last executing test programs: 19m26.600625948s ago: executing program 32 (id=10): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000544000/0x3000)=nil, 0x3000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_hsr\x00', {0x6021}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x2102, r3}, 0x1) landlock_restrict_self(r4, 0x5) link(&(0x7f0000000140)='.\x00', 0x0) 16m12.012019835s ago: executing program 33 (id=254): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fea000000071131a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 15m55.210800931s ago: executing program 34 (id=289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe7da}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(0x0, 0xd931d3864d39dcdb) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz0\x00', {0x4, 0xfffb, 0xa}, 0x55, [0x6, 0xd, 0x6ce, 0xed, 0x9, 0x400, 0xd8c, 0x5, 0x4452, 0x3e38, 0x407, 0x101, 0x0, 0xe662, 0xfffffffa, 0x6, 0x4, 0x7fff, 0x5, 0xb0, 0xfffffffe, 0xd07, 0x0, 0x9, 0x6, 0x8, 0x2, 0x6, 0x6, 0x80000000, 0x0, 0x4, 0xfff, 0x1, 0x79, 0x80000000, 0x8, 0x2, 0x7, 0x8, 0x1, 0xd, 0x401, 0x4, 0x1, 0x1, 0xff, 0x2, 0x101, 0x5c, 0x1, 0x1000000, 0x6, 0x7f, 0x6, 0x49758c69, 0x5, 0xca2, 0x3, 0x7, 0x82e, 0x40000000, 0x1, 0xff6d], [0xfffffffb, 0x85, 0x437d, 0x68, 0x0, 0x5, 0x40, 0x2, 0xfffffffd, 0x7f, 0x5, 0x8f44, 0x6, 0x3aa, 0x7, 0x0, 0x10, 0x1, 0xc, 0x1, 0x7, 0x5, 0x4, 0xfffffffc, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x80000000, 0xd, 0x1, 0x9, 0x3, 0x8171, 0x1, 0xcf34, 0xc9c, 0x1, 0x316c0eca, 0x8, 0x1, 0x5eb7981f, 0x8, 0xb, 0x8, 0x5, 0x0, 0xfffffe00, 0xffff8001, 0x8000, 0x7f, 0x40, 0x9, 0x8, 0x2, 0x3, 0x40ba, 0x7, 0x2, 0x8914, 0x3, 0x2, 0x35c3], [0x57b, 0xfffff000, 0x8001, 0x80000001, 0x9, 0xc, 0x6, 0x9dba, 0xc2e, 0x6, 0x1, 0x2, 0x5, 0x723fffb6, 0x6, 0x80000000, 0x1e3, 0xff, 0x5, 0x4, 0x10000, 0x25, 0x81, 0x9, 0x7, 0x7b, 0xd, 0x9, 0x3, 0x7ad, 0x4, 0x8, 0x40, 0x6, 0x7fff, 0x7, 0xffffe1be, 0x80000001, 0x31, 0x7, 0x7f, 0x10001, 0x2, 0x8, 0x1bf, 0x6, 0x0, 0x1, 0x80000000, 0x7, 0x2, 0x7f, 0x38, 0x7, 0x1, 0x8001, 0x10000, 0xf, 0x1, 0xc57f, 0xfffffff8, 0x6, 0x6, 0x5], [0x3f, 0x4, 0x6, 0x301, 0x8, 0x2, 0x3, 0x9af00000, 0xf2, 0x4, 0x10, 0x4, 0x101, 0xfffffff9, 0x89, 0x3, 0x0, 0x0, 0x5d0, 0x1, 0xa6, 0x5, 0x1e1e2a0c, 0x7, 0xfffffffb, 0x6, 0x6, 0x400, 0x10001, 0x10000, 0x4, 0x6, 0xff, 0xe, 0xfffff517, 0x0, 0x457, 0xda, 0x1, 0x400, 0x5, 0x7, 0x8, 0x40, 0x8, 0x3, 0xffff, 0xc526, 0x0, 0x9, 0x7, 0x6, 0x7fff, 0x7ced, 0x7, 0x9, 0x6, 0x1, 0x36, 0xfff, 0x4, 0x1, 0x101, 0x3]}, 0x45c) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000600}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x88b1, {{0xa, 0x4e24, 0x9, @empty, 0x9}}}, 0x88) 15m51.756539929s ago: executing program 35 (id=295): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 15m44.925487795s ago: executing program 36 (id=302): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) listen(r0, 0x7) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000544000/0x3000)=nil, 0x3000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_hsr\x00', {0x6021}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2102, r4}, 0x1) landlock_restrict_self(r5, 0x5) link(&(0x7f0000000140)='.\x00', 0x0) 15m4.696382281s ago: executing program 8 (id=296): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ftruncate(r0, 0x8800000) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x100081c0) syz_usb_connect$sierra_net(0x2, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r0, 0x0, 0x578410eb) 14m49.251647223s ago: executing program 37 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 14m48.918073612s ago: executing program 38 (id=296): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ftruncate(r0, 0x8800000) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x100081c0) syz_usb_connect$sierra_net(0x2, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r0, 0x0, 0x578410eb) 14m47.372390216s ago: executing program 39 (id=311): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005480)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000300)="15beab311dc1c576fadc1bda40dde1fce8e2fc158433033a8c5f0fc33560a1bd2ef2ae54e370454cff747fed4edafaff8e963047e859dff5f5ebd731a6d5c6", 0x3f}, {&(0x7f0000000600)="58ca2c5da59a2a1c638503ce798a4a88c1a315c4129813235e3f986f5b0487b83b3561e343ad34bf10ec5c0ad11d5d8a311456bf55ec516d44711966fee302713b9a430e1fe44029d98025d5935e7a9dae70cc88fc7c55a81ffd986eddf184006b5e52c90fd9db4cb993da5a96e0e4242ff2dbdecb4449ddf0adb91eaef546b0227c56e5dfe891cd978bf3804d1f5b279a5f99de3a94816d9e77b409238b4227c8c7", 0xa2}, {&(0x7f00000006c0)="99bf4ecc0337709c4af43e00b18b6358dbef2e39a4ad56ad922345a2a21e874782935653a3bf9f164ef03b1986caf7d8d80e56fb95a131ac2522714553c926200423d2f1605a9b43babd71d528b52418846c489e96b8f08d4bf027e437bb2e9f5665e764ed7581233c1f0728acdd589c480eb518f6b41833db5dd5826117efd0fc2b9a54435b60dc5c1757a39c40661e6cfbffd380bf37ec01b14b925bcf566ca8259e524f84f6ab8424b318849d2b34d7ce0cce264ae3bd1da38145d314a6038041344262048f81", 0xc8}, {&(0x7f0000000880)="6b8a8b4bf008da458d55ffb101c670290a926070dc6228c59731e5ac6d71f5b1a18423dbab6caa9b2b54a2796cb6442b9d0a86d058b0c2ab3d6e030f4a868809286c44db58154937bc0d33c20a32981d7ab01faadf8da5a12218979edf2de98119dbdafd187db0572b70590df0a2f654c326a13807650d840bf67b1e4a070739ff00828b42f91f0d9e93eba48dd522b632c8ef7b2593c8c306eb19c9cc31b5ca65767416926c672f19f7e399c139faca39466ea3ce9724", 0xb7}, {&(0x7f0000000940)="d396151cbe59eb06951b2a5d5c3a5d8aa4fc1d0b4ec6ab860d85b31de07aec225bba367a97e1937bb4ae4b6294fdcff8244a93b5277d7d44e142c65ff43192d2f5c46e08a564255b97263f17a39f73dbd2609308b310eccd", 0x58}, {&(0x7f00000009c0)="24c8ea32ea5fd1ce5e51a23d6052b65d2dcf6d37b197e39070e3314ce59342c0ec95831c502936d8e654f39c6a92824cae59e2a8d6dce000cf86f3677b3553b4346202cb9767caa3ef56c710568feaef286b964fdc37469326dd0bfd6fc1b9e6a94a47e21ff1a72d4cca90b45d04dccc89d3abfcc0009faa8c2ecf0196514b240148ec10d60487ef81142367be2c475715c10267b342c75bf077576d83fdbb9826c3bad3d897f9e7b2751450033e477cdded1fbf318a7fbb388e03adb42db6204d2f4d9bb825e7b6db7d24ef60aa250a1f657f11a513e80526a17c194ea95404b049f8ea447a4887b2bd50295b9c7e8ad4150d2746eb289f", 0xf8}, {&(0x7f0000000ac0)="c63d4b68236ab1f8e3ce3baebcab6057ac2c348b3bf4249c6af2214cd27faae4fe0db6be5f82cc21", 0x28}, {&(0x7f0000000b40)="4368b423fcb5e911c71a8ef963aa6734e7537b679ac7b01096038de29b44ad655ddcd486f27df3c6265c8e79f057cb4868911418615a70c66b4d18ee02c73488a4b788d87f90204b6c269044769c84985d5e7277679b3a2d5c8c8f34111affcf4a253295573b4571a9616d3904f944990eba879f8ed386680cd5fdb6e41aff5122f44571903347811638497dee2a2ce6879cdd06383af23b45ad8962f9", 0x9d}], 0x8, &(0x7f0000000c80)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x30, 0x20000000}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d00)="de3b82817df69697fe6b15affea565fbdd00455d25c82f5c5876c57fa40e8287ca59ba0b720bdebab2e8a91c6e11bec6ac58c76a613e5fb2bb0121f37f9b1ae1063af89031a041962bd7270ec08b359f2ba2f0f9e08cf55ed74fada62d5576170ef96690e472bfeac2be4a2479acdab79c17c7e3b655c1ac2723991d8525b35f1718149bba246423630c59bb1461c6c6bb7144b26513d12ebd790be672dde7f7e0d019ac25fdd2719925ddc36f059c610f3cfd114fafe463715734409305c05145e548d2506e00f50167bf8390", 0xcd}, {&(0x7f0000000e00)="d314d3666ebb953ece08ce80355eba16d9fa61b5937324557c6472f7", 0x1c}, {&(0x7f0000000e40)="e50e4c34d1fbf86d1a2634e57ad44a1fadf2cad090125e8af048fd628427b33c87c6c6edf896cef9d4df7a4902cfbdd6f07b9839d461d37d5c1279c3f4cd3fc7a86e80343730616c88e0bc070e9b80b6d1aeb27e69e67a8c0907c0b26aec6ae0942a8eedb5e05bfbde15b6ac3c1be8d220c8cb6ece21a7c941c6fab95f9f1124b1c6cba4c6e8919ff476fdb26fc1e49efc036f9771c7b563786b86a6653f42e15ba280cd37", 0xa5}], 0x3, &(0x7f0000000f40)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x48, 0x20008000}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000fc0)="9ea2f09897f5b457b4c6d0e4caa0511672a920abcfbf6f23425a3a48f6fd6e2051e18f4c6227f704f92ce4a67932864bcd09f5c39b5b980391505e8a60fe2cf70cceb995ffddd2abfc27b03ef4c8d4d45fcf7fd626fb319c5eef4a71cfe70f412146a60b068046df7252df220f63a3f431d0c0351a8c04abfce5f726c4025cab626503bdccc1ba1fc3aec6235b2b59c5e71d3f4859998feb7a06ab25b1c76d70", 0xa0}, {&(0x7f0000001080)="f145c82d93cedd37", 0x8}], 0x2}, {0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001100)="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", 0xfa}, {&(0x7f0000001200)="fbc950efa74c54460a65fe85bea5a638a54ad275922d3568b8715f475ae28a6714ad159c7b80479e35ca076f3fb806773e4f2d0ee42eb5a1375158fdd334bf733c306fdf2cf66690e2ee4e768351f05ad4b61bf0f94ea744af7526c00c6c297402835196ebd1064667aa9464ea82351cb25304b00a51db11a28b81dc92024bbdcfacc0ce75ce1b372a515cd22f433097532cf06ff30d02cb2ebaa1ae056930192482fc734494c2c16cc59cfbff1a4af4e677d84870355509817d5260cc084ccca4f002af9d7e7e1fdd67378ec4390b", 0xcf}, {&(0x7f0000001300)="9ecf6acafd042427e7e5bd2f971ca58aaaead6ec9d8a67405cd04d1dc5bdd81cba5df5eab60f3ca7899d44645c243c2c5d61aedc7253800b8285ffc37ac67507d0d13687bfa7262c756129b3d676f9db655e793e291b60de3662a40544ef6bd279d7569a44f664592633c904a0", 0x6d}], 0x3, &(0x7f00000013c0)=[@assoc={0x18, 