last executing test programs: 13.597416969s ago: executing program 1 (id=38): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)=ANY=[], 0xb0) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="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", 0x119) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 12.88899788s ago: executing program 3 (id=39): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x1) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x100}, {0x81000, 0x800009, 0x40000000009, 0xffffffff, 0x100000000, 0x8, 0x200000003, 0x9}, {0x4000000000000007, 0x0, 0xffffffffffff8004, 0x9}, 0x5, 0x6e6bb7, 0x1, 0x0, 0x3, 0x3}, {{@in=@private=0xa010100, 0x4d5, 0x6c}, 0x2, @in=@broadcast, 0x3503, 0x4, 0x8, 0x0, 0x9075, 0xf2, 0x7}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60fd828000081101fc000000000000000000000000000000ff020000000000000000000000000001fffc4e22000890"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddcefd79095bf8fb6b4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f"]) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) shutdown(r5, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) syz_open_dev$dvb_demux(&(0x7f0000002500), 0x8, 0x200000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002540), 0x1a5401, 0x0) vmsplice(r2, 0x0, 0x0, 0x4) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100070000000000040002000000000008000200", @ANYRES32=r1, @ANYRES32=r0], 0x2c, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000040004800800020001000000080001"], 0x44}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="500000001000010400000000004e83e300000000caded8ec18a5a19db9b1323b78da8a3079f8e6f2f9c1a38477808547f78fa227c3d128fecb623b66c48a32eb3a54b8cdd332fc05201ac7a5717222da0c51fcae8c247fc1259310f7eb767f63ffe3597d541a219776244357d18b41a7a13e3180d2254f1d86dba9508909caa0da52614229c407e6cefad6974a3cbb187f2e9e7407191181391d710ba8", @ANYRES32=0x0, @ANYBLOB="57630700000000001c0012800b00010067656e65766500000c00028005000900010000001400030067656e65766531000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r10, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x1100000000000000, 0x6, 0x10000109e93, 0xffffffffffffffff, 0x400000, 0x3, 0xfffffffffffffffc, 0x2, 0x7fffffffffffffff, 0xc1, 0x2, 0x6, 0x5, 0x8000000000000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x2a}, 0x28) ioctl$KVM_RUN(r10, 0xae80, 0x0) write$FUSE_INIT(r5, &(0x7f00000023c0)={0x50, 0xffffffffffffffda, r7, {0x7, 0x2d, 0x6, 0x0, 0xfffd, 0x40, 0x4, 0x7ff, 0x0, 0x0, 0x20, 0x8}}, 0x50) lsetxattr$trusted_overlay_opaque(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480), &(0x7f00000024c0), 0x2, 0x2) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.589965587s ago: executing program 4 (id=52): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x13347000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x402a1, 0x21, &(0x7f00000001c0)={0x0, 0x8, 0x4e, 0x8}, 0x8, 0x6, 0x6, 0x0, 0x1, 0x101, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000001c0)="23abaf585cfef53bb3e25e932efcb030faaeb56a23d562b9a2268ae99cd03de6bdf8ae2e699adc8f69fb03354752688d77fa4ae37714e71551317cfe4d29999e43326ca56a584c6988403177e59b4027", 0x50}], 0x1, &(0x7f0000003c00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008810}], 0x1, 0x4004) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000002940)=""/79, 0x4f}], 0x2}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0xfffffe29) read$FUSE(r4, &(0x7f0000004400)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) landlock_create_ruleset(&(0x7f00000002c0)={0x520, 0xd, 0x3}, 0x30, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @loopback={0xe0ffffff00000000}, 0xd}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a}, 0xe) recvmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x102, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000003000000cffd3f00ff07"], 0x50) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x10b700, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000200)=@x={0x94, 0xe, "c70a4b56ba65"}) shutdown(r5, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x65) 7.530748412s ago: executing program 1 (id=55): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) flistxattr(r0, &(0x7f0000000000)=""/158, 0x9e) 7.075499767s ago: executing program 1 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x200408, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) fsopen(0x0, 0x1) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x200440e4) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r3) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) 6.919097717s ago: executing program 4 (id=60): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc884}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setuid(0xee01) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto(r3, &(0x7f0000000540)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000140)) r5 = socket$kcm(0x1e, 0x2, 0x0) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r6, 0x40047438, &(0x7f0000000040)) ioctl(r6, 0x7439, 0x0) 5.59835449s ago: executing program 0 (id=62): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x13347000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x402a1, 0x21, &(0x7f00000001c0)={0x0, 0x8, 0x4e, 0x8}, 0x8, 0x6, 0x6, 0x0, 0x1, 0x101, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000001c0)="23abaf585cfef53bb3e25e932efcb030faaeb56a23d562b9a2268ae99cd03de6bdf8ae2e699adc8f69fb03354752688d77fa4ae37714e71551317cfe4d29999e43326ca56a584c6988403177e59b4027", 0x50}], 0x1, &(0x7f0000003c00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008810}], 0x1, 0x4004) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000002940)=""/79, 0x4f}], 0x2}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0xfffffe29) read$FUSE(r4, &(0x7f0000004400)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) landlock_create_ruleset(&(0x7f00000002c0)={0x520, 0xd, 0x3}, 0x30, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @loopback={0xe0ffffff00000000}, 0xd}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a}, 0xe) recvmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x102, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000003000000cffd3f00ff07"], 0x50) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x10b700, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000200)=@x={0x94, 0xe, "c70a4b56ba65"}) shutdown(r5, 0x1) 4.844084912s ago: executing program 4 (id=65): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000740)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$unix(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000002280)="e6", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x20000815}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404c001}}], 0x2, 0x4040001) r3 = accept4(r0, &(0x7f0000000780)=@pppoe, &(0x7f0000000800)=0x80, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000008c0)={0x9, 0xb, 0x8, 0x0, 0x8000, 0x4, 0x400, 0xc}, 0x20) sendfile(r4, r5, 0x0, 0x4) 4.64199574s ago: executing program 4 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) (async, rerun: 64) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000180)) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async, rerun: 64) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (rerun: 64) getdents64(r2, &(0x7f0000001f00)=""/4093, 0x2d8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2c000004}, 0x4000000) (async) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/201, 0xc9}, {&(0x7f0000000040)=""/130, 0x82}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x3, 0x0, 0x0) 4.150663191s ago: executing program 1 (id=67): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) (fail_nth: 1) 3.921419249s ago: executing program 3 (id=68): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e1f, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) (fail_nth: 3) 3.627667708s ago: executing program 4 (id=69): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x3, 0xfffffffffffffc01, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x1, 0x2, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x8000000}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1b7b, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_setup(0x10000, &(0x7f0000000000)) 3.258152409s ago: executing program 1 (id=71): r0 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0xa, 0x40010, r0, 0x3fea2000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={[0x2]}, 0x8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000240)={0x81, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000280)={r4, 0x1, 0x3}) fsetxattr$security_evm(r1, &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x2, "d49bccac91e05358a76acb1cd088e3d4df"}, 0x12, 0x1) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000340)=0x3) r5 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x2800}, {r1, 0x4100}, {r2, 0x200}, {r5, 0x10}, {0xffffffffffffffff, 0x1}, {r1, 0x210}, {r1, 0x20d4}], 0x7, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)={[0x7]}, 0x8) sync_file_range(r0, 0x0, 0x7, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000480), 0x9, 0xb4000) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000004c0)={0x6, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000000500)={0x4, r7}) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0x0, 0x200002) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000580)="660b355104c8bf57df41ee0faf55a3496f18236098cb73297ef8615c6bf322a10467a55d76ddcc40d7735a91a802dd005ee46a41a277979a67771a63c8aca61390afe6f0dc5e780eca1e236c167067789685f12f063c14a8f3025f55e1de57eb196aac71815fabf8cb5d995d80b1681602714926435f161d2bcf5874a746e28a7bd6fe22b20d51b150669e793f", 