369][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.512585][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.512806][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.513079][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.513301][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.513522][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.513761][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.513987][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.514211][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.519831][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.520089][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.531616][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.531870][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.532116][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.532338][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.532556][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.532785][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.533011][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.533239][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.533467][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.533695][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.533912][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.534128][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.534354][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.534597][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.534815][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.535028][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.535262][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.535484][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.535710][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.535941][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.536259][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.536471][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.536695][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.536921][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.537132][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.537345][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.537566][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.537776][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.537989][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.538206][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.538472][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.538703][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.538920][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.539146][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.539362][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.539589][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.539813][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.540046][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.540265][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.540481][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.540703][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.540934][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.541155][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.541369][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.541590][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.541806][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.542035][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.548560][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.548890][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.549139][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.549374][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.549619][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.549849][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.550079][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.550308][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.550539][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.550769][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.550997][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.551224][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.551456][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.551688][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.551922][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.552204][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.552458][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.552725][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.552963][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.553197][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.553433][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.553665][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.553893][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.554124][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.554353][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.554590][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.554830][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.555063][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.555297][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.555559][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.555859][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.556092][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.556321][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.556551][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.556786][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.557021][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.557254][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.557486][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.557719][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.557955][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.558187][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.558425][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.558667][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.558899][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.559131][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.559373][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.559614][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.559870][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.560104][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.560337][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.560567][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.560776][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.560985][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.561190][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.561402][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.561610][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.561823][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.562037][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.562292][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.562509][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.562718][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.562925][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.563129][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.563342][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.571109][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.571347][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.571566][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.571785][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.572008][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.572217][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.572440][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.572654][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.572871][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.573081][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.573289][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.573499][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.573709][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.573919][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.574127][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.574348][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.574566][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.574785][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.574994][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.575212][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.575487][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.575712][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.576029][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.576258][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.576485][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.576724][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.576968][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.577206][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.577447][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.577678][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.577907][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.578137][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.578365][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.578617][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.578852][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.579083][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.579313][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.579546][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.579778][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.580020][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.580266][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.580510][ C1] usb 10-1: pegasus_irq - nonzero urb status received: -71 [ 1554.580520][ T4950] usb 10-1: control msg error: -71 [ 1554.580580][ C1] usb 10-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1559.023026][T27538] usb 10-1: USB disconnect, device number 20 [ 1563.614153][ T1595] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11563'. [ 1568.502594][ T1434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1568.502666][ T1434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.464102][ T1614] netlink: 'syz.8.11571': attribute type 4 has an invalid length. [ 1577.146737][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1583.982919][T27945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1584.102098][T27945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1584.105150][T27945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1584.144996][T27945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1584.148085][T27945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1585.151322][ T1656] netlink: 'syz.4.11588': attribute type 15 has an invalid length. [ 1585.741610][ T1685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11599'. [ 1586.653960][T27034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.667963][T27945] Bluetooth: hci5: command tx timeout [ 1587.058639][ T1685] geneve3: entered promiscuous mode [ 1587.058674][ T1685] geneve3: entered allmulticast mode [ 1587.091702][ T1435] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1587.091759][ T1435] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1587.091799][ T1435] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1587.091839][ T1435] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1587.627993][ T1638] lo speed is unknown, defaulting to 1000 [ 1587.937997][ T1732] loop4: detected capacity change from 0 to 523370496 [ 1588.207717][ T1751] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11628'. [ 1588.783246][T27945] Bluetooth: hci5: command tx timeout [ 1588.918759][T27034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.152946][T27034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.830344][T27945] Bluetooth: hci5: command tx timeout [ 1591.144252][T27034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.730441][ T1839] 9p: Bad value for 'rfdno' [ 1592.137097][ T1848] dvmrp6: entered allmulticast mode [ 1592.138725][ T1638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.138903][ T1638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.139169][ T1638] bridge_slave_0: entered allmulticast mode [ 1592.141502][ T1638] bridge_slave_0: entered promiscuous mode [ 1592.179494][ T1638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.179738][ T1638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.180043][ T1638] bridge_slave_1: entered allmulticast mode [ 1592.183112][ T1638] bridge_slave_1: entered promiscuous mode [ 1592.272639][ T1638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.289124][ T1638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1592.378193][ T1638] team0: Port