0x117, 0x4, 0x7fff}, @iv={0x38, 0x117, 0x2, 0x20, "6a43a4987b2e76370dc0c543c7a1bffb86edfd664dce004556a43029285e9734"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @op={0x18}], 0xf8, 0x20000004}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@assoc={0x18, 0x117, 0x4, 0xa}, @op={0x18}, @iv={0x60, 0x117, 0x2, 0x47, "615513d60d1a8c43ff22b97db255a543082dfb1e26503178a31d7e177ebdd19ca76cc7d1e94af75b6373eaa164194fa24d4dcd1a1990f86d652e1af45cb0e2d824342096501e1a"}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}], 0xa8, 0x24048080}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}], 0x6, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12m15.220239394s ago: executing program 40 (id=420): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x80}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x16c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x120, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) syz_open_procfs(r2, &(0x7f0000000080)='gid_map\x00') r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) getsockname$llc(r1, 0x0, 0x0) 11m49.608129103s ago: executing program 41 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r3, r3, 0x0, 0x4) 11m43.351721617s ago: executing program 42 (id=438): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 11m21.519271788s ago: executing program 5 (id=21): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fea000000071131a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 11m19.520535973s ago: executing program 5 (id=468): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/kcov\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x18, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) mmap(&(0x7f0000100000/0x20000)=nil, 0x20000, 0x3, 0x11, r4, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x6, 0x0, 0x1, 0x7}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='f\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200000000000800030005ac0f00"], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd25, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}}, 0x48040) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0xd0, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2c}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc000}, 0x80c0) 11m18.979464743s ago: executing program 5 (id=469): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in=@dev}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x1, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x8}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '('}}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r1, 0x3b8e, &(0x7f0000000580)="10") r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 11m17.595340857s ago: executing program 5 (id=471): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 11m15.01778311s ago: executing program 5 (id=481): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c37900000000008321651a47a61538ca945f6400940f6a0325010ebc09005300fff5dd0000a7d406c8b490fc49de5226ea65ba736f0010000100060c1000ffffffa6224e", 0x58}], 0x1) (fail_nth: 5) 11m14.284142508s ago: executing program 43 (id=481): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c37900000000008321651a47a61538ca945f6400940f6a0325010ebc09005300fff5dd0000a7d406c8b490fc49de5226ea65ba736f0010000100060c1000ffffffa6224e", 0x58}], 0x1) (fail_nth: 5) 11m5.633839s ago: executing program 3 (id=494): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ftruncate(r0, 0x8800000) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x88c1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000006000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000060c0), 0xffffffffffffffff) syz_usb_connect$sierra_net(0x2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x578410eb) 11m4.658750007s ago: executing program 3 (id=497): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe7da}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(0x0, 0xd931d3864d39dcdb) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz0\x00', {0x4, 0xfffb, 0xa}, 0x55, [0x6, 0xd, 0x6ce, 0xed, 0x9, 0x400, 0xd8c, 0x5, 0x4452, 0x3e38, 0x407, 0x101, 0x0, 0xe662, 0xfffffffa, 0x6, 0x4, 0x7fff, 0x5, 0xb0, 0xfffffffe, 0xd07, 0x0, 0x9, 0x6, 0x8, 0x2, 0x6, 0x6, 0x80000000, 0x0, 0x4, 0xfff, 0x1, 0x79, 0x80000000, 0x8, 0x2, 0x7, 0x8, 0x1, 0xd, 0x401, 0x4, 0x1, 0x1, 0xff, 0x2, 0x101, 0x5c, 0x1, 0x1000000, 0x6, 0x7f, 0x6, 0x49758c69, 0x5, 0xca2, 0x3, 0x7, 0x82e, 0x40000000, 0x1, 0xff6d], [0xfffffffb, 0x85, 0x437d, 0x68, 0x0, 0x5, 0x40, 0x2, 0xfffffffd, 0x7f, 0x5, 0x8f44, 0x6, 0x3aa, 0x7, 0x0, 0x10, 0x1, 0xc, 0x1, 0x7, 0x5, 0x4, 0xfffffffc, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x80000000, 0xd, 0x1, 0x9, 0x3, 0x8171, 0x1, 0xcf34, 0xc9c, 0x1, 0x316c0eca, 0x8, 0x1, 0x5eb7981f, 0x8, 0xb, 0x8, 0x5, 0x0, 0xfffffe00, 0xffff8001, 0x8000, 0x7f, 0x40, 0x9, 0x8, 0x2, 0x3, 0x40ba, 0x7, 0x2, 0x8914, 0x3, 0x2, 0x35c3], [0x57b, 0xfffff000, 0x8001, 0x80000001, 0x9, 0xc, 0x6, 0x9dba, 0xc2e, 0x6, 0x1, 0x2, 0x5, 0x723fffb6, 0x6, 0x80000000, 0x1e3, 0xff, 0x5, 0x4, 0x10000, 0x25, 0x81, 0x9, 0x7, 0x7b, 0xd, 0x9, 0x3, 0x7ad, 0x4, 0x8, 0x40, 0x6, 0x7fff, 0x7, 0xffffe1be, 0x80000001, 0x31, 0x7, 0x7f, 0x10001, 0x2, 0x8, 0x1bf, 0x6, 0x0, 0x1, 0x80000000, 0x7, 0x2, 0x7f, 0x38, 0x7, 0x1, 0x8001, 0x10000, 0xf, 0x1, 0xc57f, 0xfffffff8, 0x6, 0x6, 0x5], [0x3f, 0x4, 0x6, 0x301, 0x8, 0x2, 0x3, 0x9af00000, 0xf2, 0x4, 0x10, 0x4, 0x101, 0xfffffff9, 0x89, 0x3, 0x0, 0x0, 0x5d0, 0x1, 0xa6, 0x5, 0x1e1e2a0c, 0x7, 0xfffffffb, 0x6, 0x6, 0x400, 0x10001, 0x10000, 0x4, 0x6, 0xff, 0xe, 0xfffff517, 0x0, 0x457, 0xda, 0x1, 0x400, 0x5, 0x7, 0x8, 0x40, 0x8, 0x3, 0xffff, 0xc526, 0x0, 0x9, 0x7, 0x6, 0x7fff, 0x7ced, 0x7, 0x9, 0x6, 0x1, 0x36, 0xfff, 0x4, 0x1, 0x101, 0x3]}, 0x45c) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000600}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x88b1, {{0xa, 0x4e24, 0x9, @empty, 0x9}}}, 0x88) 11m3.605052643s ago: executing program 3 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 11m2.450277897s ago: executing program 3 (id=500): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x1, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x8}}]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r2, 0x3b8e, &(0x7f0000000580)="10") r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 11m1.259303946s ago: executing program 3 (id=501): socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x17, 0x0) keyctl$session_to_parent(0x12) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) preadv(r3, &(0x7f00000029c0)=[{&(0x7f0000002200)=""/175, 0xaf}], 0x1, 0x20007c, 0x8001) 10m59.972487038s ago: executing program 3 (id=502): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000680)=0xab21, 0x4) inotify_init1(0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) pipe(&(0x7f0000000000)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 10m59.1790076s ago: executing program 44 (id=502): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000680)=0xab21, 0x4) inotify_init1(0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) pipe(&(0x7f0000000000)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 10m57.174013025s ago: executing program 0 (id=505): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) socket$l2tp(0x2, 0x2, 0x73) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x1ff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x9}, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x40008004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000140)=@framed={{0x66, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x8c}}, 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 10m55.32734819s ago: executing program 0 (id=506): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32], 0x9) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x2, 0x0, 0x7}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}}, 0xea5bc50b6199d77e) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc96a, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) 10m51.615376198s ago: executing program 0 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 10m50.410667448s ago: executing program 0 (id=508): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x1, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x8}}]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r2, 0x3b8e, &(0x7f0000000580)="10") r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 10m49.197478983s ago: executing program 0 (id=509): socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x17, 0x0) keyctl$session_to_parent(0x12) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) process_vm_writev(0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/214, 0xd6}], 0x1, &(0x7f0000000940)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x0) preadv(r3, &(0x7f00000029c0)=[{&(0x7f0000002200)=""/175, 0xaf}], 0x1, 0x20007c, 0x8001) 10m47.498357083s ago: executing program 0 (id=510): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00\x00\x00D\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="e9", @ANYRES64=0x0], 