0x8d) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r9, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xac}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000014) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000780)={0x6, 0x3166, 0x6, 0x7, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000800)={'pim6reg\x00', @multicast}) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f0000000940)={&(0x7f0000000900)=[{&(0x7f0000000840)="a52302cc2b6ccb88b8769885a0b38bdbb9859cca42a53d584563a06d9b111f9c0dd5f1afedadaaee930716d36ed72eac37f390d2c5a7248ec34ba44f6a047ac60430a603c2faf58fb5d65c790bf8ce498a473dcb1feb094ed7fb7e72bfef8b650049a39c6ff12b245fe2dd7b81c80d8157c35919946f9a12ba047ddca068da311de6102eaa00f8ca1ca8f47f7103587933e7c50a9f565f5053ed", 0x9a}], 0x1, 0x76d, 0x0, 0x8, 0x6, 0xfffffffffffffff9, 0x6, 0x200}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r11, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4818) 3.184230906s ago: executing program 3 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000000c0)=@sg0, r0, &(0x7f0000002b80)) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r1, 0xffffffff, &(0x7f0000000400)="03000000010000000100"/20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xee0001, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) ioctl(r1, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) 2.822184911s ago: executing program 4 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000000c0)=@sg0, r0, &(0x7f0000002b80)) nanosleep(&(0x7f0000000200)={0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xee0001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) ioctl(0xffffffffffffffff, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) 2.779583472s ago: executing program 0 (id=75): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0xd, @raw_data="2ba761150d13a4627f30e320cf02f13a650c7e1a326d2127e1aa19b304d6afecda5bafb688f429b14124d61e8c9091224c275c459f9bcf73d0f0032f0109fb72b8bb648cb403b428789a072dc24259d1d3ed140c09dbb176267008043f42371e70a9b0673192f30c3ed79df58e6ae3d3ec56bbb4b2741b150910050c42f83d17e36f3046abce31a8ed4c2195881f1f5354100b7e9a6dd621e99c423777c348a0f0de107b4c1387913a9909d621881e98e791bb70a14a58512b90160ac5f39a46226fc5d108477f98"}) 2.66854925s ago: executing program 1 (id=77): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) socket$nl_route(0x10, 0x3, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r0, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000080)=""/41, 0x29}], 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000cb350000010000000800000000130000", @ANYRES32=r0, @ANYBLOB="0a00000000000000000000000000000000000000bfb6b27ef05a6ee26c40741e05e2ca80e669aaabde6065d1a9097fc484607b01c49d04978cb3ebf1840157fd8154c9b58398c0cc97d160dd528fd8d89f20259352e94b9c6563737c898865cdbd697fbeddd1c178c59c8ed70ca4be26b92f130ddf2de81b84aa0c8cd081c5728ca2c9d1aa52a96c8c5de06a9756a1ecddda3f2006632787cc044e42fa498672fcdcd0683de800"/180, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000020000000100"/28], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d1052120000900100001090212"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000304000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) close(0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) ioprio_get$pid(0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x70bd27, 0x25dfdbfc, {0xa}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x20000000) sendto$inet(r7, 0x0, 0x0, 0x32000800, 0x0, 0x0) 2.435135733s ago: executing program 0 (id=78): r0 = openat$vicodec1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0x0, "4c325a0557c38eac590f394ba1c206ab02e4c8c0c517291be3495b74a33b5349", 0x2, 0x10, 0x1, 0xfffff2d2, 0x8, 0x0, 0xfff, 0x2c}) 2.384943046s ago: executing program 0 (id=79): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) r1 = open(0x0, 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x4, 0x2}}, 0x50) r5 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000340)={0x30a32c3, 0x1, @ofdm={0x1, 0x18, 0x1b, 0x1a, 0x7, 0x4, 0x2}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000001ff0)={0x1d, r9}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000023c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002380)={&(0x7f0000002540)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf25010000000800030000000000080002000500000005000500b10000000500050009000000480001801400040000000000000000000000ffff6401010008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="05000200010000000800060005000000080003000a0101010800060013000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000814) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000002480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010004000000fedbdf250e0000000800030001bb1991ee95e53e39ae4cf4c324cde30c0ceef3bfa8e72e84552a2b251ea1491380a9b74a19b2ffcda83b4b0fe1871755752e9449c82835ba13bb8820437401b9c40aeb8d090c877a143930960cf0605c4303e07e3c3b144c43d8675a6d68ecebdc11b6a43c89ea35f81f", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x14) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r11, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r12, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x207, 0x4) 957.695652ms ago: executing program 0 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) r1 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723020001800128008000100767266"], 0x48}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x18, 0x0, 0x2, 0x20000000}}], 0x18}, 0x4a910) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80101) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000001c0)=0x1) fadvise64(r7, 0x5, 0x43a4, 0x5) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000360007012abd700000000000017c00000c00018008000600", @ANYRES32=0x0, @ANYBLOB='\x00\x00h7M\x00'], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 595.467989ms ago: executing program 2 (id=84): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000240)=ANY=[@ANYBLOB='@5!T*']) 420.287026ms ago: executing program 0 (id=85): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000840)=ANY=[], 0x110) 412.982604ms ago: executing program 2 (id=86): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000029", @ANYRES16=r0], 0x18}, 0x2000c8d0) 281.633186ms ago: executing program 2 (id=87): r0 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0xa, 0x40010, r0, 0x3fea2000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={[0x2]}, 0x8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000240)={0x81, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000280)={r4, 0x1, 0x3}) fsetxattr$security_evm(r1, &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x2, "d49bccac91e05358a76acb1cd088e3d4df"}, 0x12, 0x1) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000340)=0x3) r5 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x2800}, {r1, 0x4100}, {r2, 0x200}, {r5, 0x10}, {0xffffffffffffffff, 0x1}, {r1, 0x210}, {r1, 0x20d4}], 0x7, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)={[0x7]}, 0x8) sync_file_range(r0, 0x0, 0x7, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000480), 0x9, 0xb4000) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000004c0)={0x6, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000000500)={0x4, r7}) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0x0, 0x200002) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000580)="660b355104c8bf57df41ee0faf55a3496f18236098cb73297ef8615c6bf322a10467a55d76ddcc40d7735a91a802dd005ee46a41a277979a67771a63c8aca61390afe6f0dc5e780eca1e236c167067789685f12f063c14a8f3025f55e1de57eb196aac71815fabf8cb5d995d80b1681602714926435f161d2bcf5874a746e28a7bd6fe22b20d51b150669e793f", 0x8d) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r9, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xac}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000014) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000780)={0x6, 0x3166, 0x6, 0x7, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000800)={'pim6reg\x00', @multicast}) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f0000000940)={&(0x7f0000000900)=[{&(0x7f0000000840)="a52302cc2b6ccb88b8769885a0b38bdbb9859cca42a53d584563a06d9b111f9c0dd5f1afedadaaee930716d36ed72eac37f390d2c5a7248ec34ba44f6a047ac60430a603c2faf58fb5d65c790bf8ce498a473dcb1feb094ed7fb7e72bfef8b650049a39c6ff12b245fe2dd7b81c80d8157c35919946f9a12ba047ddca068da311de6102eaa00f8ca1ca8f47f7103587933e7c50a9f565f5053ed", 0x9a}], 0x1, 0x76d, 0x0, 0x8, 0x6, 0xfffffffffffffff9, 0x6, 0x200}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r11, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4818) 259.285787ms ago: executing program 3 (id=88): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$setstatus(r0, 0x4, 0xc0800) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) (fail_nth: 3) 258.628552ms ago: executing program 2 (id=89): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$setstatus(r0, 0x4, 0xc0800) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000040)=""/164, 0xa4}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000380)=""/175, 0xaf}], 0x5}, 0x700) 51.747015ms ago: executing program 2 (id=90): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$inet_sctp(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003340)="6f734d3378618dd8bc5b8a330f2dbf931db9e6e8f4d6f56fd5b95091bd487e06e2de9aff9cd017205b77bbe2da4dbbd134f4f338b65ce77cebf374eb03033b3ab423d078e46399b9f42cfcb0618d24ce0971e4be557ce9262db8c366369e3f79f9e1f242255cb469daa43a1aada77619bbf97c68aaf3d1d106d775f68d13cc91314e11681ed1cce9814c49e704ed60c86b96eb9a360a4a50268cd805da30bab77f2d58afaaf69dcdedbd", 