device team_slave_0 added [ 1592.382007][ T1638] team0: Port device team_slave_1 added [ 1592.915537][T27945] Bluetooth: hci5: command tx timeout [ 1593.566418][ T1638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.566437][ T1638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.566467][ T1638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.773644][ T1638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.773664][ T1638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.773695][ T1638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.986730][ T1875] smbdirect: ib_dev[syz2] removed [ 1595.680068][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1595.680087][ T37] audit: type=1326 audit(1777766103.930:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1595.680154][ T37] audit: type=1326 audit(1777766103.930:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1595.753100][ T37] audit: type=1326 audit(1777766104.000:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1595.753256][ T37] audit: type=1326 audit(1777766104.000:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1595.753465][ T37] audit: type=1326 audit(1777766104.000:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1595.753824][ T37] audit: type=1326 audit(1777766104.000:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1595.754589][ T37] audit: type=1326 audit(1777766104.000:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1595.754722][ T37] audit: type=1326 audit(1777766104.000:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1595.777761][ T37] audit: type=1326 audit(1777766104.030:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1595.833765][ T37] audit: type=1326 audit(1777766104.080:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1946 comm="syz.9.11717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0254cdd9 code=0x7ffc0000 [ 1596.504098][ T1638] hsr_slave_0: entered promiscuous mode [ 1596.520176][ T1638] hsr_slave_1: entered promiscuous mode [ 1596.548260][ T1945] netlink: 196 bytes leftover after parsing attributes in process `syz.4.11716'. [ 1596.890949][ T1973] pim6reg: tun_chr_ioctl cmd 1074025677 [ 1596.892287][ T1973] pim6reg: linktype set to 823 [ 1597.692887][T27034] bridge_slave_1: left allmulticast mode [ 1597.692925][T27034] bridge_slave_1: left promiscuous mode [ 1597.764963][T27034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.917322][T27034] bridge_slave_0: left allmulticast mode [ 1597.917359][T27034] bridge_slave_0: left promiscuous mode [ 1597.917603][T27034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.623244][ T2035] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1598.623264][ T2035] overlayfs: missing 'lowerdir' [ 1598.815764][ T2040] input: syz1 as /devices/virtual/input/input60 [ 1600.126726][T27034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.216569][T27034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.269701][T27034] bond0 (unregistering): Released all slaves [ 1603.242110][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1603.745606][ T1612] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1603.898249][ T1612] usb 9-1: Using ep0 maxpacket: 8 [ 1603.900575][ T1612] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1603.900604][ T1612] usb 9-1: config 0 has no interface number 0 [ 1603.904192][ T1612] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1603.904222][ T1612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.904243][ T1612] usb 9-1: Product: syz [ 1603.904258][ T1612] usb 9-1: Manufacturer: syz [ 1603.904273][ T1612] usb 9-1: SerialNumber: syz [ 1604.027058][ T1612] usb 9-1: config 0 descriptor?? [ 1604.239007][ T1612] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1604.239130][ T1612] uvcvideo 9-1:0.31: No valid video chain found. [ 1604.449699][ T854] usb 9-1: USB disconnect, device number 23 [ 1605.782926][T27034] hsr_slave_0: left promiscuous mode [ 1606.066105][T27034] hsr_slave_1: left promiscuous mode [ 1606.067338][T27034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1606.067365][T27034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1606.124726][T27034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1606.124759][T27034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.449602][T27034] veth1_macvtap: left promiscuous mode [ 1606.449713][T27034] veth0_macvtap: left promiscuous mode [ 1606.449982][T27034] veth1_vlan: left promiscuous mode [ 1606.450195][T27034] veth0_vlan: left promiscuous mode [ 1608.908304][T27034] team0 (unregistering): Port device team_slave_1 removed [ 1608.976778][T27034] team0 (unregistering): Port device team_slave_0 removed [ 1609.975611][ T1612] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1610.125726][ T1612] usb 10-1: Using ep0 maxpacket: 16 [ 1610.128655][ T1612] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1610.128684][ T1612] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.133247][ T1612] usb 10-1: config 0 descriptor?? [ 1610.202440][ T1612] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1610.963768][ T1612] gspca_sonixj: reg_r err -71 [ 1610.963876][ T1612] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 1610.975926][ T1612] usb 10-1: USB disconnect, device number 21 [ 1611.692653][ T2360] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11895'. [ 1611.692691][ T2360] netlink: 'syz.8.11895': attribute type 21 has an invalid length. [ 1614.400717][ T2427] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1614.400717][ T2427] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1614.631243][ T854] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1614.871547][ T854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.871619][ T854] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1614.871643][ T854] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1614.871667][ T854] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1614.871685][ T854] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1614.935280][ T854] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1614.935313][ T854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1614.935339][ T854] usb 9-1: Product: syz [ 1614.957590][ T854] usb 9-1: Manufacturer: syz [ 1614.957611][ T854] usb 9-1: SerialNumber: syz [ 1615.102237][ T854] usb 9-1: config 0 descriptor?? [ 1615.500089][ T854] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1615.500119][ T854] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1615.704647][ T854] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 1615.704677][ T854] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1615.704697][ T854] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1615.917579][ T854] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 1616.335027][ T854] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1616.335642][ T854] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 1616.370204][ T854] usb 9-1: USB disconnect, device number 24 [ 1620.302170][T17291] kernel write not supported for file /amidi2 (pid: 17291 comm: kworker/1:2) [ 1621.810497][ T2662] syz.8.11999 (2662): attempted to duplicate a private mapping with mremap. This is not supported. [ 1621.878884][ T1638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1621.910007][ T2665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1621.910031][ T2665] IPv6: NLM_F_CREATE should be set when creating new route [ 1621.957285][ T1638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1621.958757][ T1638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1622.482081][ T1638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1622.521961][ T1638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1622.562264][ T1638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1622.564803][ T1638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1622.635520][ T1638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1623.068912][ T1638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.250290][ T1638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1623.255588][T17291] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1623.289577][T18162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.289858][T18162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1623.374316][T18162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.374537][T18162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1623.438050][T17291] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1623.438084][T17291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.465579][T17291] usb 10-1: config 0 descriptor?? [ 1623.496380][T17291] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1623.704184][T17291] gp8psk: usb in 128 operation failed. [ 1623.937377][T17291] gp8psk: FW Version = 122.249.21 (0x7af915) Build 2132/39/26 [ 1624.190255][T17291] gp8psk: usb in 149 operation failed. [ 1624.190275][T17291] gp8psk: failed to get FPGA version [ 1624.507567][T17291] gp8psk: usb in 138 operation failed. [ 1624.507593][T17291] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1624.507634][T17291] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1624.547854][T17291] usb 10-1: USB disconnect, device number 22 [ 1626.618693][ T2807] fuse: fd is not a fuse device [ 1627.804608][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1627.976689][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1627.980652][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1628.057688][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1628.104191][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1630.151773][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1630.301394][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1630.324011][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1630.407573][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1630.431555][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1630.907574][ T5605] Bluetooth: hci1: command tx timeout [ 1631.019112][ T159] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.019154][ T159] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.750085][ T5605] Bluetooth: hci4: command tx timeout [ 1632.999583][ T5605] Bluetooth: hci1: command tx timeout [ 1633.657611][ T2952] netlink: 'syz.4.12093': attribute type 7 has an invalid length. [ 1634.012163][ T159] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.012202][ T159] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.113517][ T2952] netlink: 'syz.4.12093': attribute type 7 has an invalid length. [ 1634.825625][ T5605] Bluetooth: hci4: command tx timeout [ 1635.065722][ T5605] Bluetooth: hci1: command tx timeout [ 1635.336093][ T854] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1635.469696][ T159] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1635.469726][ T159] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.514035][ T854] usb 10-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x2C, changing to 0xC [ 1635.514077][ T854] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1635.514106][ T854] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1635.530540][ T854] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1635.530653][ T854] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1635.530728][ T854] usb 10-1: Product: syz [ 1635.530786][ T854] usb 10-1: Manufacturer: syz [ 1635.530838][ T854] usb 10-1: SerialNumber: syz [ 1635.658787][ T854] usb 10-1: config 0 descriptor?? [ 1635.692848][ T854] usb 10-1: selecting invalid altsetting 0 [ 1636.915499][ T5605] Bluetooth: hci4: command tx timeout [ 1636.960611][ T159] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.960649][ T159] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.154989][ T5605] Bluetooth: hci1: command tx timeout [ 1637.342731][ T854] usb 10-1: USB disconnect, device number 23 [ 1638.985722][ T5605] Bluetooth: hci4: command tx timeout [ 1639.024903][ T3002] udevd[3002]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1640.275249][ T2828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.287035][ T2828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.287331][ T2828] bridge_slave_0: entered allmulticast mode [ 1640.303060][ T2828] bridge_slave_0: entered promiscuous mode [ 1640.391418][ T2828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.391506][ T2828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.391764][ T2828] bridge_slave_1: entered allmulticast mode [ 1640.416707][ T2828] bridge_slave_1: entered promiscuous mode [ 1641.228203][ T2828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.330493][ T2828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.986756][ T159] bridge_slave_1: left allmulticast mode [ 1641.986796][ T159] bridge_slave_1: left promiscuous mode [ 1641.987091][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.089161][ T159] bridge_slave_0: left allmulticast mode [ 1642.089205][ T159] bridge_slave_0: left promiscuous mode [ 1642.089529][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.797823][ T3199] fuse: fd is not a fuse device [ 1644.258230][ T3211] fuse: fd is not a fuse device [ 