0x20) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x1000}, 0x28001) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000140)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x9) fchdir(r4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 10m46.974591461s ago: executing program 45 (id=510): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00\x00\x00D\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="e9", @ANYRES64=0x0], 0x20) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x1000}, 0x28001) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000140)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x9) fchdir(r4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 10m19.185719195s ago: executing program 8 (id=482): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="58591b001400192340834b80040d8c560a117436c37900000000008321651a47a61538ca945f6400940f6a0325010ebc09005300fff5dd0000a7d406c8b490fc49de5226ea65ba736f0010000100060c1000ffffffa6224e", 0x58}], 0x1) 10m19.028867473s ago: executing program 8 (id=512): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000001, 0x204031, 0xffffffffffffffff, 0xec773000) rt_sigprocmask(0x2, &(0x7f0000000580)={[0x5]}, &(0x7f00000005c0), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3ee05, 0x51223}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x484}]}}}, @IFLA_CARRIER={0x5, 0x21, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4401d}, 0x20044050) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03d10d0000000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x800000, '\x00', @ptr}}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) madvise(&(0x7f0000556000/0x4000)=nil, 0x4000, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0xfd00) io_submit(r9, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r10, &(0x7f0000000240)='\x00', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x5, 0x402, r10, 0x0}]) syz_clone(0x42009500, 0x0, 0x0, 0x0, 0x0, 0x0) 10m18.005348237s ago: executing program 8 (id=513): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in=@dev}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x1, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x8}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '('}}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r1, 0x3b8e, &(0x7f0000000580)="10") r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 10m16.866791351s ago: executing program 8 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 10m15.673979036s ago: executing program 8 (id=515): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x1, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x8}}]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r2, 0x3b8e, &(0x7f0000000580)="10") r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 10m15.483339392s ago: executing program 46 (id=515): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x1, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x8}}]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r2, 0x3b8e, &(0x7f0000000580)="10") r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 6m39.391261098s ago: executing program 7 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$dvb_demux(&(0x7f0000000040), 0x57, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x101, 0x7, 0xf8a, 0xca29c56, 0x2630, 0x9}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r2, 0x4a028000) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m32.682054226s ago: executing program 7 (id=766): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup(r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@gettaction={0x1c, 0x32, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002"], 0x124}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 6m30.413608273s ago: executing program 7 (id=767): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$rds(0x15, 0x5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000002c0)=@x86={0x7, 0xfe, 0x7, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x7, 0x7f, 0xc, 0x0, 0x0, 0x3, 0xffffffff, 0x4, 0x0, 0x3, 0x6, '\x00', 0x9, 0x13}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000480)={0x9, 0x8, 0x3, {0x9, @sliced={0x100, [0x1, 0xaa, 0xfff8, 0x3, 0x48, 0x5c6, 0x3, 0xa7e, 0x9, 0x9, 0x6, 0xa191, 0x3, 0x1, 0x0, 0x6, 0x1, 0x8000, 0x0, 0xfbc5, 0x8, 0x1aed, 0x401, 0x9, 0x1f1, 0x5, 0x3, 0x7ff, 0x3, 0x9, 0x2, 0x7, 0x7, 0x8, 0x3, 0x0, 0x0, 0x10, 0x4, 0x479, 0x0, 0x2, 0x5, 0xe, 0xe74, 0x800, 0x5, 0x7], 0x4}}, 0x9}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) 6m23.061609361s ago: executing program 7 (id=771): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$rds(0x15, 0x5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000002c0)=@x86={0x7, 0xfe, 0x7, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x7, 0x7f, 0xc, 0x0, 0x0, 0x3, 0xffffffff, 0x4, 0x0, 0x3, 0x6, '\x00', 0x9, 0x13}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e22, 0xfffff800, @mcast1, 0xb}, r9, 0x9}}, 0xffffff2f) 6m19.228438764s ago: executing program 7 (id=775): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$rds(0x15, 0x5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000002c0)=@x86={0x7, 0xfe, 0x7, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x7, 0x7f, 0xc, 0x0, 0x0, 0x3, 0xffffffff, 0x4, 0x0, 0x3, 0x6, '\x00', 0x9, 0x13}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000480)={0x9, 0x8, 0x3, {0x9, @sliced={0x100, [0x1, 0xaa, 0xfff8, 0x3, 0x48, 0x5c6, 0x3, 0xa7e, 0x9, 0x9, 0x6, 0xa191, 0x3, 0x1, 0x0, 0x6, 0x1, 0x8000, 0x0, 0xfbc5, 0x8, 0x1aed, 0x401, 0x9, 0x1f1, 0x5, 0x3, 0x7ff, 0x3, 0x9, 0x2, 0x7, 0x7, 0x8, 0x3, 0x0, 0x0, 0x10, 0x4, 0x479, 0x0, 0x2, 0x5, 0xe, 0xe74, 0x800, 0x5, 0x7], 0x4}}, 0x9}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e22, 0xfffff800, @mcast1, 0xb}, r9, 0x9}}, 0xffffff2f) 6m16.130376116s ago: executing program 7 (id=777): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 5m59.263523553s ago: executing program 47 (id=777): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 23.416822537s ago: executing program 4 (id=1213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, &(0x7f0000000540)='./tracing\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x60, 0x0, 0x3, {{0x6, 0x40000c, 0xffffffffffffffff, 0x714, 0x2, 0x2, 0xacb8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) 22.044158859s ago: executing program 1 (id=1219): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="02", 0x1}, {&(0x7f0000000300)="3014f4dec1d9f1ce11d8a957a5078a", 0xf}], 0x2}, 0x10080) 21.700617547s ago: executing program 1 (id=1220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) lseek(0xffffffffffffffff, 0x2, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0xc, 0x33, 0x40, @remote, @local, {[], "3b010000000004d200000001"}}}, 0x34) 20.575983085s ago: executing program 2 (id=1222): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sched_setaffinity(r2, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 18.981769499s ago: executing program 2 (id=1225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x3, 0x70000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="0f013b9a004800004600c4e193d04436e966b846008ee80f21c40f2204c4c3697c6500d336f01964740a0fc71cbc0f011b", 0x31}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 18.912489143s ago: executing program 4 (id=1226): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 15.383979605s ago: executing program 2 (id=1231): r0 = socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x40002019}) 14.204689167s ago: executing program 4 (id=1232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") 12.762263637s ago: executing program 1 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 9.439233971s ago: executing program 1 (id=1236): shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/16) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 8.614117906s ago: executing program 4 (id=1237): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f00000002c0), 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 6.693794328s ago: executing program 2 (id=1241): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x100000003, 0x410200) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) semctl$IPC_RMID(0x0, 0x0, 0x0) 5.487809689s ago: executing program 6 (id=1243): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 4.857555823s ago: executing program 6 (id=1246): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x1, 0x4}, 0x2) 4.669888995s ago: executing program 4 (id=1248): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 4.668457381s ago: executing program 2 (id=1249): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4.032736921s ago: executing program 1 (id=1251): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002019}) 3.994376734s ago: executing program 9 (id=1252): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sched_setaffinity(r6, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) prlimit64(r5, 