0xaa}, {&(0x7f0000003440)="005e4646ff46c26e1c2e0ed048086b1e523a9585fc3af80040f3aac11869ae2d35517485cd8bc968f7e961495d532d6255f85c89ba355003af3de9c9b337852ac56e3fb36e3b22295bac59ce2fc9", 0x4e}], 0x2, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffef3, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x3, &(0x7f0000000480)={0xb, 0x10001}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d06, &(0x7f0000002180)) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() r8 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r8, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x76}, "14bffd076773e618d39a90a7ddede0f1cbbfb5400507109f248002f538054f1d79f119c666d26733442cafd720bdb2541415da118792c9c7d05d58719ec0d92263e2739da7bc6b092a07f4122aea955b70195af1efcdf25f4a45cf1e36245c76d420b0a64fd997374c6ac536273d1c80341fe913eb46"}, 0x7a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4884) tkill(r7, 0xb) 0s ago: executing program 2 (id=91): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x400) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) lseek(r4, 0x7, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r0, @ANYBLOB="800202000a00024eaa98794f87f3b079545a65241f1e7ee28e83accef720b4bb430b359910704fff15bd00676e1c255fbb"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x805}, 0x4000001) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402470c"], 0x7) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) (async) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/set_event\x00', 0xa00, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 97.378253][ T197] cfg80211: failed to load regulatory.db [ 100.020745][ T5585] cgroup: Unknown subsys name 'net' [ 100.249439][ T5585] cgroup: Unknown subsys name 'cpuset' [ 100.295227][ T5585] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.693074][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.689280][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.733148][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.761282][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.762160][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.807352][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.817814][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.828941][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.847183][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.859330][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.865910][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.895945][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.906305][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.913020][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.946618][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.953029][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.967610][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.967855][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.972006][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.972424][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.982834][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.996641][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.007209][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.028650][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.084409][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.122791][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.166645][ T5617] Bluetooth: hci3: command tx timeout [ 108.166652][ T5606] Bluetooth: hci4: command tx timeout [ 108.167014][ T59] Bluetooth: hci2: command tx timeout [ 108.245252][ T59] Bluetooth: hci0: command tx timeout [ 108.325932][ T59] Bluetooth: hci1: command tx timeout [ 109.469535][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.470963][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.471420][ T5603] bridge_slave_0: entered allmulticast mode [ 109.473712][ T5603] bridge_slave_0: entered promiscuous mode [ 109.569020][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.569128][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.569620][ T5603] bridge_slave_1: entered allmulticast mode [ 109.571759][ T5603] bridge_slave_1: entered promiscuous mode [ 109.692122][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.692269][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.692399][ T5599] bridge_slave_0: entered allmulticast mode [ 109.694415][ T5599] bridge_slave_0: entered promiscuous mode [ 109.767936][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.768060][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.768668][ T5600] bridge_slave_0: entered allmulticast mode [ 109.771974][ T5600] bridge_slave_0: entered promiscuous mode [ 109.830737][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.830924][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.831097][ T5599] bridge_slave_1: entered allmulticast mode [ 109.833116][ T5599] bridge_slave_1: entered promiscuous mode [ 109.879207][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.879334][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.879585][ T5601] bridge_slave_0: entered allmulticast mode [ 109.881779][ T5601] bridge_slave_0: entered promiscuous mode [ 109.899067][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.899460][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.912849][ T5600] bridge_slave_1: entered allmulticast mode [ 109.924343][ T5600] bridge_slave_1: entered promiscuous mode [ 109.953546][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.979808][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.979933][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.980087][ T5602] bridge_slave_0: entered allmulticast mode [ 109.982049][ T5602] bridge_slave_0: entered promiscuous mode [ 109.996056][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.996421][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.997118][ T5601] bridge_slave_1: entered allmulticast mode [ 110.005706][ T5601] bridge_slave_1: entered promiscuous mode [ 110.069427][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.098332][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.098480][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.098661][ T5602] bridge_slave_1: entered allmulticast mode [ 110.102551][ T5602] bridge_slave_1: entered promiscuous mode [ 110.191479][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.243764][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.246757][ T5606] Bluetooth: hci3: command tx timeout [ 110.246795][ T5606] Bluetooth: hci4: command tx timeout [ 110.246941][ T59] Bluetooth: hci2: command tx timeout [ 110.312257][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.334881][ T5617] Bluetooth: hci0: command tx timeout [ 110.359496][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.363649][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.387439][ T5603] team0: Port device team_slave_0 added [ 110.404636][ T5617] Bluetooth: hci1: command tx timeout [ 110.426402][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.429352][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.475381][ T5603] team0: Port device team_slave_1 added [ 110.507666][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.576138][ T5599] team0: Port device team_slave_0 added [ 110.614915][ T5600] team0: Port device team_slave_0 added [ 110.638578][ T5599] team0: Port device team_slave_1 added [ 110.662542][ T5601] team0: Port device team_slave_0 added [ 110.676205][ T5600] team0: Port device team_slave_1 added [ 110.677313][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.677325][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.677346][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.741056][ T5602] team0: Port device team_slave_0 added [ 110.754271][ T5601] team0: Port device team_slave_1 added [ 110.781284][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.781299][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.781321][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.848744][ T5602] team0: Port device team_slave_1 added [ 111.346177][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.346191][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.346212][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.423546][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.423565][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.423594][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.473327][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.473352][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.473373][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.528116][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.528135][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.528155][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.530126][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.530156][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.530669][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.645026][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.645040][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.645062][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.649337][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.649352][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.649381][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.785171][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.785185][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.785206][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.880341][ T5603] hsr_slave_0: entered promiscuous mode [ 111.881845][ T5603] hsr_slave_1: entered promiscuous mode [ 112.039797][ T5599] hsr_slave_0: entered promiscuous mode [ 112.041075][ T5599] hsr_slave_1: entered promiscuous mode [ 112.042545][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 112.042633][ T5599] Cannot create hsr debugfs directory [ 112.069595][ T5600] hsr_slave_0: entered promiscuous mode [ 112.070691][ T5600] hsr_slave_1: entered promiscuous mode [ 112.071391][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 112.071416][ T5600] Cannot create hsr debugfs directory [ 112.150394][ T5601] hsr_slave_0: entered promiscuous mode [ 112.151933][ T5601] hsr_slave_1: entered promiscuous mode [ 112.153218][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 112.153241][ T5601] Cannot create hsr debugfs directory [ 112.240293][ T5602] hsr_slave_0: entered promiscuous mode [ 112.241708][ T5602] hsr_slave_1: entered promiscuous mode [ 112.243621][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 112.243643][ T5602] Cannot create hsr debugfs directory [ 112.325066][ T5617] Bluetooth: hci2: command tx timeout [ 112.325106][ T5617] Bluetooth: hci4: command tx timeout [ 112.325130][ T5617] Bluetooth: hci3: command tx timeout [ 112.405509][ T59] Bluetooth: hci0: command tx timeout [ 112.484854][ T59] Bluetooth: hci1: command tx timeout [ 113.402769][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.482017][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.500184][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.530462][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.533190][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.585646][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.630133][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.652928][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.912669][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.962262][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.978173][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.019195][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.044167][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.079177][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.125084][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.193167][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.404704][ T59] Bluetooth: hci3: command tx timeout [ 114.404739][ T59] Bluetooth: hci4: command tx timeout [ 114.404763][ T59] Bluetooth: hci2: command tx timeout [ 114.487556][ T5617] Bluetooth: hci0: command tx timeout [ 114.529859][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.564890][ T5617] Bluetooth: hci1: command tx timeout [ 114.569584][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.590005][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.622690][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.643104][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.709585][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.753927][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.790594][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.032792][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.043976][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.113126][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.237404][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.279544][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.306231][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.361088][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.412474][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.439786][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.585525][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.698294][ T5601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.750392][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.778780][ T1529] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.779095][ T1529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.809805][ T5601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.852983][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.893152][ T5601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.936517][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.969480][ T5601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.025879][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.050458][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.050683][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.155520][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.396658][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.459484][ T2379] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.459660][ T2379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.519416][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.519509][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.567191][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.737767][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.943104][ T2395] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.943363][ T2395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.090995][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.154040][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.170861][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.306660][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.452415][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.492365][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.492601][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.579562][ T2395] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.592114][ T2395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.830458][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.892633][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.892805][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.949377][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.993993][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.994155][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.803248][ T5603] veth0_vlan: entered promiscuous mode [ 118.909239][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.986821][ T5603] veth1_vlan: entered promiscuous mode [ 119.611233][ T5603] veth0_macvtap: entered promiscuous mode [ 119.698830][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.746857][ T5603] veth1_macvtap: entered promiscuous mode [ 119.842551][ T5599] veth0_vlan: entered promiscuous mode [ 120.003175][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.043385][ T5599] veth1_vlan: entered promiscuous mode [ 120.284835][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.402539][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.959656][ T5599] veth0_macvtap: entered promiscuous mode [ 121.073003][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.159390][ T5599] veth1_macvtap: entered promiscuous mode [ 121.253863][ T5602] veth0_vlan: entered promiscuous mode [ 121.512658][ T5602] veth1_vlan: entered promiscuous mode [ 121.536005][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.703454][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.754415][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.785744][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.838017][ T5600] veth0_vlan: entered promiscuous mode [ 122.062925][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.062950][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.111827][ T5600] veth1_vlan: entered promiscuous mode [ 122.201650][ T5601] veth0_vlan: entered promiscuous mode [ 122.218762][ T5602] veth0_macvtap: entered promiscuous mode [ 122.330428][ T5602] veth1_macvtap: entered promiscuous mode [ 122.352317][ T5601] veth1_vlan: entered promiscuous mode [ 122.858793][ T5600] veth0_macvtap: entered promiscuous mode [ 122.874365][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.905272][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.905292][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.991567][ T5600] veth1_macvtap: entered promiscuous mode [ 123.009165][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.318333][ T5796] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.449962][ T5601] veth0_macvtap: entered promiscuous mode [ 123.487129][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.487153][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.515367][ T5601] veth1_macvtap: entered promiscuous mode [ 123.579975][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.712099][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.845748][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.021537][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.686030][ T5803] FAULT_INJECTION: forcing a failure. [ 124.686030][ T5803] name failslab, interval 1, probability 0, space 0, times 1 [ 124.686104][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.686135][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.686158][ T5803] Call Trace: [ 124.686166][ T5803] [ 124.686175][ T5803] dump_stack_lvl+0xe8/0x150 [ 124.686230][ T5803] should_fail_ex+0x467/0x600 [ 124.686277][ T5803] should_failslab+0xa8/0x100 [ 124.686307][ T5803] __kmalloc_cache_noprof+0xa0/0x6b0 [ 124.686334][ T5803] ? igmp6_group_dropped+0x5f0/0x1190 [ 124.686357][ T5803] ? igmp6_group_dropped+0x5f0/0x1190 [ 124.686387][ T5803] igmp6_group_dropped+0x5f0/0x1190 [ 124.686427][ T5803] ? __pfx_igmp6_group_dropped+0x10/0x10 [ 124.686449][ T5803] ? lockdep_hardirqs_on+0x7a/0x110 [ 124.686476][ T5803] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 