1645.611540][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1645.687895][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.729412][ T159] bond0 (unregistering): Released all slaves [ 1645.951889][ T2828] team0: Port device team_slave_0 added [ 1645.975047][ T2828] team0: Port device team_slave_1 added [ 1646.055267][ T2856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.055705][ T2856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.055982][ T2856] bridge_slave_0: entered allmulticast mode [ 1646.058588][ T2856] bridge_slave_0: entered promiscuous mode [ 1646.063012][ T2828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.063028][ T2828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.063053][ T2828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.064861][ T2856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.064993][ T2856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.065217][ T2856] bridge_slave_1: entered allmulticast mode [ 1646.070318][ T2856] bridge_slave_1: entered promiscuous mode [ 1646.072398][ T2828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.072412][ T2828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.072437][ T2828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.495208][ T2856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1646.713120][ T2856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1646.936744][ T2828] hsr_slave_0: entered promiscuous mode [ 1646.938248][ T2828] hsr_slave_1: entered promiscuous mode [ 1646.970034][ T2828] debugfs: 'hsr0' already exists in 'hsr' [ 1646.970070][ T2828] Cannot create hsr debugfs directory [ 1647.277741][ T2856] team0: Port device team_slave_0 added [ 1647.348569][ T2856] team0: Port device team_slave_1 added [ 1647.707814][ T2856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.707834][ T2856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.707863][ T2856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.798862][ T2856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.798881][ T2856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.798911][ T2856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.910441][ T2856] hsr_slave_0: entered promiscuous mode [ 1648.932375][ T2856] hsr_slave_1: entered promiscuous mode [ 1648.937943][ T2856] debugfs: 'hsr0' already exists in 'hsr' [ 1648.937973][ T2856] Cannot create hsr debugfs directory [ 1650.231126][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1651.335938][T18565] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1651.525525][T18565] usb 10-1: Using ep0 maxpacket: 32 [ 1651.538597][T18565] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1651.538626][T18565] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1651.538648][T18565] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1651.538700][T18565] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1651.538724][T18565] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1651.538749][T18565] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1651.538793][T18565] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1651.538819][T18565] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.596252][T18565] usb 10-1: config 0 descriptor?? [ 1651.882325][T18565] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1651.937619][T18565] usb 10-1: USB disconnect, device number 24 [ 1652.047365][T18565] usblp0: removed [ 1652.105037][ T3375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12260'. [ 1652.105063][ T3375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12260'. [ 1652.531393][T18565] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1652.705490][T18565] usb 10-1: Using ep0 maxpacket: 32 [ 1652.709274][T18565] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1652.709305][T18565] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1652.709325][T18565] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1652.709370][T18565] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1652.709393][T18565] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1652.709417][T18565] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1652.709457][T18565] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1652.709480][T18565] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.726453][T18565] usb 10-1: config 0 descriptor?? [ 1652.952611][T18565] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1653.831088][ T854] usb 10-1: USB disconnect, device number 25 [ 1653.861783][ T854] usblp0: removed [ 1654.663119][ T3416] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12274'. [ 1655.369542][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1658.064214][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1658.946256][ T159] hsr_slave_0: left promiscuous mode [ 1658.992248][ T159] hsr_slave_1: left promiscuous mode [ 1659.017865][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.017892][ T159] batadv0: mtu less than device minimum [ 1659.069195][ T159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1659.117036][ T159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1659.122246][ T159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1659.158222][ T159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1659.163639][ T159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1659.201497][ T159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1659.239757][ T159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1659.277828][ T159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1659.307384][ T159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1659.428386][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1659.428410][ T37] audit: type=1804 audit(1777766167.560:884): pid=3536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.12320" name="bus" dev="ramfs" ino=124949 res=1 errno=0 [ 1659.551176][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.569904][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.862016][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.902868][ T159] batman_adv: batadv0: Interface deactivated: dummy0 [ 1659.902898][ T159] batman_adv: batadv0: Removing interface: dummy0 [ 1660.112896][ T159] veth1_macvtap: left promiscuous mode [ 1660.113036][ T159] veth0_macvtap: left promiscuous mode [ 1660.113663][ T159] veth1_vlan: left promiscuous mode [ 1660.113841][ T159] veth0_vlan: left promiscuous mode [ 1660.741793][ T3588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12344'. [ 1662.307782][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1662.387686][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1663.687090][ T3667] fuse: fd is not a fuse device [ 1664.080989][ T3677] fuse: fd is not a fuse device [ 1668.156010][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1674.755307][ T159] bridge_slave_1: left allmulticast mode [ 1674.755475][ T159] bridge_slave_1: left promiscuous mode [ 1674.755757][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.081039][ T159] bridge_slave_0: left allmulticast mode [ 1675.081077][ T159] bridge_slave_0: left promiscuous mode [ 1675.081324][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.800899][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.067644][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.263467][ T159] bond0 (unregistering): Released all slaves [ 1679.888435][ T3961] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12478'. [ 1681.095923][ T159] hsr_slave_0: left promiscuous mode [ 1681.285787][ T159] hsr_slave_1: left promiscuous mode [ 1681.287018][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1681.349697][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1681.600817][T27538] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 1681.898012][T27538] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 1681.898043][T27538] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 1681.898064][T27538] usb 10-1: config 0 has no interface number 0 [ 1681.898111][T27538] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 49352, setting to 8 [ 1681.898154][T27538] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1681.898178][T27538] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.904255][T27538] usb 10-1: config 0 descriptor?? [ 1681.965269][ T3991] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1682.597805][T27538] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input61 [ 1682.817259][T27538] usb 10-1: USB disconnect, device number 26 [ 1682.817345][ C0] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1683.459511][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1683.768452][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1687.910905][ T2828] netdevsim netdevsim2: probe with driver netdevsim failed with error -12 [ 1688.874881][T27945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1688.938202][T27945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1688.953832][T27945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1688.995205][T27945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1689.012274][T27945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1691.523102][ T5605] Bluetooth: hci5: command tx timeout [ 1692.200977][T27945] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1692.311188][T27945] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1692.359236][T27945] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1692.427105][ T4163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1692.428137][ T4163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1693.625631][ T4163] Bluetooth: hci5: command tx timeout [ 1694.268234][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1695.027607][ T5605] Bluetooth: hci6: command tx timeout [ 1695.607112][ T4213] random: crng reseeded on system resumption [ 1695.818261][ T5605] Bluetooth: hci5: command tx timeout [ 1697.083329][ T5605] Bluetooth: hci6: command tx timeout [ 1698.041836][ T5605] Bluetooth: hci5: command tx timeout [ 1699.310653][ T5605] Bluetooth: hci6: command tx timeout [ 1700.886046][ T159] bridge_slave_1: left allmulticast mode [ 1700.886088][ T159] bridge_slave_1: left promiscuous mode [ 1700.886367][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.395548][ T5605] Bluetooth: hci6: command tx timeout [ 1702.612689][ T159] bridge_slave_0: left allmulticast mode [ 1702.612730][ T159] bridge_slave_0: left promiscuous mode [ 1702.613013][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.757285][ T4292] netlink: 'syz.9.12581': attribute type 32 has an invalid length. [ 1702.757312][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12581'. [ 1703.807877][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.942278][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.032492][ T159] bond0 (unregistering): Released all slaves [ 1704.354723][ T4288] netlink: 60 bytes leftover after parsing attributes in process `syz.9.12581'. [ 1704.354754][ T4288] netlink: 60 bytes leftover after parsing attributes in process `syz.9.12581'. [ 1704.390253][ T4292] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1707.685572][ T159] hsr_slave_0: left promiscuous mode [ 1707.730245][ T159] hsr_slave_1: left promiscuous mode [ 1707.731355][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.770898][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.437375][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1708.507068][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1709.062086][ T4402] fuse: fd is not a fuse device [ 1709.553669][ T854] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1709.817244][ T854] usb 10-1: Using ep0 maxpacket: 32 [ 1709.823842][ T854] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1709.823875][ T854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.823896][ T854] usb 10-1: Product: syz [ 1709.823912][ T854] usb 10-1: Manufacturer: syz [ 1709.823928][ T854] usb 10-1: SerialNumber: syz [ 1709.876597][ T854] usb 10-1: config 0 descriptor?? [ 1709.895172][ T854] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1711.655143][ T4461] net_ratelimit: 30 callbacks suppressed [ 1711.655166][ T4461] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1711.671386][ T854] gspca_topro: reg_r err -71 [ 1711.671423][ T854] gspca_topro: Sensor soi763a [ 1711.689681][ T854] usb 10-1: USB disconnect, device number 27 [ 1712.874963][ T4107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.875087][ T4107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.875930][ T4107] bridge_slave_0: entered allmulticast mode [ 1713.167316][ T4107] bridge_slave_0: entered promiscuous mode [ 1713.488710][ T4107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.488867][ T4107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.489097][ T4107] bridge_slave_1: entered allmulticast mode [ 1713.493109][ T4107] bridge_slave_1: entered promiscuous mode [ 1714.380684][ T4107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1714.623450][ T4107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.591344][ T4107] team0: Port device team_slave_0 added [ 1717.913025][ T4107] team0: Port device team_slave_1 added [ 1717.981728][ T4143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.981954][ T4143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.982255][ T4143] bridge_slave_0: entered allmulticast mode [ 1717.985195][ T4143] bridge_slave_0: entered promiscuous mode [ 1718.979250][ T4143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.979406][ T4143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.979701][ T4143] bridge_slave_1: entered allmulticast mode [ 1719.012002][ T4143] bridge_slave_1: entered promiscuous mode [ 1719.447922][ T4107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1719.447941][ T4107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.447971][ T4107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1719.699804][ T4635] overlayfs: failed to clone upperpath [ 1720.949231][ T4107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1720.949253][ T4107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.949307][ T4107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.549932][ T4143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.924428][ T4143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.227263][ T4655] netlink: 72 bytes leftover after parsing attributes in process `syz.9.12691'. [ 1722.294101][ T4143] team0: Port device team_slave_0 added [ 1722.418700][ T4143] team0: Port device team_slave_1 added [ 1722.494284][ T4107] hsr_slave_0: entered promiscuous mode [ 1722.495515][T18567] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1722.517949][ T4107] hsr_slave_1: entered promiscuous mode [ 1722.662216][T18567] usb 10-1: config 16 has an invalid interface number: 26 but max is 2 [ 1722.662249][T18567] usb 10-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 1722.662268][T18567] usb 10-1: config 16 has an invalid interface number: 226 but max is 2 [ 1722.662288][T18567] usb 10-1: config 16 has an invalid interface number: 34 but max is 2 [ 1722.662308][T18567] usb 10-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 1722.662327][T18567] usb 10-1: config 16 has no interface number 0 [ 1722.662345][T18567] usb 10-1: config 16 has no interface number 1 [ 1722.662366][T18567] usb 10-1: config 16 has no interface number 2 [ 1722.662426][T18567] usb 10-1: config 16 interface 26 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1722.662453][T18567] usb 10-1: config 16 interface 26 altsetting 13 endpoint 0x8 has an invalid bInterval 128, changing to 11 [ 1722.662480][T18567] usb 10-1: config 16 interface 26 altsetting 13 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1722.662522][T18567] usb 10-1: config 16 interface 26 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 16 [ 1722.662546][T18567] usb 10-1: config 16 interface 26 altsetting 13 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 1722.662584][T18567] usb 10-1: config 16 interface 226 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 1722.662604][T18567] usb 10-1: config 16 interface 226 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 1722.662624][T18567] usb 10-1: config 16 interface 226 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1722.662643][T18567] usb 10-1: config 16 interface 226 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1722.662673][T18567] usb 10-1: config 16 interface 34 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1722.662691][T18567] usb 10-1: config 16 interface 34 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 1722.662709][T18567] usb 10-1: config 16 interface 34 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 1722.662727][T18567] usb 10-1: config 16 interface 34 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1722.662744][T18567] usb 10-1: config 16 interface 34 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1722.662762][T18567] usb 10-1: config 16 interface 34 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 1722.662781][T18567] usb 10-1: config 16 interface 34 altsetting 8 endpoint 0xB has an invalid bInterval 255, changing to 7 [ 1722.662803][T18567] usb 10-1: config 16 interface 34 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1722.662822][T18567] usb 10-1: config 16 interface 34 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 1722.662839][T18567] usb 10-1: config 16 interface 34 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 1722.662858][T18567] usb 10-1: config 16 interface 34 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 1722.662876][T18567] usb 10-1: config 16 interface 26 has no altsetting 0 [ 1722.662891][T18567] usb 10-1: config 16 interface 226 has no altsetting 0 [ 1722.662907][T18567] usb 10-1: config 16 interface 34 has no altsetting 0 [ 1722.774645][T18567] usb 10-1: New USB device found, idVendor=1b5c, idProduct=0103, bcdDevice= 8.ff [ 1722.774678][T18567] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.774697][T18567] usb 10-1: Product: syz [ 1722.774710][T18567] usb 10-1: Manufacturer: 乚諝녵䤷⍖鯚惵뾘閐쯊揪䞊댇䵲꿡酿ꖂ뜛᪭斿䣣挢ꖬ穋福蹐㘀긘擣⫸갾荝삧ኸ᫬Ꞓ⫽謵끁࿢ၪ禎꒗뜬즄琼憔햍荐僃瘝᪕ꊙ䀽᧔㾼艗Ⲟꒁ떁╒⨛߀粫ࡿ쀗帣ܖٝ鞑䃼횘䓉￟⣒ᆜ䟑酜륁흐휡ݎゅꘆ飌飗환싃鲒ﹼ⟯ꈛ㖘ᆜ蜑鼓䋜঵ᥫŔ崪 [ 1722.774743][T18567] usb 10-1: SerialNumber: syz [ 1723.083058][ T4655] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1723.554752][ T4143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.554773][ T4143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.554802][ T4143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.621933][T18567] ftdi_sio 10-1:16.26: FTDI USB Serial Device converter detected [ 1723.680441][T18567] ftdi_sio ttyUSB0: unknown device type: 0x8ff [ 1723.743267][T18567] ftdi_sio 10-1:16.226: FTDI USB Serial Device converter detected [ 1723.756245][T18567] ftdi_sio ttyUSB1: unknown device type: 0x8ff [ 1723.940192][T18567] ftdi_sio 10-1:16.34: FTDI USB Serial Device converter detected [ 1723.943625][T18567] ftdi_sio ttyUSB2: unknown device type: 0x8ff [ 1723.991757][ T4143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.991775][ T4143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.991804][ T4143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.144613][T18567] usb 10-1: USB disconnect, device number 28 [ 1724.530743][T18567] ftdi_sio 10-1:16.26: device disconnected [ 1724.566758][T18567] ftdi_sio 10-1:16.226: device disconnected [ 1724.578702][T18567] ftdi_sio 10-1:16.34: device disconnected [ 1724.589963][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12703'. [ 1725.321569][ T4696] bond0: option packets_per_slave: invalid value (18446744073568892239) [ 1725.321598][ T4696] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1726.779072][ T4143] hsr_slave_0: entered promiscuous mode [ 1726.780629][ T4143] hsr_slave_1: entered promiscuous mode [ 1726.781706][ T4143] debugfs: 'hsr0' already exists in 'hsr' [ 1726.781733][ T4143] Cannot create hsr debugfs directory [ 1730.011577][ T159] bridge_slave_1: left allmulticast mode [ 1730.011621][ T159] bridge_slave_1: left promiscuous mode [ 1730.011920][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.133814][ T4781] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12728'. [ 1730.150902][ T159] bridge_slave_0: left allmulticast mode [ 1730.150940][ T159] bridge_slave_0: left promiscuous mode [ 1730.151204][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.589834][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1730.756519][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1730.839290][ T159] bond0 (unregistering): Released all slaves [ 1730.948891][ T4781] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1732.570625][ T159] hsr_slave_0: left promiscuous mode [ 1732.640644][ T159] hsr_slave_1: left promiscuous mode [ 1732.641825][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1732.689320][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.927898][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1734.027752][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1735.614613][ T854] IPVS: starting estimator thread 0... [ 1735.715665][ T4905] IPVS: using max 8 ests per chain, 19200 per kthread [ 1738.609937][ T4967] fuse: Unknown parameter '0x0000000000000003' [ 1739.821698][ T4107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1740.048407][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1740.053502][ T4107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1740.238045][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1740.253851][ T4107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1740.479444][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1741.343538][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12806'. [ 1742.637204][ T4107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1742.689673][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1742.691426][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1743.339262][ T4107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.489480][ T4107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.523751][ T2178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.523895][ T2178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1743.842577][ T2178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.842700][ T2178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1745.707270][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1749.232872][ T4163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1749.327620][ T4163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1749.346754][ T4163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1749.391780][ T4163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1749.422082][ T4163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1751.673293][ T4163] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1751.860491][ T4163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1751.909200][ T4163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1751.967938][ T4163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1751.997758][ T4163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1752.349329][ T5605] Bluetooth: hci1: command tx timeout [ 1754.478087][ T5605] Bluetooth: hci4: command tx timeout [ 1754.481294][ T5605] Bluetooth: hci1: command tx timeout [ 1756.505496][ T4163] Bluetooth: hci1: command tx timeout [ 1756.505534][ T4163] Bluetooth: hci4: command tx timeout [ 1758.595696][ T5605] Bluetooth: hci4: command tx timeout [ 1758.595741][ T5605] Bluetooth: hci1: command tx timeout [ 1760.095484][ T10] IPVS: starting estimator thread 0... [ 1760.366661][ T5303] IPVS: using max 11 ests per chain, 26400 per kthread [ 1760.390469][ T5309] FAULT_INJECTION: forcing a failure. [ 1760.390469][ T5309] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1760.390509][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz.1.12886 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1760.390539][ T5309] Tainted: [L]=SOFTLOCKUP [ 1760.390547][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1760.390561][ T5309] Call Trace: [ 1760.390570][ T5309] [ 1760.390580][ T5309] dump_stack_lvl+0xe8/0x150 [ 1760.390621][ T5309] should_fail_ex+0x46b/0x600 [ 1760.390826][ T5309] _copy_from_user+0x2d/0xb0 [ 1760.390882][ T5309] ___sys_sendmsg+0x1c6/0x360 [ 1760.390914][ T5309] ? __lock_acquire+0x6b5/0x2cf0 [ 1760.391007][ T5309] ? __pfx____sys_sendmsg+0x10/0x10 [ 1760.391075][ T5309] ? __fget_files+0x2a/0x420 [ 1760.391097][ T5309] ? __fget_files+0x3a6/0x420 [ 1760.391128][ T5309] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1760.391161][ T5309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1760.391209][ T5309] ? __pfx_ksys_write+0x10/0x10 [ 1760.391271][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.391297][ T5309] do_syscall_64+0x15f/0xf80 [ 1760.391325][ T5309] ? trace_irq_disable+0x3b/0x140 [ 1760.391353][ T5309] ? clear_bhb_loop+0x40/0x90 [ 1760.391382][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.391405][ T5309] RIP: 0033:0x7fa56d2fcdd9 [ 1760.391427][ T5309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.391456][ T5309] RSP: 002b:00007fa56b556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1760.391481][ T5309] RAX: ffffffffffffffda RBX: 00007fa56d575fa0 RCX: 00007fa56d2fcdd9 [ 1760.391497][ T5309] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1760.391512][ T5309] RBP: 00007fa56b556090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.391525][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1760.391538][ T5309] R13: 00007fa56d576038 R14: 00007fa56d575fa0 R15: 00007fffef090c08 [ 1760.391573][ T5309] [ 1760.666370][ T4163] Bluetooth: hci4: command tx timeout [ 1761.167461][ T5326] FAULT_INJECTION: forcing a failure. [ 1761.167461][ T5326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.167496][ T5326] CPU: 1 UID: 0 PID: 5326 Comm: syz.9.12892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1761.167522][ T5326] Tainted: [L]=SOFTLOCKUP [ 1761.167528][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1761.167540][ T5326] Call Trace: [ 1761.167547][ T5326] [ 1761.167555][ T5326] dump_stack_lvl+0xe8/0x150 [ 1761.167583][ T5326] should_fail_ex+0x46b/0x600 [ 1761.167617][ T5326] _copy_from_user+0x2d/0xb0 [ 1761.167639][ T5326] __sys_bpf+0x229/0x950 [ 1761.167789][ T5326] ? __pfx___sys_bpf+0x10/0x10 [ 1761.167808][ T5326] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1761.167891][ T5326] ? ksys_write+0x248/0x270 [ 1761.167914][ T5326] ? __pfx_ksys_write+0x10/0x10 [ 1761.167938][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.167958][ T5326] __x64_sys_bpf+0x7c/0x90 [ 1761.167978][ T5326] do_syscall_64+0x15f/0xf80 [ 1761.167997][ T5326] ? trace_irq_disable+0x3b/0x140 [ 1761.168019][ T5326] ? clear_bhb_loop+0x40/0x90 [ 1761.168041][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.168060][ T5326] RIP: 0033:0x7f5b0254cdd9 [ 1761.168077][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.168093][ T5326] RSP: 002b:00007f5b0079e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1761.168120][ T5326] RAX: ffffffffffffffda RBX: 00007f5b027c5fa0 RCX: 00007f5b0254cdd9 [ 1761.168133][ T5326] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000012 [ 1761.168145][ T5326] RBP: 00007f5b0079e090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.168156][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.168167][ T5326] R13: 00007f5b027c6038 R14: 00007f5b027c5fa0 R15: 00007fff83f6e628 [ 1761.168194][ T5326] [ 1761.389945][ T5328] FAULT_INJECTION: forcing a failure. [ 1761.389945][ T5328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.389987][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.1.12893 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1761.390017][ T5328] Tainted: [L]=SOFTLOCKUP [ 1761.390025][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1761.390039][ T5328] Call Trace: [ 1761.390048][ T5328] [ 1761.390058][ T5328] dump_stack_lvl+0xe8/0x150 [ 1761.390090][ T5328] should_fail_ex+0x46b/0x600 [ 1761.390131][ T5328] _copy_from_user+0x2d/0xb0 [ 1761.390158][ T5328] sk_setsockopt+0x2b3/0x2a90 [ 1761.390291][ T5328] ? get_pid_task+0x20/0x1f0 [ 1761.390339][ T5328] ? __pfx_sk_setsockopt+0x10/0x10 [ 1761.390372][ T5328] ? __lock_acquire+0x6b5/0x2cf0 [ 1761.390407][ T5328] ? do_raw_spin_lock+0x12b/0x2f0 [ 1761.390445][ T5328] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1761.390508][ T5328] udp_lib_setsockopt+0xbc/0x6b0 [ 1761.390603][ T5328] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 1761.390640][ T5328] ? __fget_files+0x2a/0x420 [ 1761.390665][ T5328] udpv6_setsockopt+0x67/0xb0 [ 1761.390729][ T5328] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 1761.390757][ T5328] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1761.390782][ T5328] do_sock_setsockopt+0x17c/0x1b0 [ 1761.390815][ T5328] __x64_sys_setsockopt+0x143/0x1b0 [ 1761.390844][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.390870][ T5328] do_syscall_64+0x15f/0xf80 [ 1761.390894][ T5328] ? trace_irq_disable+0x3b/0x140 [ 1761.390921][ T5328] ? clear_bhb_loop+0x40/0x90 [ 1761.390949][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.390972][ T5328] RIP: 0033:0x7fa56d2fcdd9 [ 1761.390993][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.391012][ T5328] RSP: 002b:00007fa56b556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1761.391035][ T5328] RAX: ffffffffffffffda RBX: 00007fa56d575fa0 RCX: 00007fa56d2fcdd9 [ 1761.391068][ T5328] RDX: 000000000000003f RSI: 0000000000000001 RDI: 0000000000000003 [ 1761.391081][ T5328] RBP: 00007fa56b556090 R08: 0000000000000004 R09: 0000000000000000 [ 1761.391095][ T5328] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 1761.391109][ T5328] R13: 00007fa56d576038 R14: 00007fa56d575fa0 R15: 00007fffef090c08 [ 1761.391144][ T5328] [ 1761.824182][ T5335] FAULT_INJECTION: forcing a failure. [ 1761.824182][ T5335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.824222][ T5335] CPU: 1 UID: 0 PID: 5335 Comm: syz.9.12894 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1761.824252][ T5335] Tainted: [L]=SOFTLOCKUP [ 1761.824260][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1761.824273][ T5335] Call Trace: [ 1761.824283][ T5335] [ 1761.824293][ T5335] dump_stack_lvl+0xe8/0x150 [ 1761.824326][ T5335] should_fail_ex+0x46b/0x600 [ 1761.824369][ T5335] _copy_from_user+0x2d/0xb0 [ 1761.824396][ T5335] sk_setsockopt+0x2b3/0x2a90 [ 1761.824435][ T5335] ? get_pid_task+0x20/0x1f0 [ 1761.824468][ T5335] ? __pfx_sk_setsockopt+0x10/0x10 [ 1761.824501][ T5335] ? __lock_acquire+0x6b5/0x2cf0 [ 1761.824538][ T5335] ? do_raw_spin_lock+0x12b/0x2f0 [ 1761.824578][ T5335] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1761.824611][ T5335] udp_lib_setsockopt+0xbc/0x6b0 [ 1761.824650][ T5335] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 1761.824688][ T5335] ? __fget_files+0x2a/0x420 [ 1761.824713][ T5335] udpv6_setsockopt+0x67/0xb0 [ 1761.824740][ T5335] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 1761.824768][ T5335] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1761.824795][ T5335] do_sock_setsockopt+0x17c/0x1b0 [ 1761.824830][ T5335] __x64_sys_setsockopt+0x143/0x1b0 [ 1761.824860][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.824885][ T5335] do_syscall_64+0x15f/0xf80 [ 1761.824909][ T5335] ? trace_irq_disable+0x3b/0x140 [ 1761.824936][ T5335] ? clear_bhb_loop+0x40/0x90 [ 1761.824964][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.824987][ T5335] RIP: 0033:0x7f5b0254cdd9 [ 1761.825008][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.825026][ T5335] RSP: 002b:00007f5b0079e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1761.825049][ T5335] RAX: ffffffffffffffda RBX: 00007f5b027c5fa0 RCX: 00007f5b0254cdd9 [ 1761.825073][ T5335] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 1761.825086][ T5335] RBP: 00007f5b0079e090 R08: 0000000000000004 R09: 0000000000000000 [ 1761.825097][ T5335] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1761.825111][ T5335] R13: 00007f5b027c6038 R14: 00007f5b027c5fa0 R15: 00007fff83f6e628 [ 1761.825164][ T5335] [ 1762.157204][ T5343] FAULT_INJECTION: forcing a failure. [ 1762.157204][ T5343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.157252][ T5343] CPU: 0 UID: 0 PID: 5343 Comm: syz.1.12896 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1762.157283][ T5343] Tainted: [L]=SOFTLOCKUP [ 1762.157292][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1762.157305][ T5343] Call Trace: [ 1762.157315][ T5343] [ 1762.157325][ T5343] dump_stack_lvl+0xe8/0x150 [ 1762.157359][ T5343] should_fail_ex+0x46b/0x600 [ 1762.157402][ T5343] _copy_from_user+0x2d/0xb0 [ 1762.157430][ T5343] __sys_bpf+0x229/0x950 [ 1762.157462][ T5343] ? __pfx___sys_bpf+0x10/0x10 [ 1762.157487][ T5343] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1762.157541][ T5343] ? ksys_write+0x248/0x270 [ 1762.157571][ T5343] ? __pfx_ksys_write+0x10/0x10 [ 1762.157608][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.157633][ T5343] __x64_sys_bpf+0x7c/0x90 [ 1762.157659][ T5343] do_syscall_64+0x15f/0xf80 [ 1762.157684][ T5343] ? trace_irq_disable+0x3b/0x140 [ 1762.157711][ T5343] ? clear_bhb_loop+0x40/0x90 [ 1762.157741][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.157764][ T5343] RIP: 0033:0x7fa56d2fcdd9 [ 1762.157785][ T5343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.157805][ T5343] RSP: 002b:00007fa56b556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1762.157828][ T5343] RAX: ffffffffffffffda RBX: 00007fa56d575fa0 RCX: 00007fa56d2fcdd9 [ 1762.157845][ T5343] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1762.157859][ T5343] RBP: 00007fa56b556090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.157873][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.157886][ T5343] R13: 00007fa56d576038 R14: 00007fa56d575fa0 R15: 00007fffef090c08 [ 1762.157921][ T5343] [ 1762.160010][ T5343] 9p: Bad value for 'wfdno' [ 1763.877063][ T854] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1764.078360][ T854] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1764.092547][ T854] usb 10-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 1764.092578][ T854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.092600][ T854] usb 10-1: Product: syz [ 1764.092616][ T854] usb 10-1: Manufacturer: syz [ 1764.092631][ T854] usb 10-1: SerialNumber: syz [ 1764.405119][ T854] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1764.687526][ T10] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1764.840710][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1764.841923][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 1764.852200][ T10] usb 2-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 1764.852293][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1764.897719][ T10] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 1764.897752][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.897774][ T10] usb 2-1: Product: syz [ 1764.897788][ T10] usb 2-1: Manufacturer: syz [ 1764.897803][ T10] usb 2-1: SerialNumber: syz [ 1765.486158][ T10] usb 2-1: 0:2 : does not exist [ 1765.490729][ T5404] netlink: 'syz.4.12919': attribute type 7 has an invalid length. [ 1765.673199][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1765.690686][ T4978] udevd[4978]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1765.756867][ T10] usb 2-1: USB disconnect, device number 56 [ 1765.854410][ T5412] FAULT_INJECTION: forcing a failure. [ 1765.854410][ T5412] name failslab, interval 1, probability 0, space 0, times 1 [ 1765.854450][ T5412] CPU: 1 UID: 0 PID: 5412 Comm: syz.1.12921 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1765.854479][ T5412] Tainted: [L]=SOFTLOCKUP [ 1765.854488][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1765.854502][ T5412] Call Trace: [ 1765.854511][ T5412] [ 1765.854521][ T5412] dump_stack_lvl+0xe8/0x150 [ 1765.854555][ T5412] should_fail_ex+0x46b/0x600 [ 1765.854594][ T5412] should_failslab+0xa8/0x100 [ 1765.854707][ T5412] __kmalloc_noprof+0xdf/0x7b0 [ 1765.854758][ T5412] ? percpu_ref_get_many+0x21/0x1e0 [ 1765.854799][ T5412] ? io_cache_alloc_new+0x40/0x100 [ 1765.854880][ T5412] io_cache_alloc_new+0x40/0x100 [ 1765.854908][ T5412] __io_prep_rw+0x2bd/0xed0 [ 1765.854972][ T5412] ? __pfx___io_prep_rw+0x10/0x10 [ 1765.855006][ T5412] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1765.855057][ T5412] io_prep_read+0x33/0x110 [ 1765.855082][ T5412] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 1765.855163][ T5412] io_submit_sqes+0xb8d/0x2240 [ 1765.855227][ T5412] __se_sys_io_uring_enter+0x34a/0x1c40 [ 1765.855265][ T5412] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1765.855306][ T5412] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1765.855336][ T5412] ? fput+0xa0/0xd0 [ 1765.855395][ T5412] ? ksys_write+0x248/0x270 [ 1765.855441][ T5412] ? __pfx_ksys_write+0x10/0x10 [ 1765.855472][ T5412] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1765.855503][ T5412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.855529][ T5412] do_syscall_64+0x15f/0xf80 [ 1765.855554][ T5412] ? trace_irq_disable+0x3b/0x140 [ 1765.855581][ T5412] ? clear_bhb_loop+0x40/0x90 [ 1765.855610][ T5412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.855634][ T5412] RIP: 0033:0x7fa56d2fcdd9 [ 1765.855657][ T5412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.855676][ T5412] RSP: 002b:00007fa56b556028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1765.855699][ T5412] RAX: ffffffffffffffda RBX: 00007fa56d575fa0 RCX: 00007fa56d2fcdd9 [ 1765.855715][ T5412] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1765.855729][ T5412] RBP: 00007fa56b556090 R08: 0000000000000000 R09: 0000000000000000 [ 1765.855743][ T5412] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1765.855757][ T5412] R13: 00007fa56d576038 R14: 00007fa56d575fa0 R15: 00007fffef090c08 [ 1765.855794][ T5412] [ 1766.173381][ T10] usb 10-1: USB disconnect, device number 29 [ 1767.898049][ T5419] FAULT_INJECTION: forcing a failure. [ 1767.898049][ T5419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.898089][ T5419] CPU: 0 UID: 0 PID: 5419 Comm: syz.1.12923 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1767.898119][ T5419] Tainted: [L]=SOFTLOCKUP [ 1767.898128][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1767.898141][ T5419] Call Trace: [ 1767.898150][ T5419] [ 1767.898160][ T5419] dump_stack_lvl+0xe8/0x150 [ 1767.898195][ T5419] should_fail_ex+0x46b/0x600 [ 1767.898239][ T5419] _copy_from_iter+0x1d3/0x1670 [ 1767.898348][ T5419] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 1767.898385][ T5419] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1767.898420][ T5419] ? __pfx__copy_from_iter+0x10/0x10 [ 1767.898455][ T5419] ? alloc_pages_mpol+0x2ae/0x380 [ 1767.898516][ T5419] copy_page_from_iter+0x220/0x2d0 [ 1767.898553][ T5419] anon_pipe_write+0xa11/0x1480 [ 1767.898610][ T5419] ? is_bpf_text_address+0x292/0x2b0 [ 1767.898708][ T5419] ? __pfx_anon_pipe_write+0x10/0x10 [ 1767.898744][ T5419] ? _parse_integer_limit+0x1ae/0x1f0 [ 1767.898795][ T5419] fifo_pipe_write+0x25/0x4b0 [ 1767.898828][ T5419] do_iter_readv_writev+0x62b/0x8d0 [ 1767.898862][ T5419] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1767.898890][ T5419] ? __lock_acquire+0x6b5/0x2cf0 [ 1767.898932][ T5419] ? rw_verify_area+0x25b/0x4e0 [ 1767.898963][ T5419] vfs_writev+0x345/0x9a0 [ 1767.899006][ T5419] ? __pfx_vfs_writev+0x10/0x10 [ 1767.899057][ T5419] ? __fget_files+0x2a/0x420 [ 1767.899084][ T5419] ? __fget_files+0x3a6/0x420 [ 1767.899104][ T5419] ? __fget_files+0x2a/0x420 [ 1767.899136][ T5419] do_writev+0x15a/0x2e0 [ 1767.899171][ T5419] ? __pfx_do_writev+0x10/0x10 [ 1767.899214][ T5419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.899240][ T5419] do_syscall_64+0x15f/0xf80 [ 1767.899265][ T5419] ? trace_irq_disable+0x3b/0x140 [ 1767.899293][ T5419] ? clear_bhb_loop+0x40/0x90 [ 1767.899322][ T5419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.899346][ T5419] RIP: 0033:0x7fa56d2fcdd9 [ 1767.899367][ T5419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1767.899387][ T5419] RSP: 002b:00007fa56b556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1767.899410][ T5419] RAX: ffffffffffffffda RBX: 00007fa56d575fa0 RCX: 00007fa56d2fcdd9 [ 1767.899427][ T5419] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 1767.899441][ T5419] RBP: 00007fa56b556090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.899454][ T5419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.899468][ T5419] R13: 00007fa56d576038 R14: 00007fa56d575fa0 R15: 00007fffef090c08 [ 1767.899505][ T5419] [ 1769.187192][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.187332][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.187692][ T5137] bridge_slave_0: entered allmulticast mode [ 1769.190697][ T5137] bridge_slave_0: entered promiscuous mode [ 1769.329982][ T5451] netlink: 'syz.4.12934': attribute type 1 has an invalid length. [ 1769.330001][ T5451] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12934'. [ 1769.330025][ T5451] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12934'. [ 1769.330035][ T5451] netlink: 'syz.4.12934': attribute type 1 has an invalid length. [ 1769.348850][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.349474][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.350639][ T5137] bridge_slave_1: entered allmulticast mode [ 1769.403211][ T5137] bridge_slave_1: entered promiscuous mode [ 1769.840353][ T5137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1770.107607][ T5462] ipip0: entered promiscuous mode [ 1770.107635][ T5462] ipip0: entered allmulticast mode [ 1770.129153][ T5137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1771.446847][ T5484] comedi comedi4: bad chanlist[0]=0x00000400 chan=1024 range length=2 [ 1771.866920][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12948'. [ 1772.096203][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12944'. [ 1772.134895][ T5137] team0: Port device team_slave_0 added [ 1772.218735][ T5137] team0: Port device team_slave_1 added [ 1772.412509][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.412636][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.412930][ T5166] bridge_slave_0: entered allmulticast mode [ 1772.426307][ T5166] bridge_slave_0: entered promiscuous mode [ 1772.452186][ T5505] FAULT_INJECTION: forcing a failure. [ 1772.452186][ T5505] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.452216][ T5505] CPU: 0 UID: 0 PID: 5505 Comm: syz.1.12951 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1772.452238][ T5505] Tainted: [L]=SOFTLOCKUP [ 1772.452245][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1772.452255][ T5505] Call Trace: [ 1772.452262][ T5505] [ 1772.452268][ T5505] dump_stack_lvl+0xe8/0x150 [ 1772.452293][ T5505] should_fail_ex+0x46b/0x600 [ 1772.452324][ T5505] should_failslab+0xa8/0x100 [ 1772.452345][ T5505] __kmalloc_cache_noprof+0x84/0x690 [ 1772.452364][ T5505] ? __se_sys_mount+0x166/0x420 [ 1772.452466][ T5505] ? memdup_user+0x99/0xd0 [ 1772.452527][ T5505] __se_sys_mount+0x166/0x420 [ 1772.452556][ T5505] ? __pfx___se_sys_mount+0x10/0x10 [ 1772.452586][ T5505] ? __x64_sys_mount+0x20/0xc0 [ 1772.452609][ T5505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.452627][ T5505] do_syscall_64+0x15f/0xf80 [ 1772.452645][ T5505] ? trace_irq_disable+0x3b/0x140 [ 1772.452665][ T5505] ? clear_bhb_loop+0x40/0x90 [ 1772.452685][ T5505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.452701][ T5505] RIP: 0033:0x7fa56d2fcdd9 [ 1772.452717][ T5505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1772.452731][ T5505] RSP: 002b:00007fa56b556028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1772.452747][ T5505] RAX: ffffffffffffffda RBX: 00007fa56d575fa0 RCX: 00007fa56d2fcdd9 [ 1772.452760][ T5505] RDX: 0000200000000200 RSI: 00002000000002c0 RDI: 0000000000000000 [ 1772.452771][ T5505] RBP: 00007fa56b556090 R08: 0000200000000780 R09: 0000000000000000 [ 1772.452785][ T5505] R10: 0000000002004410 R11: 0000000000000246 R12: 0000000000000001 [ 1772.452796][ T5505] R13: 00007fa56d576038 R14: 00007fa56d575fa0 R15: 00007fffef090c08 [ 1772.452821][ T5505] [ 1772.711771][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.711947][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.712200][ T5166] bridge_slave_1: entered allmulticast mode [ 1772.725224][ T5166] bridge_slave_1: entered promiscuous mode [ 1772.753895][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1772.753913][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.753938][ T5137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1773.083655][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1773.083677][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1773.083707][ T5137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1773.357951][ T5166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1773.481134][ T159] bridge_slave_1: left allmulticast mode [ 1773.481176][ T159] bridge_slave_1: left promiscuous mode [ 1773.481482][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.557609][ T159] bridge_slave_0: left allmulticast mode [ 1773.557650][ T159] bridge_slave_0: left promiscuous mode [ 1773.557969][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.105217][ T5542] netlink: 80 bytes leftover after parsing attributes in process `syz.9.12963'. [ 1774.134267][ T5547] FAULT_INJECTION: forcing a failure. [ 1774.134267][ T5547] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.134315][ T5547] CPU: 0 UID: 0 PID: 5547 Comm: syz.1.12968 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1774.134348][ T5547] Tainted: [L]=SOFTLOCKUP [ 1774.134356][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1774.134370][ T5547] Call Trace: [ 1774.134379][ T5547] [ 1774.134389][ T5547] dump_stack_lvl+0xe8/0x150 [ 1774.134422][ T5547] should_fail_ex+0x46b/0x600 [ 1774.134467][ T5547] should_failslab+0xa8/0x100 [ 1774.134499][ T5547] kmem_cache_alloc_noprof+0x87/0x680 [ 1774.134526][ T5547] ? radix_tree_node_alloc+0xbf/0x3d0 [ 1774.134639][ T5547] ? __lock_acquire+0x6b5/0x2cf0 [ 1774.134676][ T5547] radix_tree_node_alloc+0xbf/0x3d0 [ 1774.134710][ T5547] idr_get_free+0x2b9/0xa70 [ 1774.134791][ T5547] idr_alloc_u32+0x193/0x330 [ 1774.134858][ T5547] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1774.134886][ T5547] ? rt_spin_lock+0x20e/0x400 [ 1774.134925][ T5547] idr_alloc_cyclic+0xa1/0x1b0 [ 1774.134956][ T5547] ? bpf_map_alloc_id+0x2d/0x330 [ 1774.134996][ T5547] bpf_map_alloc_id+0x65/0x330 [ 1774.135032][ T5547] map_create+0x11fb/0x16b0 [ 1774.135064][ T5547] ? security_bpf+0x7e/0x2d0 [ 1774.135175][ T5547] __sys_bpf+0x6e1/0x950 [ 1774.135206][ T5547] ? __pfx___sys_bpf+0x10/0x10 [ 1774.135231][ T5547] ? kmem_cache_free+0x187/0x6c0 [ 1774.135279][ T5547] ? ksys_write+0x202/0x270 [ 1774.135314][ T5547] ? __pfx_ksys_write+0x10/0x10 [ 1774.135346][ T5547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.135371][ T5547] __x64_sys_bpf+0x7c/0x90 [ 1774.135397][ T5547] do_syscall_64+0x15f/0xf80 [ 1774.135422][ T5547] ? trace_irq_disable+0x3b/0x140 [ 1774.135449][ T5547] ? clear_bhb_loop+0x40/0x90 [ 1774.135477][ T5547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.135501][ T5547] RIP: 0033:0x7fa56d2fcdd9 [ 1774.135523][ T5547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1774.135542][ T5547] RSP: 002b:00007fa56b556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1774.135565][ T5547] RAX: ffffffffffffffda RBX: 00007fa56d575fa0 RCX: 00007fa56d2fcdd9 [ 1774.135581][ T5547] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 1774.135596][ T5547] RBP: 00007fa56b556090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.135610][ T5547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1774.135623][ T5547] R13: 00007fa56d576038 R14: 00007fa56d575fa0 R15: 00007fffef090c08 [ 1774.135661][ T5547] [ 1774.926864][ T854] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1775.085988][ T854] usb 2-1: Using ep0 maxpacket: 32 [ 1775.197930][ T854] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1775.197969][ T854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.477561][ T854] usb 2-1: selecting invalid altsetting 3 [ 1775.477585][ T854] comedi comedi5: could not set alternate setting 3 in high speed [ 1775.477601][ T854] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1775.697691][ T854] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1775.700723][ T854] usb 2-1: USB disconnect, device number 57 [ 1775.796402][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.867118][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.899512][ T159] bond0 (unregistering): Released all slaves [ 1775.940583][ T5166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.513265][ T5166] team0: Port device team_slave_0 added [ 1776.663981][ T5137] hsr_slave_0: entered promiscuous mode [ 1776.665647][ T5137] hsr_slave_1: entered promiscuous mode [ 1776.666640][ T5137] debugfs: 'hsr0' already exists in 'hsr' [ 1776.666669][ T5137] Cannot create hsr debugfs directory [ 1776.709406][ T5166] team0: Port device team_slave_1 added [ 1776.923887][ T159] hsr_slave_0: left promiscuous mode [ 1776.955956][ T159] hsr_slave_1: left promiscuous mode [ 1776.957192][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.007897][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.055607][ T10] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1777.063244][ T5580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12978'. [ 1777.210630][ T10] usb 10-1: config 0 has an invalid interface number: 133 but max is 0 [ 1777.210661][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.210684][ T10] usb 10-1: config 0 has no interface number 0 [ 1777.210746][ T10] usb 10-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1777.210771][ T10] usb 10-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1777.213875][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1777.213911][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.213934][ T10] usb 10-1: Product: syz [ 1777.213950][ T10] usb 10-1: Manufacturer: syz [ 1777.213965][ T10] usb 10-1: SerialNumber: syz [ 1777.363079][ T10] usb 10-1: config 0 descriptor?? [ 1777.701459][ T5598] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12983'. [ 1777.984506][ T10] usb 10-1: probing VID:PID(0424:012C) [ 1777.997704][ T10] usb 10-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1777.997743][ T10] usb 10-1: Could not find two sets of bulk-in/out endpoint pairs [ 1778.136127][ T10] vub300 10-1:0.133: probe with driver vub300 failed with error -22 [ 1778.149613][ T10] usb 10-1: USB disconnect, device number 30 [ 1778.176815][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1778.237893][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1778.692712][ T5612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1778.766950][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1778.766969][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.767008][ T5166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1778.850657][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1778.850679][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.850713][ T5166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1779.453563][ T5166] hsr_slave_0: entered promiscuous mode [ 1779.455018][ T5166] hsr_slave_1: entered promiscuous mode [ 1779.752961][ T5626] cgroup: none used incorrectly [ 1780.115580][ T10] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1780.425915][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.425950][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1780.429371][ T10] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1780.429408][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1780.429433][ T10] usb 10-1: SerialNumber: syz [ 1780.916714][ T10] usb 10-1: skipping empty audio interface (v1) [ 1781.743555][ T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1781.904229][ T10] usb 10-1: USB disconnect, device number 31 [ 1782.185824][ T5479] udevd[5479]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1782.333238][ T5654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1783.922907][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1784.077500][ T5711] 9p: Bad value for 'wfdno' [ 1784.391999][ T159] bridge_slave_1: left allmulticast mode [ 1784.392038][ T159] bridge_slave_1: left promiscuous mode [ 1784.392324][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.559623][ T159] bridge_slave_0: left allmulticast mode [ 1784.559665][ T159] bridge_slave_0: left promiscuous mode [ 