0xd, 0x0, &(0x7f00000003c0)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0) r8 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r9 = fcntl$dupfd(r8, 0x0, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.884469691s ago: executing program 1 (id=1253): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20040000) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) 2.327563941s ago: executing program 6 (id=1254): read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3ffffffd, 0x240) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) 2.164384952s ago: executing program 2 (id=1255): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 2.087771921s ago: executing program 9 (id=1256): r0 = syz_open_dev$vim2m(&(0x7f0000002a40), 0x8000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002c80)=@userptr={0x3, 0x3, 0x4, 0x20, 0x7ff, {0x77359400}, {0x1, 0x2, 0x9, 0x1, 0x2, 0x3, "f720526d"}, 0x49e00000, 0x2, {0x0}, 0x2}) 1.966298836s ago: executing program 6 (id=1257): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000180)=[0x0], 0x1, 0x800}) 1.776508106s ago: executing program 9 (id=1258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004080) 1.765643157s ago: executing program 6 (id=1259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x0, 0x9, 0x9, 0x3, 0x1, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8002, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x0, 0x8, 0x39dd, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x4400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x8, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x80000a, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf7, 0x2, 0x7, 0x8, 0x40fff, 0x4, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0x80, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x3, 0x2, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0x2, 0xab, 0x400, 0x7fffffff, 0xed, 0x802, 0xd83, 0x68, 0x80000001, 0x5, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x9d, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x6000000, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x3, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0x57, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x5, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x2, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xac7, 0x7, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x80000001, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0xc, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0xe47e, 0x400, 0xc, 0xfffffff9, 0x8001, 0x80000d, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.583076509s ago: executing program 9 (id=1260): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.116407538s ago: executing program 4 (id=1261): shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/16) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 294.011044ms ago: executing program 9 (id=1262): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="bba2", 0x2}, {0x0}], 0x2, 0x3, 0x6f) 125.044463ms ago: executing program 6 (id=1263): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x143) 0s ago: executing program 9 (id=1264): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007903000000000000630000c2000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x80, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xa8, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0x7, 0x24, 0xf, 0x1, 0x1, 0x3, 0x8, 0xa}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x10, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x2, 0xfc}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0xf7, 0x40, 0x4, 0x8, 0x6}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) kernel console output (not intermixed with test programs): left with an inconsistent configuration, please check. [ 822.304422][T11762] udevd[11762]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 822.334415][ T823] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 822.507898][ T5702] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 822.513920][ T823] usb 7-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 822.513978][ T823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 50779, setting to 64 [ 822.514009][ T823] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 822.563840][ T823] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 822.563873][ T823] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 822.563915][ T823] usb 7-1: Manufacturer: syz [ 822.599318][ T823] usb 7-1: config 0 descriptor?? [ 822.610668][T11760] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 822.661660][T11174] netdevsim netdevsim1: probe with driver netdevsim failed with error -12 [ 822.671243][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 822.704321][ T5702] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 822.704355][ T5702] usb 5-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 822.704376][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.707760][ T5702] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 822.707789][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.707811][ T5702] usb 5-1: Product: syz [ 822.707827][ T5702] usb 5-1: Manufacturer: syz [ 822.707841][ T5702] usb 5-1: SerialNumber: syz [ 822.718906][ T66] hsr_slave_0: left promiscuous mode [ 822.862039][T11227] usb 7-1: USB disconnect, device number 13 [ 822.875401][ T5702] usb 5-1: config 0 descriptor?? [ 822.931768][ T5702] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 822.937178][ T66] hsr_slave_1: left promiscuous mode [ 822.960241][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.009011][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.260391][ T5702] snd_usb_toneport 5-1:0.0: set_interface failed [ 823.260646][ T5702] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 823.260821][ T5702] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 823.323353][ T5702] usb 5-1: USB disconnect, device number 11 [ 828.091736][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.684'. [ 829.086738][ T66] team0 (unregistering): Port device team_slave_1 removed [ 829.218067][ T66] team0 (unregistering): Port device team_slave_0 removed [ 829.426111][T11784] binder: 11781:11784 ioctl c0306201 200000000300 returned -22 [ 830.788055][ T823] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 830.854640][T11791] syz_tun: entered promiscuous mode [ 830.957870][ T823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 830.957909][ T823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 51016, setting to 1024 [ 830.957955][ T823] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 830.957981][ T823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.005283][T11227] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 831.028596][ T823] usb 7-1: config 0 descriptor?? [ 831.038965][T11782] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 831.245343][T11227] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.245426][T11227] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 831.251294][T11227] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 831.251320][T11227] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 831.251341][T11227] usb 8-1: SerialNumber: syz [ 831.865755][T11227] usb 8-1: No union descriptors [ 831.928700][ T823] playstation 0003:054C:0DF2.0001: invalid report_count 636105749 [ 831.928730][ T823] playstation 0003:054C:0DF2.0001: item 0 4 1 9 parsing failed [ 831.929656][ T823] playstation 0003:054C:0DF2.0001: Parse failed [ 831.929746][ T823] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 832.109265][T11227] usb 8-1: USB disconnect, device number 6 [ 832.116993][T11790] syz_tun: left promiscuous mode [ 832.178476][ T823] usb 7-1: USB disconnect, device number 14 [ 833.422118][ T823] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 833.584110][ T823] usb 8-1: Using ep0 maxpacket: 8 [ 833.586709][ T823] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.586760][ T823] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 833.586788][ T823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 833.591740][ T823] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 833.591765][ T823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.591789][ T823] usb 8-1: Product: syz [ 833.591801][ T823] usb 8-1: Manufacturer: syz [ 833.591818][ T823] usb 8-1: SerialNumber: syz [ 833.674058][ T823] usb 8-1: config 0 descriptor?? [ 833.692728][ T823] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 833.725087][ T66] bridge_slave_1: left allmulticast mode [ 833.725118][ T66] bridge_slave_1: left promiscuous mode [ 833.725599][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.912001][ T66] bridge_slave_0: left allmulticast mode [ 833.912068][ T66] bridge_slave_0: left promiscuous mode [ 833.912302][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.913990][ T823] snd_usb_toneport 