124.686509][ T5803] __ipv6_dev_mc_dec+0x2a0/0x320 [ 124.686536][ T5803] addrconf_leave_solict+0x11c/0x1a0 [ 124.686572][ T5803] ? __pfx_addrconf_leave_solict+0x10/0x10 [ 124.686604][ T5803] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 124.686628][ T5803] ? lockdep_hardirqs_on+0x7a/0x110 [ 124.686662][ T5803] __ipv6_dev_ac_dec+0x591/0x6c0 [ 124.686683][ T5803] ? __ipv6_dev_ac_dec+0x2b/0x6c0 [ 124.686708][ T5803] ? in6_dev_get+0x1a/0x290 [ 124.686735][ T5803] ipv6_sock_ac_drop+0x36f/0x4d0 [ 124.686763][ T5803] do_ipv6_setsockopt+0x2388/0x3180 [ 124.686797][ T5803] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 124.686823][ T5803] ? get_pid_task+0x20/0x1f0 [ 124.686875][ T5803] ? __lock_acquire+0x683/0x2ce0 [ 124.686917][ T5803] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 124.686946][ T5803] ? lockdep_hardirqs_on+0x7a/0x110 [ 124.686979][ T5803] ? __fget_files+0x2a/0x420 [ 124.687033][ T5803] ? __fget_files+0x2a/0x420 [ 124.687061][ T5803] ipv6_setsockopt+0x59/0x170 [ 124.687092][ T5803] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 124.687120][ T5803] do_sock_setsockopt+0x17c/0x1b0 [ 124.687153][ T5803] __x64_sys_setsockopt+0x143/0x1b0 [ 124.687183][ T5803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.687208][ T5803] do_syscall_64+0x174/0x580 [ 124.687238][ T5803] ? trace_irq_disable+0x3b/0x140 [ 124.687261][ T5803] ? clear_bhb_loop+0x40/0x90 [ 124.687289][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.687313][ T5803] RIP: 0033:0x7f5e7c9be0d9 [ 124.687346][ T5803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.687365][ T5803] RSP: 002b:00007f5e7abd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.687397][ T5803] RAX: ffffffffffffffda RBX: 00007f5e7cc46180 RCX: 00007f5e7c9be0d9 [ 124.687410][ T5803] RDX: 000000000000001c RSI: 0000000000000029 RDI: 0000000000000004 [ 124.687427][ T5803] RBP: 00007f5e7abd4090 R08: 0000000000000014 R09: 0000000000000000 [ 124.687438][ T5803] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 124.687449][ T5803] R13: 00007f5e7cc46218 R14: 00007f5e7cc46180 R15: 00007ffd2e4b0e28 [ 124.687475][ T5803] [ 125.340929][ T5807] FAULT_INJECTION: forcing a failure. [ 125.340929][ T5807] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.340968][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz.1.7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.340992][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.341005][ T5807] Call Trace: [ 125.341013][ T5807] [ 125.341023][ T5807] dump_stack_lvl+0xe8/0x150 [ 125.341062][ T5807] should_fail_ex+0x467/0x600 [ 125.341105][ T5807] _copy_from_user+0x2d/0xb0 [ 125.341135][ T5807] sctp_setsockopt+0x1c4/0x12c0 [ 125.341165][ T5807] ? sock_common_setsockopt+0x36/0xc0 [ 125.341189][ T5807] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 125.341216][ T5807] do_sock_setsockopt+0x17c/0x1b0 [ 125.341251][ T5807] __x64_sys_setsockopt+0x143/0x1b0 [ 125.341282][ T5807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.341307][ T5807] do_syscall_64+0x174/0x580 [ 125.341338][ T5807] ? trace_irq_disable+0x3b/0x140 [ 125.341366][ T5807] ? clear_bhb_loop+0x40/0x90 [ 125.341394][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.341417][ T5807] RIP: 0033:0x7f5e7c9be0d9 [ 125.341436][ T5807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.341454][ T5807] RSP: 002b:00007f5e7ac16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.341477][ T5807] RAX: ffffffffffffffda RBX: 00007f5e7cc45fa0 RCX: 00007f5e7c9be0d9 [ 125.341493][ T5807] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 125.341506][ T5807] RBP: 00007f5e7ac16090 R08: 000000000000009c R09: 0000000000000000 [ 125.341520][ T5807] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 125.341534][ T5807] R13: 00007f5e7cc46038 R14: 00007f5e7cc45fa0 R15: 00007ffd2e4b0e28 [ 125.341568][ T5807] [ 125.533775][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.533862][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.830058][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.830084][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.911879][ T5819] openvswitch: netlink: Duplicate key (type 6). [ 127.804278][ T2379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.804303][ T2379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.890311][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.890335][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.890768][ T2379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.963258][ T5833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'. [ 128.135988][ T5836] FAULT_INJECTION: forcing a failure. [ 128.135988][ T5836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.136036][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.136061][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.136074][ T5836] Call Trace: [ 128.136082][ T5836] [ 128.136091][ T5836] dump_stack_lvl+0xe8/0x150 [ 128.136130][ T5836] should_fail_ex+0x467/0x600 [ 128.136173][ T5836] _copy_to_user+0x31/0xb0 [ 128.136204][ T5836] simple_read_from_buffer+0xe1/0x170 [ 128.136235][ T5836] proc_fail_nth_read+0x1be/0x230 [ 128.136265][ T5836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.136299][ T5836] ? rw_verify_area+0x250/0x4d0 [ 128.136331][ T5836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.136356][ T5836] vfs_read+0x219/0xa90 [ 128.136394][ T5836] ? __pfx_vfs_read+0x10/0x10 [ 128.136427][ T5836] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 128.136459][ T5836] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.136491][ T5836] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 128.136522][ T5836] ? mutex_lock_nested+0x152/0x1d0 [ 128.136545][ T5836] ? fdget_pos+0x252/0x320 [ 128.136580][ T5836] ksys_read+0x156/0x270 [ 128.136612][ T5836] ? __pfx_ksys_read+0x10/0x10 [ 128.136651][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.136677][ T5836] do_syscall_64+0x174/0x580 [ 128.136708][ T5836] ? trace_irq_disable+0x3b/0x140 [ 128.136731][ T5836] ? clear_bhb_loop+0x40/0x90 [ 128.136760][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.136783][ T5836] RIP: 0033:0x7f5e7c97e90e [ 128.136804][ T5836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.136823][ T5836] RSP: 002b:00007f5e7ac15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.136846][ T5836] RAX: ffffffffffffffda RBX: 00007f5e7ac166c0 RCX: 00007f5e7c97e90e [ 128.136863][ T5836] RDX: 000000000000000f RSI: 00007f5e7ac160a0 RDI: 0000000000000004 [ 128.136878][ T5836] RBP: 00007f5e7ac16090 R08: 0000000000000000 R09: 0000000000000000 [ 128.136892][ T5836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.136905][ T5836] R13: 00007f5e7cc46038 R14: 00007f5e7cc45fa0 R15: 00007ffd2e4b0e28 [ 128.136941][ T5836] [ 128.561864][ T2395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.561888][ T2395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.583177][ T2395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.040967][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.040991][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.321172][ T91] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.321728][ T91] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.322149][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.520287][ T5715] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.647894][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.648297][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.648494][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.649028][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.032955][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.033014][ T5715] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 130.033038][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.117532][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117627][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117670][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117701][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117731][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117762][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117793][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117823][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117855][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117886][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.117918][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.291706][ T37] audit: type=1326 audit(1785954047.089:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff42d1ee0d9 code=0x0 [ 130.386708][ T5715] usb 2-1: config 0 descriptor?? [ 130.575434][ T821] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 130.836531][ T821] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 130.870503][ T821] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 130.870535][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.870557][ T821] usb 3-1: Product: syz [ 130.870573][ T821] usb 3-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 130.870597][ T821] usb 3-1: SerialNumber: syz [ 131.109264][ T5715] pwc: Askey VC010 type 2 USB webcam detected. [ 131.211131][ T5715] pwc: send_video_command error -71 [ 131.211168][ T5715] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 131.211449][ T5715] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 131.605996][ T5866] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.696700][ T5868] Zero length message leads to an empty skb [ 131.719443][ T5715] usb 2-1: USB disconnect, device number 2 [ 133.026534][ T5882] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 133.026560][ T5882] netlink: 84 