1784.559961][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.192135][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1785.306793][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1785.392240][ T159] bond0 (unregistering): Released all slaves [ 1786.072136][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13017'. [ 1786.240186][ T5754] netlink: 68 bytes leftover after parsing attributes in process `syz.9.13017'. [ 1786.374547][ T5749] macvlan2: entered allmulticast mode [ 1786.374573][ T5749] hsr0: entered allmulticast mode [ 1786.374589][ T5749] hsr_slave_0: entered allmulticast mode [ 1786.374617][ T5749] hsr_slave_1: entered allmulticast mode [ 1786.374679][ T5749] hsr0: entered promiscuous mode [ 1786.926003][ T159] hsr_slave_0: left promiscuous mode [ 1786.978339][ T159] hsr_slave_1: left promiscuous mode [ 1786.979623][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.039661][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1787.229194][ T5776] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1787.229226][ T5776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1787.229645][ T5776] vhci_hcd vhci_hcd.0: Device attached [ 1787.268975][ T5775] vhci_hcd vhci_hcd.0: port 0 already used [ 1787.269697][ T5786] vhci_hcd: connection closed [ 1787.270290][T27046] vhci_hcd vhci_hcd.9: stop threads [ 1787.270316][T27046] vhci_hcd vhci_hcd.9: release socket [ 1787.270373][T27046] vhci_hcd vhci_hcd.9: disconnect device [ 1787.788303][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1787.867326][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1787.887913][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13035'. [ 1788.176343][ T5792] bond1: Removing last arp target with arp_interval on [ 1788.176368][ T5792] bond1: Removing last ns target with arp_interval on [ 1788.228311][ T5799] geneve3: entered promiscuous mode [ 1788.228343][ T5799] geneve3: entered allmulticast mode [ 1788.387644][T18155] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1788.391987][T27034] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1788.392584][T27034] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1788.392632][T27034] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1789.340143][ T5826] 9p: Bad value for 'rfdno' [ 1792.787110][ T5924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1793.368494][ T5938] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 1793.403006][ T5929] IPVS: stopping backup sync thread 5938 ... [ 1793.436035][ T5941] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13076'. [ 1793.438200][ T5941] netlink: 140 bytes leftover after parsing attributes in process `syz.4.13076'. [ 1794.176415][ T5955] bond2: entered promiscuous mode [ 1795.177172][ T5137] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1795.382693][ T5137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1795.414552][ T5137] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1795.572238][ T5137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1795.574254][ T5137] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1795.769058][ T5137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1795.791552][ T5137] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1795.840087][ T5137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1796.576700][ T854] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1796.767665][ T854] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1796.785948][ T854] usb 10-1: not running at top speed; connect to a high speed hub [ 1796.787248][ T854] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.787277][ T854] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1796.837685][ T854] usb 10-1: string descriptor 0 read error: -22 [ 1796.837834][ T854] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1796.837860][ T854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.882201][ T854] usb 10-1: 0:1 : does not exist [ 1796.882223][ T854] usb 10-1: 0:2 : does not exist [ 1797.087176][ T6007] tmpfs: Bad value for 'mpol' [ 1797.581910][ T854] usb 10-1: 6:0: failed to get current value for ch 1 (-22) [ 1797.615028][ T854] usb 10-1: 6:0: failed to get current value for ch 0 (-22) [ 1797.858514][ T854] usb 10-1: USB disconnect, device number 32 [ 1797.972907][ T6026] macsec1: entered promiscuous mode [ 1797.973542][ T6026] macsec1: entered allmulticast mode [ 1797.973686][ T6026] veth1_macvtap: entered allmulticast mode [ 1798.000992][ T6026] veth1_macvtap: left allmulticast mode [ 1798.822434][ T5137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1798.896217][ T5166] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1798.942038][ T5166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1798.957595][ T5166] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1799.007872][ T5166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1799.010965][ T5166] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1799.230399][ T5166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1799.250655][ T5166] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1799.327512][ T5166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1799.550733][ T5137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.650366][T18155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.650593][T18155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.690572][T18155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.693074][T18155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.000404][ T6090] netlink: 632 bytes leftover after parsing attributes in process `syz.9.13131'. [ 1800.096473][ T6090] 9p: Bad value for 'wfdno' [ 1800.458991][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13134'. [ 1800.687292][ T5166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1801.024183][ T5166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1801.128930][ T2178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.129026][ T2178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.150254][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13142'. [ 1801.150342][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13142'. [ 1801.176588][T18155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.176720][T18155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.259386][ T6138] nbd9: detected capacity change from 0 to 63 [ 1802.517920][ T4163] block nbd9: Receive control failed (result -32) [ 1802.630875][ T5137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.732355][ T6154] [ 1802.732369][ T6154] ====================================================== [ 1802.732378][ T6154] WARNING: possible circular locking dependency detected [ 1802.732396][ T6154] syzkaller #0 Tainted: G L [ 1802.732409][ T6154] ------------------------------------------------------ [ 1802.732418][ T6154] udevd/6154 is trying to acquire lock: [ 1802.732430][ T6154] ffff88802485d660 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100 [ 1802.732573][ T6154] [ 1802.732573][ T6154] but task is already holding lock: [ 1802.732581][ T6154] ffff8880270e7170 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1802.732625][ T6154] [ 1802.732625][ T6154] which lock already depends on the new lock. [ 1802.732625][ T6154] [ 1802.732633][ T6154] [ 1802.732633][ T6154] the existing dependency chain (in reverse order) is: [ 1802.732641][ T6154] [ 1802.732641][ T6154] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1802.732670][ T6154] mutex_lock_nested+0x5a/0x1d0 [ 1802.732702][ T6154] nbd_queue_rq+0xc6/0x1100 [ 1802.732719][ T6154] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1802.732802][ T6154] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1802.732855][ T6154] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1802.732884][ T6154] blk_mq_run_hw_queue+0x368/0x520 [ 1802.732909][ T6154] blk_mq_dispatch_list+0xd1f/0xe20 [ 1802.732936][ T6154] blk_mq_flush_plug_list+0x48d/0x570 [ 1802.732964][ T6154] __blk_flush_plug+0x3ed/0x4d0 [ 1802.732991][ T6154] __submit_bio+0x28d/0x580 [ 1802.733018][ T6154] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1802.733045][ T6154] block_read_full_folio+0x599/0x830 [ 1802.733140][ T6154] filemap_read_folio+0x137/0x3b0 [ 1802.733197][ T6154] do_read_cache_folio+0x2bf/0x560 [ 1802.733220][ T6154] read_part_sector+0xb8/0x2b0 [ 1802.733272][ T6154] adfspart_check_ICS+0xb1/0x960 [ 1802.733302][ T6154] bdev_disk_changed+0x817/0x1770 [ 1802.733330][ T6154] blkdev_get_whole+0x2e5/0x480 [ 1802.733387][ T6154] bdev_open+0x31e/0xcc0 [ 1802.733415][ T6154] blkdev_open+0x485/0x620 [ 1802.733444][ T6154] do_dentry_open+0x83d/0x13e0 [ 1802.733500][ T6154] vfs_open+0x3b/0x350 [ 1802.733529][ T6154] path_openat+0x2e43/0x38a0 [ 1802.733552][ T6154] do_file_open+0x23e/0x4a0 [ 1802.733575][ T6154] do_sys_openat2+0x113/0x200 [ 1802.733605][ T6154] __x64_sys_openat+0x138/0x170 [ 1802.733638][ T6154] do_syscall_64+0x15f/0xf80 [ 1802.733661][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.733684][ T6154] [ 1802.733684][ T6154] -> #5 (set->srcu){.+.+}-{0:0}: [ 1802.733716][ T6154] __synchronize_srcu+0xca/0x300 [ 1802.733796][ T6154] elevator_switch+0x1e8/0x7a0 [ 1802.733824][ T6154] elevator_change+0x2cc/0x450 [ 1802.733851][ T6154] elevator_set_default+0x36c/0x430 [ 1802.733880][ T6154] blk_register_queue+0x3e9/0x4e0 [ 1802.733910][ T6154] __add_disk+0x677/0xd50 [ 1802.733928][ T6154] add_disk_fwnode+0xfb/0x480 [ 1802.733947][ T6154] nbd_dev_add+0x72c/0xb50 [ 1802.733966][ T6154] nbd_init+0x168/0x1f0 [ 1802.734080][ T6154] do_one_initcall+0x250/0x870 [ 1802.734111][ T6154] do_initcall_level+0x104/0x190 [ 1802.734201][ T6154] do_initcalls+0x59/0xa0 [ 1802.734224][ T6154] kernel_init_freeable+0x2a6/0x3e0 [ 1802.734248][ T6154] kernel_init+0x1d/0x1d0 [ 1802.734303][ T6154] ret_from_fork+0x514/0xb70 [ 1802.734337][ T6154] ret_from_fork_asm+0x1a/0x30 [ 1802.734363][ T6154] [ 1802.734363][ T6154] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1802.734392][ T6154] mutex_lock_nested+0x5a/0x1d0 [ 1802.734421][ T6154] elevator_change+0x1b3/0x450 [ 1802.734446][ T6154] elevator_set_none+0xb5/0x140 [ 1802.734472][ T6154] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 1802.734508][ T6154] nbd_start_device+0x17f/0xb20 [ 1802.734527][ T6154] nbd_genl_connect+0x1651/0x1c80 [ 1802.734545][ T6154] genl_family_rcv_msg_doit+0x22a/0x330 [ 1802.734640][ T6154] genl_rcv_msg+0x61c/0x7a0 [ 1802.734669][ T6154] netlink_rcv_skb+0x232/0x4b0 [ 1802.734692][ T6154] genl_rcv+0x28/0x40 [ 1802.734720][ T6154] netlink_unicast+0x780/0x920 [ 1802.734740][ T6154] netlink_sendmsg+0x813/0xb40 [ 1802.734764][ T6154] ____sys_sendmsg+0x94c/0x9c0 [ 1802.734791][ T6154] ___sys_sendmsg+0x2a5/0x360 [ 1802.734816][ T6154] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1802.734842][ T6154] do_syscall_64+0x15f/0xf80 [ 1802.734863][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.734886][ T6154] [ 1802.734886][ T6154] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1802.734923][ T6154] blk_alloc_queue+0x54e/0x690 [ 1802.734949][ T6154] __blk_mq_alloc_disk+0x197/0x390 [ 1802.734979][ T6154] nbd_dev_add+0x499/0xb50 [ 1802.734997][ T6154] nbd_init+0x168/0x1f0 [ 1802.735020][ T6154] do_one_initcall+0x250/0x870 [ 1802.735045][ T6154] do_initcall_level+0x104/0x190 [ 1802.735070][ T6154] do_initcalls+0x59/0xa0 [ 1802.735094][ T6154] kernel_init_freeable+0x2a6/0x3e0 [ 1802.735126][ T6154] kernel_init+0x1d/0x1d0 [ 1802.735154][ T6154] ret_from_fork+0x514/0xb70 [ 1802.735175][ T6154] ret_from_fork_asm+0x1a/0x30 [ 1802.735201][ T6154] [ 1802.735201][ T6154] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1802.735230][ T6154] fs_reclaim_acquire+0x71/0x100 [ 1802.735256][ T6154] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1802.735278][ T6154] __alloc_skb+0x1d0/0x7d0 [ 1802.735300][ T6154] __ip6_append_data+0x2c7c/0x3e90 [ 1802.735377][ T6154] ip6_append_data+0x10f/0x280 [ 1802.735405][ T6154] rawv6_sendmsg+0x12d3/0x18e0 [ 1802.735436][ T6154] ____sys_sendmsg+0x7da/0x9c0 [ 1802.735460][ T6154] ___sys_sendmsg+0x2a5/0x360 [ 1802.735486][ T6154] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1802.735513][ T6154] do_syscall_64+0x15f/0xf80 [ 1802.735535][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.735556][ T6154] [ 1802.735556][ T6154] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1802.735586][ T6154] lock_sock_nested+0x41/0x130 [ 1802.735619][ T6154] inet_shutdown+0x6a/0x390 [ 1802.735666][ T6154] nbd_mark_nsock_dead+0x2e9/0x560 [ 1802.735687][ T6154] recv_work+0x1c4c/0x1d60 [ 1802.735708][ T6154] process_scheduled_works+0xb5d/0x1860 [ 1802.735731][ T6154] worker_thread+0xa53/0xfc0 [ 1802.735753][ T6154] kthread+0x388/0x470 [ 1802.735779][ T6154] ret_from_fork+0x514/0xb70 [ 1802.735801][ T6154] ret_from_fork_asm+0x1a/0x30 [ 1802.735827][ T6154] [ 1802.735827][ T6154] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1802.735857][ T6154] __lock_acquire+0x15a5/0x2cf0 [ 1802.735886][ T6154] lock_acquire+0x106/0x350 [ 1802.735912][ T6154] mutex_lock_nested+0x5a/0x1d0 [ 1802.735941][ T6154] nbd_queue_rq+0x37b/0x1100 [ 1802.735958][ T6154] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1802.735985][ T6154] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1802.736015][ T6154] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1802.736044][ T6154] blk_mq_run_hw_queue+0x368/0x520 [ 1802.736068][ T6154] blk_mq_dispatch_list+0xd1f/0xe20 [ 1802.736104][ T6154] blk_mq_flush_plug_list+0x48d/0x570 [ 1802.736132][ T6154] __blk_flush_plug+0x3ed/0x4d0 [ 1802.736162][ T6154] __submit_bio+0x28d/0x580 [ 1802.736189][ T6154] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1802.736216][ T6154] block_read_full_folio+0x599/0x830 [ 1802.736246][ T6154] filemap_read_folio+0x137/0x3b0 [ 1802.736269][ T6154] do_read_cache_folio+0x2bf/0x560 [ 1802.736290][ T6154] read_part_sector+0xb8/0x2b0 [ 1802.736318][ T6154] adfspart_check_ICS+0xb1/0x960 [ 1802.736346][ T6154] bdev_disk_changed+0x817/0x1770 [ 1802.736374][ T6154] blkdev_get_whole+0x2e5/0x480 [ 1802.736401][ T6154] bdev_open+0x31e/0xcc0 [ 1802.736427][ T6154] blkdev_open+0x485/0x620 [ 1802.736457][ T6154] do_dentry_open+0x83d/0x13e0 [ 1802.736488][ T6154] vfs_open+0x3b/0x350 [ 1802.736513][ T6154] path_openat+0x2e43/0x38a0 [ 1802.736534][ T6154] do_file_open+0x23e/0x4a0 [ 1802.736555][ T6154] do_sys_openat2+0x113/0x200 [ 1802.736585][ T6154] __x64_sys_openat+0x138/0x170 [ 1802.736615][ T6154] do_syscall_64+0x15f/0xf80 [ 1802.736637][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.736657][ T6154] [ 1802.736657][ T6154] other info that might help us debug this: [ 1802.736657][ T6154] [ 1802.736664][ T6154] Chain exists of: [ 1802.736664][ T6154] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1802.736664][ T6154] [ 1802.736698][ T6154] Possible unsafe locking scenario: [ 1802.736698][ T6154] [ 1802.736705][ T6154] CPU0 CPU1 [ 1802.736712][ T6154] ---- ---- [ 1802.736718][ T6154] lock(&cmd->lock); [ 1802.736732][ T6154] lock(set->srcu); [ 1802.736747][ T6154] lock(&cmd->lock); [ 1802.736761][ T6154] lock(&nsock->tx_lock); [ 1802.736774][ T6154] [ 1802.736774][ T6154] *** DEADLOCK *** [ 1802.736774][ T6154] [ 1802.736790][ T6154] 3 locks held by udevd/6154: [ 1802.736802][ T6154] #0: ffff8880270844c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1802.736859][ T6154] #1: ffff888025e7b898 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x33e/0x520 [ 1802.736911][ T6154] #2: ffff8880270e7170 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1802.736960][ T6154] [ 1802.736960][ T6154] stack backtrace: [ 1802.736975][ T6154] CPU: 0 UID: 0 PID: 6154 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1802.737003][ T6154] Tainted: [L]=SOFTLOCKUP [ 1802.737011][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1802.737025][ T6154] Call Trace: [ 1802.737033][ T6154] [ 1802.737043][ T6154] dump_stack_lvl+0xe8/0x150 [ 1802.737068][ T6154] print_circular_bug+0x2e1/0x300 [ 1802.737092][ T6154] check_noncircular+0x12e/0x150 [ 1802.737145][ T6154] __lock_acquire+0x15a5/0x2cf0 [ 1802.737181][ T6154] ? __pfx___schedule+0x10/0x10 [ 1802.737204][ T6154] ? irqentry_exit+0x218/0x730 [ 1802.737227][ T6154] ? trace_irq_disable+0x3b/0x140 [ 1802.737255][ T6154] ? nbd_queue_rq+0x37b/0x1100 [ 1802.737274][ T6154] lock_acquire+0x106/0x350 [ 1802.737300][ T6154] ? nbd_queue_rq+0x37b/0x1100 [ 1802.737322][ T6154] ? nbd_queue_rq+0x37b/0x1100 [ 1802.737345][ T6154] ? nbd_queue_rq+0x37b/0x1100 [ 1802.737364][ T6154] mutex_lock_nested+0x5a/0x1d0 [ 1802.737393][ T6154] ? nbd_queue_rq+0x37b/0x1100 [ 1802.737417][ T6154] nbd_queue_rq+0x37b/0x1100 [ 1802.737442][ T6154] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1802.737460][ T6154] ? preempt_schedule_common+0x82/0xd0 [ 1802.737478][ T6154] ? preempt_schedule_thunk+0x16/0x30 [ 1802.737512][ T6154] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1802.737551][ T6154] ? sbitmap_get+0x229/0x390 [ 1802.737644][ T6154] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1802.737674][ T6154] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1802.737707][ T6154] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1802.737761][ T6154] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1802.737795][ T6154] ? blk_mq_hw_queue_need_run+0x13c/0x690 [ 1802.737828][ T6154] ? blk_mq_run_hw_queue+0x33e/0x520 [ 1802.737857][ T6154] ? blk_mq_run_hw_queue+0x33e/0x520 [ 1802.737889][ T6154] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1802.737920][ T6154] ? blk_mq_run_hw_queue+0x33e/0x520 [ 1802.737948][ T6154] blk_mq_run_hw_queue+0x368/0x520 [ 1802.737979][ T6154] blk_mq_dispatch_list+0xd1f/0xe20 [ 1802.738009][ T6154] ? blk_add_trace_plug+0x1c/0x240 [ 1802.738040][ T6154] ? blk_mq_dispatch_list+0x210/0xe20 [ 1802.738074][ T6154] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1802.738114][ T6154] ? rcu_is_watching+0x15/0xb0 [ 1802.738147][ T6154] blk_mq_flush_plug_list+0x48d/0x570 [ 1802.738179][ T6154] ? blk_add_rq_to_plug+0x300/0x450 [ 1802.738209][ T6154] ? blk_mq_submit_bio+0x1b66/0x29d0 [ 1802.738238][ T6154] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1802.738276][ T6154] __blk_flush_plug+0x3ed/0x4d0 [ 1802.738308][ T6154] ? __pfx___blk_flush_plug+0x10/0x10 [ 1802.738337][ T6154] ? blkg_get+0x20/0x1d0 [ 1802.738417][ T6154] __submit_bio+0x28d/0x580 [ 1802.738451][ T6154] ? __pfx___submit_bio+0x10/0x10 [ 1802.738486][ T6154] ? blk_add_trace_bio+0x2e/0x2f0 [ 1802.738519][ T6154] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1802.738550][ T6154] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1802.738591][ T6154] block_read_full_folio+0x599/0x830 [ 1802.738625][ T6154] ? __pfx_blkdev_get_block+0x10/0x10 [ 1802.738658][ T6154] filemap_read_folio+0x137/0x3b0 [ 1802.738688][ T6154] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1802.738721][ T6154] ? __pfx_filemap_read_folio+0x10/0x10 [ 1802.738745][ T6154] ? filemap_add_folio+0x3d9/0x610 [ 1802.738815][ T6154] do_read_cache_folio+0x2bf/0x560 [ 1802.738841][ T6154] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1802.738877][ T6154] read_part_sector+0xb8/0x2b0 [ 1802.738907][ T6154] adfspart_check_ICS+0xb1/0x960 [ 1802.738938][ T6154] ? seq_buf_printf+0x212/0x2d0 [ 1802.738963][ T6154] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1802.738992][ T6154] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1802.739030][ T6154] bdev_disk_changed+0x817/0x1770 [ 1802.739071][ T6154] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1802.739110][ T6154] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1802.739139][ T6154] blkdev_get_whole+0x2e5/0x480 [ 1802.739172][ T6154] bdev_open+0x31e/0xcc0 [ 1802.739207][ T6154] blkdev_open+0x485/0x620 [ 1802.739242][ T6154] ? __pfx_blkdev_open+0x10/0x10 [ 1802.739275][ T6154] do_dentry_open+0x83d/0x13e0 [ 1802.739313][ T6154] vfs_open+0x3b/0x350 [ 1802.739343][ T6154] ? path_openat+0x2e2b/0x38a0 [ 1802.739368][ T6154] path_openat+0x2e43/0x38a0 [ 1802.739412][ T6154] ? __pfx_path_openat+0x10/0x10 [ 1802.739439][ T6154] ? kasan_save_track+0x4f/0x80 [ 1802.739459][ T6154] ? kasan_save_track+0x3e/0x80 [ 1802.739478][ T6154] ? __kasan_slab_alloc+0x6c/0x80 [ 1802.739499][ T6154] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1802.739527][ T6154] ? do_raw_spin_lock+0x12b/0x2f0 [ 1802.739558][ T6154] do_file_open+0x23e/0x4a0 [ 1802.739583][ T6154] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1802.739610][ T6154] ? __pfx_do_file_open+0x10/0x10 [ 1802.739633][ T6154] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1802.739679][ T6154] ? alloc_fd+0x64e/0x6c0 [ 1802.739746][ T6154] do_sys_openat2+0x113/0x200 [ 1802.739781][ T6154] ? __pfx_do_sys_openat2+0x10/0x10 [ 1802.739819][ T6154] ? up_read+0x23/0x40 [ 1802.739841][ T6154] ? do_user_addr_fault+0xc6f/0x1340 [ 1802.739876][ T6154] __x64_sys_openat+0x138/0x170 [ 1802.739911][ T6154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.739934][ T6154] do_syscall_64+0x15f/0xf80 [ 1802.739958][ T6154] ? trace_irq_disable+0x3b/0x140 [ 1802.739983][ T6154] ? clear_bhb_loop+0x40/0x90 [ 1802.740008][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.740031][ T6154] RIP: 0033:0x7f5d4352b407 [ 1802.740053][ T6154] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1802.740072][ T6154] RSP: 002b:00007ffdf57d5470 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1802.740100][ T6154] RAX: ffffffffffffffda RBX: 00007f5d4343d880 RCX: 00007f5d4352b407 [ 1802.740117][ T6154] RDX: 00000000000a0800 RSI: 000055c4a1b7c640 RDI: ffffffffffffff9c [ 1802.740132][ T6154] RBP: 000055c4a1b58910 R08: 0000000000000000 R09: 0000000000000000 [ 1802.740146][ T6154] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c4a1b58500 [ 1802.740159][ T6154] R13: 000055c4a1b66190 R14: 00007ffdf57d5538 R15: 000055c4a1b58500 [ 1802.740183][ T6154] [ 1802.746679][ T6159] netlink: 'syz.4.13154': attribute type 1 has an invalid length. [ 1802.868480][ T6154] block nbd9: Dead connection, failed to find a fallback [ 1802.868572][ T6154] block nbd9: shutting down sockets [ 1802.868640][ T6154] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.868733][ T6154] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1802.869205][ T6154] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.869271][ T6154] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1802.874481][ T6154] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.890277][ T6154] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1802.890756][ T6154] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.890864][ T6154] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1802.894555][ T6154] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.894642][ T6154] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1802.915041][ T6154] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.915146][ T6154] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1802.915722][ T6154] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.915839][ T6154] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1802.916338][ T6154] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.916411][ T6154] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1802.931789][ T6154] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.931895][ T6154] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1802.932192][ T6154] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1802.932271][ T6154] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1803.011319][ T6154] ldm_validate_partition_table(): Disk read failed. [ 1803.070740][ T6154] Dev nbd9: unable to read RDB block 0 [ 1803.133902][ T6154] nbd9: unable to read partition table [ 1803.322608][ T6154] ldm_validate_partition_table(): Disk read failed. [ 1803.365914][ T6154] Dev nbd9: unable to read RDB block 0 [ 1803.430706][ T6154] nbd9: unable to read partition table [ 1803.557684][ T5137] veth0_vlan: entered promiscuous mode [ 1803.561287][T27034] Bluetooth: hci5: Frame reassembly failed (-84) [ 1803.596031][ T1292] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1803.885357][ T5137] veth1_vlan: entered promiscuous mode [ 1804.513681][ T5137] veth0_macvtap: entered promiscuous mode [ 1804.523583][ T5137] veth1_macvtap: entered promiscuous mode [ 1804.546041][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1804.554653][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1804.577762][T18159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.578077][T18159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.578197][T18159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.578234][T18159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.744408][ T5137] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 1804.816464][T27046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.816489][T27046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.822718][ T5166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1804.823142][ T5137] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 1804.882930][T27046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.882952][T27046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.072697][ T5166] veth0_vlan: entered promiscuous mode [ 1805.087760][ T5166] veth1_vlan: entered promiscuous mode [ 1805.114016][ T5166] veth0_macvtap: entered promiscuous mode [ 1805.124372][ T5166] veth1_macvtap: entered promiscuous mode [ 1805.141514][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1805.156365][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1805.161897][T18159] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.162060][T18159] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.162098][T18159] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.162131][T18159] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.324703][ T5166] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 1805.352582][T15518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.352605][T15518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.357987][ T5166] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 1805.402109][T15518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.402132][T15518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.545561][ T4163] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1805.545566][ T5605] Bluetooth: hci5: command 0x1003 tx timeout