8-1:0.0: cannot get proper max packet size [ 833.919186][ T823] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 833.960623][ T823] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 834.146579][T11227] usb 8-1: USB disconnect, device number 7 [ 834.592587][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.723483][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.810278][ T66] bond0 (unregistering): Released all slaves [ 838.625342][ T66] hsr_slave_0: left promiscuous mode [ 838.666945][ T66] hsr_slave_1: left promiscuous mode [ 838.667968][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.713445][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.603039][ T66] team0 (unregistering): Port device team_slave_1 removed [ 839.697423][ T66] team0 (unregistering): Port device team_slave_0 removed [ 843.556665][T11668] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.556812][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.557021][T11668] bridge_slave_0: entered allmulticast mode [ 843.561155][T11668] bridge_slave_0: entered promiscuous mode [ 843.595774][T11668] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.595971][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.596154][T11668] bridge_slave_1: entered allmulticast mode [ 843.620058][T11668] bridge_slave_1: entered promiscuous mode [ 843.869770][T11668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.874666][T11668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.030175][ T8184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 844.130091][ T8184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 844.133162][ T8184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 844.137321][ T8184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 844.138273][ T8184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 844.404760][T11668] team0: Port device team_slave_0 added [ 844.419703][T11668] team0: Port device team_slave_1 added [ 844.942807][T11668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.942826][T11668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.942855][T11668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.022922][T11668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.022940][T11668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.022966][T11668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.167226][T11668] hsr_slave_0: entered promiscuous mode [ 845.168632][T11668] hsr_slave_1: entered promiscuous mode [ 845.181220][T11668] debugfs: 'hsr0' already exists in 'hsr' [ 845.181244][T11668] Cannot create hsr debugfs directory [ 847.749367][ T59] Bluetooth: hci1: command tx timeout [ 847.976548][ T7737] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 849.797281][ T7737] usb 7-1: Using ep0 maxpacket: 8 [ 849.799476][ T7737] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.799500][ T7737] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 849.801963][ T7737] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 849.801990][ T7737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.802011][ T7737] usb 7-1: Product: syz [ 849.802025][ T7737] usb 7-1: Manufacturer: syz [ 849.802039][ T7737] usb 7-1: SerialNumber: syz [ 849.870580][ T7737] usb 7-1: config 0 descriptor?? [ 849.959948][ T8184] Bluetooth: hci1: command tx timeout [ 850.105887][ T9] usb 7-1: USB disconnect, device number 15 [ 850.371969][ T66] bridge_slave_1: left allmulticast mode [ 850.372004][ T66] bridge_slave_1: left promiscuous mode [ 850.372261][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.568535][ T66] bridge_slave_0: left allmulticast mode [ 850.568575][ T66] bridge_slave_0: left promiscuous mode [ 850.568846][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.875645][ T8184] Bluetooth: hci1: command tx timeout [ 855.228594][ T59] Bluetooth: hci1: command tx timeout [ 856.853556][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.961061][ T5818] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 856.984080][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.073504][ T66] bond0 (unregistering): Released all slaves [ 857.126172][ T5818] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.126223][ T5818] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 857.126264][ T5818] usb 7-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 857.126288][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.212160][ T5818] usb-storage 7-1:1.0: USB Mass Storage device detected [ 857.420117][ T5818] usb-storage 7-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 857.882134][ T7846] usb 7-1: USB disconnect, device number 16 [ 858.120706][ T9] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 858.175050][ T66] hsr_slave_0: left promiscuous mode [ 858.218709][ T66] hsr_slave_1: left promiscuous mode [ 858.219492][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.293843][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.293903][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.294064][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 858.319723][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 858.319820][ T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 858.319875][ T9] usb 8-1: Manufacturer: syz [ 858.346376][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.387428][ T9] usb 8-1: config 0 descriptor?? [ 858.625624][ T9] usb 8-1: USB disconnect, device number 8 [ 860.930631][ T9] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 861.102886][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.102935][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 861.102961][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 861.102987][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 861.103008][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 861.105462][ T9] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 861.105499][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 861.105518][ T9] usb 7-1: Product: syz [ 861.105531][ T9] usb 7-1: Manufacturer: syz [ 861.105545][ T9] usb 7-1: SerialNumber: syz [ 861.257229][ T9] usb 7-1: config 0 descriptor?? [ 861.307046][ T5818] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 861.394642][ T66] team0 (unregistering): Port device team_slave_1 removed [ 861.470369][ T5818] usb 8-1: Using ep0 maxpacket: 8 [ 861.489634][ T5818] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.489672][ T5818] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 861.489826][ T9] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 861.528347][ T9] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 861.552734][ T66] team0 (unregistering): Port device team_slave_0 removed [ 861.572861][ T5818] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 861.572882][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.572897][ T5818] usb 8-1: Product: syz [ 861.572906][ T5818] usb 8-1: Manufacturer: syz [ 861.572916][ T5818] usb 8-1: SerialNumber: syz [ 861.717200][ T5818] usb 8-1: config 0 descriptor?? [ 861.809130][ T9] usb 7-1: USB disconnect, device number 17 [ 862.635727][T11668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 862.706467][T11668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 862.933003][T11668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 863.841029][T11668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.872024][T11668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 863.980425][T11668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 864.057828][T11668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 864.129575][T11668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 864.312832][ T7846] usb 8-1: USB disconnect, device number 9 [ 864.758940][T11866] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.759117][T11866] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.759355][T11866] bridge_slave_0: entered allmulticast mode [ 864.763386][T11866] bridge_slave_0: entered promiscuous mode [ 864.829663][T11866] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.829794][T11866] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.829982][T11866] bridge_slave_1: entered allmulticast mode [ 864.845530][T11866] bridge_slave_1: entered promiscuous mode [ 865.128954][T11866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.158675][T11866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.336567][T11866] team0: Port device team_slave_0 added [ 866.047760][T11866] team0: Port device team_slave_1 added [ 866.407695][T11866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.407714][T11866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.407746][T11866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.428050][T11866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.428111][T11866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.428178][T11866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.782749][T11866] hsr_slave_0: entered promiscuous mode [ 