bytes leftover after parsing attributes in process `syz.0.20'. [ 133.026579][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 133.081870][ T821] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 133.107022][ T821] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 133.345655][ T5879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.018799][ T5898] FAULT_INJECTION: forcing a failure. [ 134.018799][ T5898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.018840][ T5898] CPU: 0 UID: 0 PID: 5898 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.018866][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.018880][ T5898] Call Trace: [ 134.018889][ T5898] [ 134.018899][ T5898] dump_stack_lvl+0xe8/0x150 [ 134.018950][ T5898] should_fail_ex+0x467/0x600 [ 134.018993][ T5898] _copy_from_user+0x2d/0xb0 [ 134.019025][ T5898] memdup_user_nul+0x66/0x110 [ 134.019059][ T5898] smk_write_net4addr+0x146/0xb80 [ 134.019094][ T5898] ? __pfx_smk_write_net4addr+0x10/0x10 [ 134.019115][ T5898] ? vfs_write+0x231/0xbb0 [ 134.019153][ T5898] ? __pfx_smk_write_net4addr+0x10/0x10 [ 134.019174][ T5898] vfs_write+0x29f/0xbb0 [ 134.019206][ T5898] ? __pfx_vfs_write+0x10/0x10 [ 134.019236][ T5898] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.019269][ T5898] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.019297][ T5898] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.019322][ T5898] ? mutex_lock_nested+0x152/0x1d0 [ 134.019341][ T5898] ? fdget_pos+0x252/0x320 [ 134.019376][ T5898] ksys_write+0x156/0x270 [ 134.019408][ T5898] ? __pfx_ksys_write+0x10/0x10 [ 134.019447][ T5898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.019470][ T5898] do_syscall_64+0x174/0x580 [ 134.019501][ T5898] ? trace_irq_disable+0x3b/0x140 [ 134.019524][ T5898] ? clear_bhb_loop+0x40/0x90 [ 134.019551][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.019589][ T5898] RIP: 0033:0x7f971ef1e0d9 [ 134.019610][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.019626][ T5898] RSP: 002b:00007f971d176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.019648][ T5898] RAX: ffffffffffffffda RBX: 00007f971f1a5fa0 RCX: 00007f971ef1e0d9 [ 134.019663][ T5898] RDX: 000000000000006f RSI: 0000200000001180 RDI: 0000000000000003 [ 134.019677][ T5898] RBP: 00007f971d176090 R08: 0000000000000000 R09: 0000000000000000 [ 134.019690][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.019702][ T5898] R13: 00007f971f1a6038 R14: 00007f971f1a5fa0 R15: 00007ffe4662b828 [ 134.019736][ T5898] [ 134.787717][ T821] usb 3-1: USB disconnect, device number 2 [ 135.072170][ T5904] nvme_fabrics: unknown parameter or missing value 'transpost=loop' in ctrl creation request [ 135.883003][ T5915] FAULT_INJECTION: forcing a failure. [ 135.883003][ T5915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.883047][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.883073][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.883086][ T5915] Call Trace: [ 135.883094][ T5915] [ 135.883104][ T5915] dump_stack_lvl+0xe8/0x150 [ 135.883144][ T5915] should_fail_ex+0x467/0x600 [ 135.883187][ T5915] _copy_to_user+0x31/0xb0 [ 135.883218][ T5915] do_ip_getsockopt+0x1093/0x1d00 [ 135.883257][ T5915] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 135.883287][ T5915] ? __lock_acquire+0x683/0x2ce0 [ 135.883315][ T5915] ? _parse_integer_limit+0x192/0x1e0 [ 135.883358][ T5915] ? __lock_acquire+0x683/0x2ce0 [ 135.883385][ T5915] ? kstrtouint+0x6e/0xe0 [ 135.883421][ T5915] ? get_pid_task+0x20/0x1f0 [ 135.883466][ T5915] ? __lock_acquire+0x683/0x2ce0 [ 135.883500][ T5915] ? __might_fault+0xaf/0x130 [ 135.883529][ T5915] ip_getsockopt+0xbb/0x230 [ 135.883564][ T5915] ? __pfx_ip_getsockopt+0x10/0x10 [ 135.883598][ T5915] ? sock_common_getsockopt+0x2d/0xb0 [ 135.883620][ T5915] ? raw_getsockopt+0xce/0x1f0 [ 135.883655][ T5915] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 135.883680][ T5915] do_sock_getsockopt+0x51d/0x7e0 [ 135.883723][ T5915] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 135.883787][ T5915] ? __fget_files+0x3a8/0x420 [ 135.883816][ T5915] ? __fget_files+0x2a/0x420 [ 135.883857][ T5915] __x64_sys_getsockopt+0x1aa/0x250 [ 135.883899][ T5915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.883924][ T5915] do_syscall_64+0x174/0x580 [ 135.883955][ T5915] ? trace_irq_disable+0x3b/0x140 [ 135.883978][ T5915] ? clear_bhb_loop+0x40/0x90 [ 135.884007][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.884030][ T5915] RIP: 0033:0x7f971ef1e0d9 [ 135.884052][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.884070][ T5915] RSP: 002b:00007f971d176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 135.884094][ T5915] RAX: ffffffffffffffda RBX: 00007f971f1a5fa0 RCX: 00007f971ef1e0d9 [ 135.884110][ T5915] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 135.884123][ T5915] RBP: 00007f971d176090 R08: 0000200000000140 R09: 0000000000000000 [ 135.884137][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.884150][ T5915] R13: 00007f971f1a6038 R14: 00007f971f1a5fa0 R15: 00007ffe4662b828 [ 135.884184][ T5915] [ 137.114507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.155118][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.155218][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.625833][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.672524][ T5941] FAULT_INJECTION: forcing a failure. [ 139.672524][ T5941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.672562][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz.2.37 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.672588][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.672601][ T5941] Call Trace: [ 139.672610][ T5941] [ 139.672619][ T5941] dump_stack_lvl+0xe8/0x150 [ 139.672670][ T5941] should_fail_ex+0x467/0x600 [ 139.672714][ T5941] strncpy_from_user+0x36/0x2c0 [ 139.672754][ T5941] do_getname+0x77/0x250 [ 139.672778][ T5941] user_path_at+0x2a/0x160 [ 139.672805][ T5941] bpf_uprobe_multi_link_attach+0x490/0x11b0 [ 139.672833][ T5941] ? __fget_files+0x2a/0x420 [ 139.672869][ T5941] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 139.672892][ T5941] ? __fget_files+0x2a/0x420 [ 139.672919][ T5941] ? __fget_files+0x2a/0x420 [ 139.672944][ T5941] ? __fget_files+0x2a/0x420 [ 139.672972][ T5941] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 139.673008][ T5941] link_create+0x62a/0x850 [ 139.673039][ T5941] __sys_bpf+0x760/0xd90 [ 139.673072][ T5941] ? __pfx___sys_bpf+0x10/0x10 [ 139.673098][ T5941] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.673133][ T5941] ? rt_mutex_slowunlock+0x219/0x460 [ 139.673177][ T5941] ? ksys_write+0x248/0x270 [ 139.673209][ T5941] ? __pfx_ksys_write+0x10/0x10 [ 139.673243][ T5941] __x64_sys_bpf+0xba/0xd0 [ 139.673278][ T5941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.673302][ T5941] do_syscall_64+0x174/0x580 [ 139.673333][ T5941] ? trace_irq_disable+0x3b/0x140 [ 139.673357][ T5941] ? clear_bhb_loop+0x40/0x90 [ 139.673386][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.673409][ T5941] RIP: 0033:0x7ff60a9be0d9 [ 139.673430][ T5941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.673448][ T5941] RSP: 002b:00007ff608bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.673472][ T5941] RAX: ffffffffffffffda RBX: 00007ff60ac46090 RCX: 00007ff60a9be0d9 [ 139.673488][ T5941] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 139.673502][ T5941] RBP: 00007ff608bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 139.673516][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.673528][ T5941] R13: 00007ff60ac46128 R14: 00007ff60ac46090 R15: 00007ffc7d4cd938 [ 139.673563][ T5941] [ 140.691914][ T5948] ======================================================= [ 140.691914][ T5948] WARNING: The mand mount option has been deprecated and [ 140.691914][ T5948] and is ignored by this kernel. Remove the mand [ 140.691914][ T5948] option from the mount to silence this warning. [ 140.691914][ T5948] ======================================================= [ 140.923489][ T5956] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 140.923511][ T5956] netlink: 'syz.2.42': attribute type 2 has an invalid length. [ 141.972042][ T5952] syz.3.39 (5952) used greatest stack depth: 18752 bytes left [ 142.514601][ T5715] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.744597][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 142.751645][ T5715] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 142.751680][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 142.751703][ T5715] usb 1-1: Product: syz [ 142.751719][ T5715] usb 1-1: Manufacturer: syz [ 142.751736][ T5715] usb 1-1: SerialNumber: syz [ 142.993922][ T5715] usb 1-1: config 0 descriptor?? [ 143.110060][ T5715] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 143.661648][ T5715] gspca_sn9c2028: read1 error -110 [ 143.723718][ T5715] gspca_sn9c2028: read1 error -32 [ 143.724177][ T5715] gspca_sn9c2028: read1 error -32 [ 143.724272][ T5715] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32 [ 144.075567][ T821] usb 1-1: USB disconnect, device number 2 [ 144.477922][ T5997] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 144.534710][ T5715] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.724175][ T5715] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.724205][ T5715] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.724243][ T5715] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 144.724280][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.321817][ T6005] netlink: 48 bytes leftover after parsing attributes in process `syz.2.54'. [ 145.407618][ T6005] netlink: 48 bytes leftover after parsing attributes in process `syz.2.54'. [ 145.859450][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.51'. [ 145.868965][ T6003] netlink: 48 bytes leftover after parsing attributes in process `syz.3.51'. [ 146.267578][ T6025] capability: warning: `syz.2.61' uses deprecated v2 capabilities in a way that may be insecure [ 147.762919][ T6035] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 147.773545][ T6035] cramfs: wrong magic [ 147.793144][ T5715] gud 4-1:1.0: USB-2: Failed to add properties (ret=-71) [ 147.793190][ T5715] gud 4-1:1.0: Failed to get connectors (error=-71) [ 147.793223][ T5715] gud 4-1:1.0: probe with driver gud failed with error -71 [ 147.942464][ T5715] usb 4-1: USB disconnect, device number 2 [ 149.213000][ T6054] FAULT_INJECTION: forcing a failure. [ 149.213000][ T6054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.213038][ T6054] CPU: 0 UID: 0 PID: 6054 Comm: syz.1.67 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.213064][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.213078][ T6054] Call Trace: [ 149.213086][ T6054] [ 149.213096][ T6054] dump_stack_lvl+0xe8/0x150 [ 149.213137][ T6054] should_fail_ex+0x467/0x600 [ 149.213183][ T6054] _copy_from_user+0x2d/0xb0 [ 149.213213][ T6054] ___sys_sendmsg+0x1c6/0x360 [ 149.213245][ T6054] ? __lock_acquire+0x683/0x2ce0 [ 149.213272][ T6054] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.213340][ T6054] ? __fget_files+0x2a/0x420 [ 149.213365][ T6054] ? __fget_files+0x3a8/0x420 [ 149.213401][ T6054] __x64_sys_sendmsg+0x1b7/0x290 [ 149.213440][ T6054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.213489][ T6054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.213514][ T6054] do_syscall_64+0x174/0x580 [ 149.213545][ T6054] ? trace_irq_disable+0x3b/0x140 [ 149.213567][ T6054] ? clear_bhb_loop+0x40/0x90 [ 149.213595][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.213619][ T6054] RIP: 0033:0x7f5e7c9be0d9 [ 149.213639][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.213658][ T6054] RSP: 002b:00007f5e7ac16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.213683][ T6054] RAX: ffffffffffffffda RBX: 00007f5e7cc45fa0 RCX: 00007f5e7c9be0d9 [ 149.213699][ T6054] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 149.213713][ T6054] RBP: 00007f5e7ac16090 R08: 0000000000000000 R09: 0000000000000000 [ 149.213727][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.213739][ T6054] R13: 00007f5e7cc46038 R14: 00007f5e7cc45fa0 R15: 00007ffd2e4b0e28 [ 149.213774][ T6054] [ 149.738948][ T37] audit: type=1326 audit(1785954066.619:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6057 comm="syz.4.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42d1ee0d9 code=0x7ffc0000 [ 149.739004][ T37] audit: type=1326 audit(1785954066.629:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6057 comm="syz.4.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42d1ee0d9 code=0x7ffc0000 [ 149.810347][ T37] audit: type=1326 audit(1785954066.629:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6057 comm="syz.4.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42d1ee0d9 code=0x7ffc0000 [ 149.810430][ T37] audit: type=1326 audit(1785954066.699:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6057 comm="syz.4.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42d1ee0d9 code=0x7ffc0000 [ 149.810479][ T37] audit: type=1326 audit(1785954066.699:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6057 comm="syz.4.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff42d1ee0d9 code=0x7ffc0000 [ 149.810526][ T37] audit: type=1326 audit(1785954066.699:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6057 comm="syz.4.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42d1ee0d9 code=0x7ffc0000 [ 149.810574][ T37] audit: type=1326 audit(1785954066.699:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6057 comm="syz.4.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff42d1ee0d9 code=0x7ffc0000 [ 149.810621][ T37] audit: type=1326 audit(1785954066.699:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6057 comm="syz.4.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff42d1ee0d9 code=0x7ffc0000 [ 150.374612][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 150.535628][ T5735] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 150.561026][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 150.561056][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 150.561076][ T9] usb 4-1: Product: syz [ 150.561089][ T9] usb 4-1: Manufacturer: syz [ 150.734354][ T5735] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 150.734388][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 150.734590][ T5735] usb 5-1: Product: syz [ 150.734608][ T5735] usb 5-1: Manufacturer: syz [ 150.754571][ T5715] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.937506][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.937536][ T5715] usb 2-1: config 0 has no interfaces? [ 150.978097][ T5715] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 150.978130][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 150.978153][ T5715] usb 2-1: Product: syz [ 151.077270][ T5715] usb 2-1: config 0 descriptor?? [ 151.152161][ T9] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 151.292832][ T6081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.79'. [ 151.414774][ T5735] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9 [ 152.126462][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 152.259993][ T6098] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 152.260022][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 152.474228][ T5735] videodev: could not get a free minor [ 152.474249][ T5735] sur40 5-1:1.0: Unable to register video subdevice. [ 152.474346][ T5735] sur40 5-1:1.0: probe with driver sur40 failed with error -23 [ 152.672245][ T5735] usb 5-1: USB disconnect, device number 2 [ 152.715111][ T9] usb 4-1: USB disconnect, device number 3 [ 152.869899][ T4949] ================================================================== [ 152.869917][ T4949] BUG: KASAN: slab-use-after-free in sur40_open+0xa1/0x470 [ 152.869955][ T4949] Read of size 8 at addr ffff888039c4e000 by task acpid/4949 [ 152.869974][ T4949] [ 152.869988][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: acpid Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.870014][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.870028][ T4949] Call Trace: [ 152.870037][ T4949] [ 152.870047][ T4949] dump_stack_lvl+0xe8/0x150 [ 152.870084][ T4949] print_address_description+0x55/0x1e0 [ 152.870119][ T4949] ? sur40_open+0xa1/0x470 [ 152.870147][ T4949] print_report+0x58/0x70 [ 152.870181][ T4949] kasan_report+0x117/0x150 [ 152.870210][ T4949] ? sur40_open+0xa1/0x470 [ 152.870245][ T4949] sur40_open+0xa1/0x470 [ 152.870277][ T4949] input_open_device+0x1f9/0x3b0 [ 152.870322][ T4949] mousedev_open_device+0xcc/0x150 [ 152.870359][ T4949] mousedev_open+0x2ec/0x490 [ 152.870396][ T4949] chrdev_open+0x4dc/0x600 [ 152.870436][ T4949] ? __pfx_chrdev_open+0x10/0x10 [ 152.870470][ T4949] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 152.870506][ T4949] ? __pfx_chrdev_open+0x10/0x10 [ 152.870547][ T4949] do_dentry_open+0x849/0x1420 [ 152.870576][ T4949] vfs_open+0x3b/0x350 [ 152.870596][ T4949] ? path_openat+0x2e49/0x3850 [ 152.870627][ T4949] path_openat+0x2e60/0x3850 [ 152.870662][ T4949] ? kmem_cache_alloc_noprof+0x355/0x650 [ 152.870684][ T4949] ? __x64_sys_openat+0x138/0x170 [ 152.870706][ T4949] ? do_syscall_64+0x174/0x580 [ 152.870738][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.870774][ T4949] do_file_open+0x23e/0x4a0 [ 152.870803][ T4949] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.870838][ T4949] ? __pfx_do_file_open+0x10/0x10 [ 152.870881][ T4949] ? alloc_fd+0x654/0x6d0 [ 152.870911][ T4949] do_sys_openat2+0x115/0x200 [ 152.870937][ T4949] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.870962][ T4949] ? ksys_read+0x202/0x270 [ 152.870992][ T4949] ? __pfx_ksys_read+0x10/0x10 [ 152.871029][ T4949] __x64_sys_openat+0x138/0x170 [ 152.871055][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.871079][ T4949] do_syscall_64+0x174/0x580 [ 152.871110][ T4949] ? trace_irq_disable+0x3b/0x140 [ 152.871134][ T4949] ? clear_bhb_loop+0x40/0x90 [ 152.871162][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.871186][ T4949] RIP: 0033:0x7f75e5801407 [ 152.871207][ T4949] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 152.871227][ T4949] RSP: 002b:00007ffe4d37cf40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 152.871253][ T4949] RAX: ffffffffffffffda RBX: 00007f75e5777780 RCX: 00007f75e5801407 [ 152.871271][ T4949] RDX: 0000000000080800 RSI: 00007ffe4d37d150 RDI: ffffffffffffff9c [ 152.871295][ T4949] RBP: 00007ffe4d37d150 R08: 0000000000000000 R09: 0000000000000000 [ 152.871310][ T4949] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000080 [ 152.871325][ T4949] R13: 00007ffe4d37d250 R14: 0000558c633f67fe R15: 00007ffe4d37d250 [ 152.871352][ T4949] [ 152.871361][ T4949] [ 152.871367][ T4949] Allocated by task 5735: [ 152.871377][ T4949] kasan_save_track+0x3e/0x80 [ 152.871400][ T4949] __kasan_kmalloc+0x93/0xb0 [ 152.871422][ T4949] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 152.871445][ T4949] sur40_probe+0x16d/0xfb0 [ 152.871471][ T4949] usb_probe_interface+0x653/0xc60 [ 152.871497][ T4949] really_probe+0x254/0xae0 [ 152.871528][ T4949] __driver_probe_device+0x1e8/0x360 [ 152.871558][ T4949] driver_probe_device+0x4f/0x240 [ 152.871589][ T4949] __device_attach_driver+0x270/0x410 [ 152.871620][ T4949] bus_for_each_drv+0x25b/0x2f0 [ 152.871641][ T4949] __device_attach+0x2c7/0x450 [ 152.871669][ T4949] device_initial_probe+0xa1/0xd0 [ 152.871695][ T4949] bus_probe_device+0x12d/0x220 [ 152.871716][ T4949] device_add+0x7d7/0xb80 [ 152.871741][ T4949] usb_set_configuration+0x1ad8/0x2180 [ 152.871764][ T4949] usb_generic_driver_probe+0x8d/0x150 [ 152.871785][ T4949] usb_probe_device+0x1c3/0x3b0 [ 152.871809][ T4949] really_probe+0x254/0xae0 [ 152.871839][ T4949] __driver_probe_device+0x1e8/0x360 [ 152.871868][ T4949] driver_probe_device+0x4f/0x240 [ 152.871897][ T4949] __device_attach_driver+0x270/0x410 [ 152.871926][ T4949] bus_for_each_drv+0x25b/0x2f0 [ 152.871947][ T4949] __device_attach+0x2c7/0x450 [ 152.871974][ T4949] device_initial_probe+0xa1/0xd0 [ 152.872002][ T4949] bus_probe_device+0x12d/0x220 [ 152.872029][ T4949] device_add+0x7d7/0xb80 [ 152.872053][ T4949] usb_new_device+0x98d/0x1610 [ 152.872070][ T4949] hub_event+0x28cf/0x4cf0 [ 152.872091][ T4949] process_scheduled_works+0xa8e/0x14e0 [ 152.872115][ T4949] worker_thread+0xa47/0xfb0 [ 152.872138][ T4949] kthread+0x388/0x470 [ 152.872168][ T4949] ret_from_fork+0x514/0xb70 [ 152.872199][ T4949] ret_from_fork_asm+0x1a/0x30 [ 152.872218][ T4949] [ 152.872223][ T4949] Freed by task 5735: [ 152.872232][ T4949] kasan_save_track+0x3e/0x80 [ 152.872251][ T4949] kasan_save_free_info+0x40/0x50 [ 152.872280][ T4949] __kasan_slab_free+0x5c/0x80 [ 152.872312][ T4949] kfree+0x1c5/0x6c0 [ 152.872329][ T4949] sur40_probe+0x923/0xfb0 [ 152.872356][ T4949] usb_probe_interface+0x653/0xc60 [ 152.872384][ T4949] really_probe+0x254/0xae0 [ 152.872414][ T4949] __driver_probe_device+0x1e8/0x360 [ 152.872444][ T4949] driver_probe_device+0x4f/0x240 [ 152.872477][ T4949] __device_attach_driver+0x270/0x410 [ 152.872508][ T4949] bus_for_each_drv+0x25b/0x2f0 [ 152.872529][ T4949] __device_attach+0x2c7/0x450 [ 152.872557][ T4949] device_initial_probe+0xa1/0xd0 [ 152.872587][ T4949] bus_probe_device+0x12d/0x220 [ 152.872610][ T4949] device_add+0x7d7/0xb80 [ 152.872636][ T4949] usb_set_configuration+0x1ad8/0x2180 [ 152.872661][ T4949] usb_generic_driver_probe+0x8d/0x150 [ 152.872685][ T4949] usb_probe_device+0x1c3/0x3b0 [ 152.872710][ T4949] really_probe+0x254/0xae0 [ 152.872740][ T4949] __driver_probe_device+0x1e8/0x360 [ 152.872770][ T4949] driver_probe_device+0x4f/0x240 [ 152.872801][ T4949] __device_attach_driver+0x270/0x410 [ 152.872833][ T4949] bus_for_each_drv+0x25b/0x2f0 [ 152.872855][ T4949] __device_attach+0x2c7/0x450 [ 152.872885][ T4949] device_initial_probe+0xa1/0xd0 [ 152.872915][ T4949] bus_probe_device+0x12d/0x220 [ 152.872938][ T4949] device_add+0x7d7/0xb80 [ 152.872965][ T4949] usb_new_device+0x98d/0x1610 [ 152.872984][ T4949] hub_event+0x28cf/0x4cf0 [ 152.873005][ T4949] process_scheduled_works+0xa8e/0x14e0 [ 152.873030][ T4949] worker_thread+0xa47/0xfb0 [ 152.873057][ T4949] kthread+0x388/0x470 [ 152.873089][ T4949] ret_from_fork+0x514/0xb70 [ 152.873120][ T4949] ret_from_fork_asm+0x1a/0x30 [ 152.873141][ T4949] [ 152.873146][ T4949] The buggy address belongs to the object at ffff888039c4e000 [ 152.873146][ T4949] which belongs to the cache kmalloc-4k of size 4096 [ 152.873161][ T4949] The buggy address is located 0 bytes inside of [ 152.873161][ T4949] freed 4096-byte region [ffff888039c4e000, ffff888039c4f000) [ 152.873182][ T4949] [ 152.873187][ T4949] The buggy address belongs to the physical page: [ 152.873212][ T4949] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39c48 [ 152.873230][ T4949] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 152.873248][ T4949] flags: 0x80000000000040(head|node=0|zone=1) [ 152.873270][ T4949] page_type: f5(slab) [ 152.873304][ T4949] raw: 0080000000000040 ffff88813ffb3140 dead000000000100 dead000000000122 [ 152.873321][ T4949] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 152.873338][ T4949] head: 0080000000000040 ffff88813ffb3140 dead000000000100 dead000000000122 [ 152.873353][ T4949] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 152.873368][ T4949] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 152.873383][ T4949] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 152.873392][ T4949] page dumped because: kasan: bad access detected [ 152.873405][ T4949] page_owner tracks the page as allocated [ 152.873411][ T4949] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4972, tgid 4972 (udevd), ts 64308624343, free_ts 54441538703 [ 152.873442][ T4949] post_alloc_hook+0x1f9/0x250 [ 152.873458][ T4949] get_page_from_freelist+0x262a/0x26a0 [ 152.873478][ T4949] __alloc_frozen_pages_noprof+0x18d/0x380 [ 152.873498][ T4949] allocate_slab+0x79/0x5e0 [ 152.873520][ T4949] refill_objects+0x2d8/0x350 [ 152.873543][ T4949] __pcs_replace_empty_main+0x330/0x690 [ 152.873565][ T4949] __kmalloc_cache_noprof+0x468/0x6b0 [ 152.873582][ T4949] kernfs_iop_get_link+0x66/0x6c0 [ 152.873606][ T4949] vfs_readlink+0x24a/0x540 [ 152.873621][ T4949] do_readlinkat+0x218/0x510 [ 152.873639][ T4949] __x64_sys_readlink+0x7f/0x90 [ 152.873654][ T4949] do_syscall_64+0x174/0x580 [ 152.873676][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.873693][ T4949] page last free pid 4973 tgid 4973 stack trace: [ 152.873702][ T4949] __free_frozen_pages+0x10e7/0x11c0 [ 152.873719][ T4949] __slab_free+0x252/0x2a0 [ 152.873735][ T4949] qlist_free_all+0x99/0x100 [ 152.873749][ T4949] kasan_quarantine_reduce+0x148/0x160 [ 152.873764][ T4949] __kasan_slab_alloc+0x22/0x80 [ 152.873781][ T4949] __kmalloc_noprof+0x3b6/0x780 [ 152.873799][ T4949] tomoyo_realpath_from_path+0xef/0x640 [ 152.873824][ T4949] tomoyo_path_perm+0x283/0x560 [ 152.873841][ T4949] security_inode_getattr+0x12b/0x310 [ 152.873857][ T4949] __x64_sys_newfstat+0x133/0x270 [ 152.873873][ T4949] do_syscall_64+0x174/0x580 [ 152.873895][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.873913][ T4949] [ 152.873917][ T4949] Memory state around the buggy address: [ 152.873926][ T4949] ffff888039c4df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 152.873939][ T4949] ffff888039c4df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 152.873950][ T4949] >ffff888039c4e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.873959][ T4949] ^ [ 152.873967][ T4949] ffff888039c4e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.873978][ T4949] ffff888039c4e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.873987][ T4949] ================================================================== [ 152.995798][ T4949] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 152.995872][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: acpid Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.995939][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.995983][ T4949] Call Trace: [ 152.996006][ T4949] [ 152.996036][ T4949] vpanic+0x56c/0xa60 [ 152.996114][ T4949] ? __pfx_vpanic+0x10/0x10 [ 152.996137][ T4949] ? __pfx___schedule+0x10/0x10 [ 152.996178][ T4949] panic+0xc5/0xd0 [ 152.996199][ T4949] ? __pfx_panic+0x10/0x10 [ 152.996229][ T4949] ? preempt_schedule_thunk+0x16/0x40 [ 152.996337][ T4949] ? sur40_open+0xa1/0x470 [ 152.996428][ T4949] check_panic_on_warn+0x89/0xb0 [ 152.996485][ T4949] ? sur40_open+0xa1/0x470 [ 152.996559][ T4949] end_report+0x73/0x170 [ 152.996640][ T4949] ? sur40_open+0xa1/0x470 [ 152.996710][ T4949] kasan_report+0x128/0x150 [ 152.996779][ T4949] ? sur40_open+0xa1/0x470 [ 152.996864][ T4949] sur40_open+0xa1/0x470 [ 152.996946][ T4949] input_open_device+0x1f9/0x3b0 [ 152.997032][ T4949] mousedev_open_device+0xcc/0x150 [ 152.997121][ T4949] mousedev_open+0x2ec/0x490 [ 152.997217][ T4949] chrdev_open+0x4dc/0x600 [ 152.997253][ T4949] ? __pfx_chrdev_open+0x10/0x10 [ 152.997309][ T4949] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 152.997445][ T4949] ? __pfx_chrdev_open+0x10/0x10 [ 152.997528][ T4949] do_dentry_open+0x849/0x1420 [ 152.997611][ T4949] vfs_open+0x3b/0x350 [ 152.997680][ T4949] ? path_openat+0x2e49/0x3850 [ 152.997758][ T4949] path_openat+0x2e60/0x3850 [ 152.997845][ T4949] ? kmem_cache_alloc_noprof+0x355/0x650 [ 152.997908][ T4949] ? __x64_sys_openat+0x138/0x170 [ 152.997963][ T4949] ? do_syscall_64+0x174/0x580 [ 152.998046][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.998127][ T4949] do_file_open+0x23e/0x4a0 [ 152.998195][ T4949] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.998267][ T4949] ? __pfx_do_file_open+0x10/0x10 [ 152.998309][ T4949] ? alloc_fd+0x654/0x6d0 [ 152.998343][ T4949] do_sys_openat2+0x115/0x200 [ 152.998411][ T4949] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.998460][ T4949] ? ksys_read+0x202/0x270 [ 152.998487][ T4949] ? __pfx_ksys_read+0x10/0x10 [ 152.998516][ T4949] __x64_sys_openat+0x138/0x170 [ 152.998541][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.998557][ T4949] do_syscall_64+0x174/0x580 [ 152.998579][ T4949] ? trace_irq_disable+0x3b/0x140 [ 152.998596][ T4949] ? clear_bhb_loop+0x40/0x90 [ 152.998614][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.998641][ T4949] RIP: 0033:0x7f75e5801407 [ 152.998656][ T4949] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 152.998669][ T4949] RSP: 002b:00007ffe4d37cf40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 152.998687][ T4949] RAX: ffffffffffffffda RBX: 00007f75e5777780 RCX: 00007f75e5801407 [ 152.998699][ T4949] RDX: 0000000000080800 RSI: 00007ffe4d37d150 RDI: ffffffffffffff9c [ 152.998710][ T4949] RBP: 00007ffe4d37d150 R08: 0000000000000000 R09: 0000000000000000 [ 152.998720][ T4949] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000080 [ 152.998730][ T4949] R13: 00007ffe4d37d250 R14: 0000558c633f67fe R15: 00007ffe4d37d250 [ 152.998748][ T4949] [ 152.999377][ T4949] Kernel Offset: disabled