866.786012][T11866] hsr_slave_1: entered promiscuous mode [ 866.788895][T11866] debugfs: 'hsr0' already exists in 'hsr' [ 866.788970][T11866] Cannot create hsr debugfs directory [ 866.797133][ T7737] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 866.942524][ T7737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.942582][ T7737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 866.942661][ T7737] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 866.946355][ T7737] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 866.946386][ T7737] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 866.946801][ T7737] usb 5-1: Manufacturer: syz [ 867.112913][T11668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.773341][ T7737] usb 5-1: config 0 descriptor?? [ 867.995260][ T7737] usb 5-1: USB disconnect, device number 12 [ 869.926171][T11668] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.948332][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.948556][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.018444][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.018571][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.566170][T11866] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 874.662515][T11866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.679733][T11866] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 874.696266][ T8184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 874.736809][ T8184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 874.755464][ T8184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 874.785374][ T8184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 874.789653][ T8184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 875.080573][T11866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 875.088550][T11866] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 875.145736][T11866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 875.153911][T11866] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 875.281652][T11866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 876.935727][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.935805][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.009439][ T59] Bluetooth: hci0: command tx timeout [ 879.089211][ T59] Bluetooth: hci0: command tx timeout [ 881.801356][ T59] Bluetooth: hci0: command tx timeout [ 883.836998][T11866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.924420][ T8184] Bluetooth: hci0: command tx timeout [ 884.728457][T11866] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.054570][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.055178][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.253923][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.268350][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.874281][T12219] input: syz0 as /devices/virtual/input/input38 [ 887.879078][T12219] netlink: 28 bytes leftover after parsing attributes in process `syz.6.749'. [ 887.905432][T12090] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.905547][T12090] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.905757][T12090] bridge_slave_0: entered allmulticast mode [ 887.908804][T12090] bridge_slave_0: entered promiscuous mode [ 887.944424][T12090] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.944515][T12090] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.944651][T12090] bridge_slave_1: entered allmulticast mode [ 887.947763][T12090] bridge_slave_1: entered promiscuous mode [ 888.169218][T12090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.277635][ T3402] bridge_slave_1: left allmulticast mode [ 888.277672][ T3402] bridge_slave_1: left promiscuous mode [ 888.277938][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.475288][ T3402] bridge_slave_0: left allmulticast mode [ 888.475314][ T3402] bridge_slave_0: left promiscuous mode [ 888.475495][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.034998][ T3402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.135940][ T3402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.207580][ T3402] bond0 (unregistering): Released all slaves [ 894.300178][T12090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.973310][T12090] team0: Port device team_slave_0 added [ 895.174688][ T3402] hsr_slave_0: left promiscuous mode [ 895.213136][ T3402] hsr_slave_1: left promiscuous mode [ 895.214089][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.268724][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.671553][ T3402] team0 (unregistering): Port device team_slave_1 removed [ 897.735164][ T3402] team0 (unregistering): Port device team_slave_0 removed [ 898.786665][T12090] team0: Port device team_slave_1 added [ 900.735126][T12272] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 903.905947][T12090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.905966][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.905994][T12090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.996637][T12090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.996650][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.996669][T12090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.449964][T12090] hsr_slave_0: entered promiscuous mode [ 904.450951][T12090] hsr_slave_1: entered promiscuous mode [ 904.451608][T12090] debugfs: 'hsr0' already exists in 'hsr' [ 904.451624][T12090] Cannot create hsr debugfs directory [ 905.651987][T11866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.151946][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 907.346580][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 907.359236][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 907.390398][ T5260] 8021q: adding VLAN 0 to HW filter on device eth20 [ 907.429975][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 907.437081][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 911.458619][ T8184] Bluetooth: hci4: command tx timeout [ 913.767543][ T59] Bluetooth: hci4: command tx timeout [ 916.898425][ T59] Bluetooth: hci4: command tx timeout [ 919.465219][ T8184] Bluetooth: hci4: command tx timeout [ 921.982683][ T36] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 923.933589][ T36] usb 7-1: device descriptor read/all, error -71 [ 927.166960][T12090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 927.273325][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 927.289568][T12090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 927.383253][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 927.708876][T12090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 927.787569][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.820572][T12090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 927.891938][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 932.155933][ T66] bridge_slave_1: left allmulticast mode [ 932.155973][ T66] bridge_slave_1: left promiscuous mode [ 932.156252][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.370292][ T66] bridge_slave_0: left allmulticast mode [ 932.370329][ T66] bridge_slave_0: left promiscuous mode [ 932.370591][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.141520][ T823] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 933.453137][ T823] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.453177][ T823] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 933.453196][ T823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 933.453216][ T823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 933.453233][ T823] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 933.481292][ T823] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 933.481319][ T823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 933.481338][ T823] usb 7-1: Product: syz [ 933.481351][ T823] usb 7-1: Manufacturer: syz [ 933.481365][ T823] usb 7-1: SerialNumber: syz [ 935.755568][ T823] usb 7-1: config 0 descriptor?? [ 936.167409][ T823] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 936.169326][ T823] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 936.212736][ T823] usb 7-1: USB disconnect, device number 20 [ 936.405087][ T5702] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 936.588679][ T5702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.588738][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 936.588764][ T5702] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 936.590257][ T5702] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 936.590283][ T5702] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 936.590303][ T5702] usb 5-1: Manufacturer: syz [ 938.217277][ T5702] usb 5-1: config 0 descriptor?? [ 938.665944][ T7737] usb 5-1: USB disconnect, device number 13 [ 938.742317][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.830592][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.884653][ T66] bond0 (unregistering): Released all slaves [ 939.208217][T12315] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.208328][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.208511][T12315] bridge_slave_0: entered allmulticast mode [ 939.213046][T12315] bridge_slave_0: entered promiscuous mode [ 939.270494][T12315] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.270603][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.270775][T12315] bridge_slave_1: entered allmulticast mode [ 939.304357][T12315] bridge_slave_1: entered promiscuous mode [ 939.592630][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 939.645245][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 939.650030][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 939.670709][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 939.750614][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 939.789985][ T66] hsr_slave_0: left promiscuous mode [ 939.916951][ T66] hsr_slave_1: left promiscuous mode [ 939.918001][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.085517][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.778110][ T59] Bluetooth: hci1: command tx timeout [ 942.926772][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.926864][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 944.240879][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.252960][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.261042][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.267685][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.273822][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 945.002489][ T59] Bluetooth: hci1: command tx timeout [ 945.134519][T12472] FAULT_INJECTION: forcing a failure. [ 945.134519][T12472] name failslab, interval 1, probability 0, space 0, times 0 [ 945.134551][T12472] CPU: 1 UID: 0 PID: 12472 Comm: syz.4.794 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 945.134574][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.134586][T12472] Call Trace: [ 945.134593][T12472] [ 945.134601][T12472] dump_stack_lvl+0xe8/0x150 [ 945.134635][T12472] should_fail_ex+0x467/0x600 [ 945.134671][T12472] should_failslab+0xa8/0x100 [ 945.134696][T12472] __kmalloc_cache_noprof+0xa0/0x6b0 [ 945.134718][T12472] ? __rdma_create_id+0x65/0x7b0 [ 945.134817][T12472] ? __rdma_create_id+0x65/0x7b0 [ 945.134838][T12472] ? __pfx_ucma_event_handler+0x10/0x10 [ 945.134887][T12472] ? __pfx_ucma_event_handler+0x10/0x10 [ 945.134910][T12472] __rdma_create_id+0x65/0x7b0 [ 945.134934][T12472] ? __pfx_ucma_event_handler+0x10/0x10 [ 945.134957][T12472] rdma_create_user_id+0x81/0xc0 [ 945.134980][T12472] ucma_create_id+0x22e/0x370 [ 945.135005][T12472] ? __pfx_ucma_create_id+0x10/0x10 [ 945.135040][T12472] ucma_write+0x257/0x2f0 [ 945.135064][T12472] ? __pfx_ucma_write+0x10/0x10 [ 945.135085][T12472] ? security_file_permission+0x75/0x260 [ 945.135136][T12472] ? rw_verify_area+0x209/0x4d0 [ 945.135164][T12472] vfs_writev+0x4c4/0x990 [ 945.135182][T12472] ? __pfx_ucma_write+0x10/0x10 [ 945.135209][T12472] ? __pfx_vfs_writev+0x10/0x10 [ 945.135240][T12472] ? __fget_files+0x2a/0x420 [ 945.135263][T12472] ? __fget_files+0x3a8/0x420 [ 945.135282][T12472] ? __fget_files+0x2a/0x420 [ 945.135309][T12472] do_writev+0x15a/0x2e0 [ 945.135329][T12472] ? __pfx_do_writev+0x10/0x10 [ 945.135357][T12472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.135375][T12472] do_syscall_64+0x174/0x580 [ 945.135396][T12472] ? trace_irq_disable+0x3b/0x140 [ 945.135411][T12472] ? clear_bhb_loop+0x40/0x90 [ 945.135428][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.135443][T12472] RIP: 0033:0x7f0177bae019 [ 945.135458][T12472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.135470][T12472] RSP: 002b:00007f0175e06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 945.135486][T12472] RAX: ffffffffffffffda RBX: 00007f0177e35fa0 RCX: 00007f0177bae019 [ 945.135497][T12472] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000011 [ 945.135507][T12472] RBP: 00007f0175e06090 R08: 0000000000000000 R09: 0000000000000000 [ 945.135516][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.135524][T12472] R13: 00007f0177e36038 R14: 00007f0177e35fa0 R15: 00007ffcfe6b9cd8 [ 945.135547][T12472] [ 945.514612][ T66] team0 (unregistering): Port device team_slave_1 removed [ 945.593720][ T66] team0 (unregistering): Port device team_slave_0 removed [ 945.682270][T12474] FAULT_INJECTION: forcing a failure. [ 945.682270][T12474] name failslab, interval 1, probability 0, space 0, times 0 [ 945.682307][T12474] CPU: 1 UID: 0 PID: 12474 Comm: syz.4.795 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 945.682332][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.682346][T12474] Call Trace: [ 945.682353][T12474] [ 945.682362][T12474] dump_stack_lvl+0xe8/0x150 [ 945.682403][T12474] should_fail_ex+0x467/0x600 [ 945.682444][T12474] should_failslab+0xa8/0x100 [ 945.682472][T12474] __kmalloc_cache_noprof+0xa0/0x6b0 [ 945.682498][T12474] ? proc_cgroup_show+0x5a/0x740 [ 945.682600][T12474] ? proc_cgroup_show+0x5a/0x740 [ 945.682633][T12474] proc_cgroup_show+0x5a/0x740 [ 945.682657][T12474] ? get_pid_task+0x20/0x1f0 [ 945.682688][T12474] ? get_pid_task+0x20/0x1f0 [ 945.682719][T12474] ? get_pid_task+0x20/0x1f0 [ 945.682754][T12474] proc_single_show+0xee/0x190 [ 945.682790][T12474] traverse+0x229/0x620 [ 945.682834][T12474] seq_read_iter+0xb6b/0xcb0 [ 945.682879][T12474] seq_read+0x36a/0x490 [ 945.682908][T12474] ? kstrtouint+0x6e/0xe0 [ 945.682947][T12474] ? __pfx_seq_read+0x10/0x10 [ 945.682989][T12474] ? rw_verify_area+0x250/0x4d0 [ 945.683031][T12474] vfs_readv+0x588/0x850 [ 945.683054][T12474] ? __pfx_seq_read+0x10/0x10 [ 945.683086][T12474] ? __pfx_vfs_readv+0x10/0x10 [ 945.683113][T12474] ? __fget_files+0x2a/0x420 [ 945.683135][T12474] ? __fget_files+0x3a8/0x420 [ 945.683155][T12474] ? __fget_files+0x2a/0x420 [ 945.683186][T12474] __x64_sys_preadv+0x19f/0x2c0 [ 945.683212][T12474] ? __pfx___x64_sys_preadv+0x10/0x10 [ 945.683241][T12474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.683258][T12474] do_syscall_64+0x174/0x580 [ 945.683283][T12474] ? clear_bhb_loop+0x40/0x90 [ 945.683303][T12474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.683320][T12474] RIP: 0033:0x7f0177bae019 [ 945.683336][T12474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.683349][T12474] RSP: 002b:00007f0175e06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 945.683367][T12474] RAX: ffffffffffffffda RBX: 00007f0177e35fa0 RCX: 00007f0177bae019 [ 945.683379][T12474] RDX: 0000000000000001 RSI: 0000200000019280 RDI: 0000000000000003 [ 945.683389][T12474] RBP: 00007f0175e06090 R08: 0000000000000000 R09: 0000000000000000 [ 945.683399][T12474] R10: 00000000000000a3 R11: 0000000000000246 R12: 0000000000000001 [ 945.683422][T12474] R13: 00007f0177e36038 R14: 00007f0177e35fa0 R15: 00007ffcfe6b9cd8 [ 945.683466][T12474] [ 947.795252][ T59] Bluetooth: hci0: command tx timeout [ 947.795665][ T59] Bluetooth: hci1: command tx timeout [ 948.668022][T12315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.754168][ T8184] Bluetooth: hci1: command tx timeout [ 950.754206][ T8184] Bluetooth: hci0: command tx timeout [ 950.845672][T12315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.035996][T12315] team0: Port device team_slave_0 added [ 951.045991][T12315] team0: Port device team_slave_1 added [ 951.119888][ T7737] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 951.165149][T12315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.165167][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.165196][T12315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.282575][T12315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.291264][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.291290][T12315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.314792][ T7737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.314938][ T7737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 951.314994][ T7737] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 951.325225][ T7737] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 951.325318][ T7737] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 951.325375][ T7737] usb 5-1: Manufacturer: syz [ 951.490164][ T7737] usb 5-1: config 0 descriptor?? [ 951.557478][T12315] hsr_slave_0: entered promiscuous mode [ 951.558744][T12315] hsr_slave_1: entered promiscuous mode [ 951.559570][T12315] debugfs: 'hsr0' already exists in 'hsr' [ 951.559591][T12315] Cannot create hsr debugfs directory [ 951.742169][ T7737] usb 5-1: USB disconnect, device number 14 [ 954.257659][ T59] Bluetooth: hci0: command tx timeout [ 955.517147][ T66] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.315736][T12538] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 956.316841][T12538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 956.319211][T12540] vhci_hcd: connection closed [ 956.367599][T12538] vhci_hcd vhci_hcd.0: Device attached [ 956.449654][ T59] Bluetooth: hci0: command tx timeout [ 956.481200][ T7428] vhci_hcd vhci_hcd.6: stop threads [ 956.492041][ T7428] vhci_hcd vhci_hcd.6: release socket [ 956.703986][ T7428] vhci_hcd vhci_hcd.6: disconnect device [ 959.810734][T12556] netlink: 'syz.6.805': attribute type 15 has an invalid length. [ 959.810758][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz.6.805'. [ 960.636933][ T66] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.253129][ T66] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.168098][ T66] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.227880][T12450] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.228002][T12450] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.228209][T12450] bridge_slave_0: entered allmulticast mode [ 964.262439][T12450] bridge_slave_0: entered promiscuous mode [ 964.324970][T12586] netlink: 200 bytes leftover after parsing attributes in process `syz.6.808'. [ 964.468772][T12450] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.468969][T12450] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.469154][T12450] bridge_slave_1: entered allmulticast mode [ 964.472568][T12450] bridge_slave_1: entered promiscuous mode [ 964.696895][T12450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.721522][T12450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.859584][T12450] team0: Port device team_slave_0 added [ 968.972779][T12450] team0: Port device team_slave_1 added [ 970.037490][T12450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.037504][T12450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.037526][T12450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.156285][T12450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.156297][T12450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.159889][T12450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.226930][T12467] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.227061][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.227243][T12467] bridge_slave_0: entered allmulticast mode [ 971.262093][T12467] bridge_slave_0: entered promiscuous mode [ 971.542051][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.542186][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.542370][T12467] bridge_slave_1: entered allmulticast mode [ 971.546590][T12467] bridge_slave_1: entered promiscuous mode [ 971.669599][T12450] hsr_slave_0: entered promiscuous mode [ 971.676775][T12450] hsr_slave_1: entered promiscuous mode [ 971.687878][T12450] debugfs: 'hsr0' already exists in 'hsr' [ 971.687957][T12450] Cannot create hsr debugfs directory [ 971.692635][T11227] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 971.880410][T11227] usb 7-1: Using ep0 maxpacket: 8 [ 971.883883][T11227] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.883938][T11227] usb 7-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 971.883953][T11227] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 971.883971][T11227] usb 7-1: config 0 interface 0 has no altsetting 0 [ 971.886246][T11227] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 971.886278][T11227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.886292][T11227] usb 7-1: Product: syz [ 971.886301][T11227] usb 7-1: Manufacturer: syz [ 971.886311][T11227] usb 7-1: SerialNumber: syz [ 971.958634][T11227] usb 7-1: config 0 descriptor?? [ 972.018985][T11227] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 972.146302][T12467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.303450][T11227] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 972.320649][T11227] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 972.347076][T12467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.350700][T12315] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 972.369196][T11227] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 972.416116][T12315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.531681][ T7846] usb 7-1: USB disconnect, device number 21 [ 973.398103][ T8184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 973.427064][ T8184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 973.459385][ T8184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 973.472642][ T8184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 973.477064][ T8184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 974.100035][T12638] netlink: 56 bytes leftover after parsing attributes in process `syz.6.815'. [ 974.100278][T12638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.815'. [ 974.192766][ T8184] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 975.183069][T12645] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 975.337002][T12467] team0: Port device team_slave_0 added [ 975.419403][T12467] team0: Port device team_slave_1 added [ 975.960321][T12650] FAULT_INJECTION: forcing a failure. [ 975.960321][T12650] name failslab, interval 1, probability 0, space 0, times 0 [ 975.960348][T12650] CPU: 1 UID: 0 PID: 12650 Comm: syz.6.818 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 975.960366][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 975.960375][T12650] Call Trace: [ 975.960381][T12650] [ 975.960388][T12650] dump_stack_lvl+0xe8/0x150 [ 975.960417][T12650] should_fail_ex+0x467/0x600 [ 975.960458][T12650] should_failslab+0xa8/0x100 [ 975.960479][T12650] kmem_cache_alloc_noprof+0xa4/0x650 [ 975.960514][T12650] ? fuse_get_req+0x8ee/0xd40 [ 975.960605][T12650] ? fuse_get_req+0x8ee/0xd40 [ 975.960654][T12650] fuse_get_req+0x8ee/0xd40 [ 975.960717][T12650] ? __pfx_fuse_get_req+0x10/0x10 [ 975.960753][T12650] ? __pfx_autoremove_wake_function+0x10/0x10 [ 975.960819][T12650] ? __kernel_text_address+0xd/0x30 [ 975.960838][T12650] ? stack_depot_save_flags+0x28b/0x800 [ 975.960863][T12650] ? lock_acquire+0x106/0x350 [ 975.960883][T12650] fuse_chan_send+0x2cf/0x1ad0 [ 975.960908][T12650] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 975.960931][T12650] ? lockdep_hardirqs_on+0x7a/0x110 [ 975.960952][T12650] ? from_kgid+0x1c6/0x660 [ 975.961019][T12650] ? __pfx_fuse_chan_send+0x10/0x10 [ 975.961040][T12650] ? __pfx_from_kgid+0x10/0x10 [ 975.961066][T12650] ? kasan_save_track+0x4f/0x80 [ 975.961081][T12650] ? kasan_save_track+0x3e/0x80 [ 975.961095][T12650] ? kasan_save_free_info+0x40/0x50 [ 975.961117][T12650] ? __kasan_slab_free+0x5c/0x80 [ 975.961133][T12650] ? pid_nr_ns+0xcb/0x140 [ 975.961159][T12650] ? fuse_req_prep+0x5cc/0x9b0 [ 975.961205][T12650] ? __fuse_simple_request+0x7a/0xb0 [ 975.961231][T12650] fuse_update_get_attr+0x923/0x1300 [ 975.961257][T12650] ? __pfx_fuse_update_get_attr+0x10/0x10 [ 975.961289][T12650] ? tomoyo_path_perm+0x251/0x560 [ 975.961334][T12650] ? smack_inode_getattr+0x1ca/0x240 [ 975.961364][T12650] ? fuse_getattr+0x306/0x610 [ 975.961386][T12650] vfs_getattr_nosec+0x2e1/0x430 [ 975.961416][T12650] vfs_statx_path+0x2b/0x230 [ 975.961432][T12650] ? vfs_statx+0x107/0x200 [ 975.961458][T12650] vfs_statx+0x12e/0x200 [ 975.961484][T12650] ? __pfx_vfs_statx+0x10/0x10 [ 975.961516][T12650] __se_sys_statx+0x1e9/0x2a0 [ 975.961531][T12650] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 975.961557][T12650] ? __pfx___se_sys_statx+0x10/0x10 [ 975.961588][T12650] ? __pfx_ksys_write+0x10/0x10 [ 975.961625][T12650] ? __x64_sys_statx+0x20/0xc0 [ 975.961640][T12650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.961669][T12650] do_syscall_64+0x174/0x580 [ 975.961688][T12650] ? trace_irq_disable+0x3b/0x140 [ 975.961702][T12650] ? clear_bhb_loop+0x40/0x90 [ 975.961728][T12650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.961742][T12650] RIP: 0033:0x7f749356e019 [ 975.961756][T12650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.961769][T12650] RSP: 002b:00007f74917c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 975.961784][T12650] RAX: ffffffffffffffda RBX: 00007f74937f5fa0 RCX: 00007f749356e019 [ 975.961795][T12650] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 975.961805][T12650] RBP: 00007f74917c6090 R08: 0000000000000000 R09: 0000000000000000 [ 975.961814][T12650] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 975.961823][T12650] R13: 00007f74937f6038 R14: 00007f74937f5fa0 R15: 00007ffeb119a788 [ 975.961846][T12650] [ 976.113925][ T8184] Bluetooth: hci3: command tx timeout [ 976.460480][T12467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.460493][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.460513][T12467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.961009][T12467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.961027][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.961057][T12467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.457551][ T8184] Bluetooth: hci3: command tx timeout [ 980.708588][ T8184] Bluetooth: hci3: command tx timeout [ 981.228168][T12467] hsr_slave_0: entered promiscuous mode [ 981.233221][T12467] hsr_slave_1: entered promiscuous mode [ 981.236178][T12467] debugfs: 'hsr0' already exists in 'hsr' [ 981.236238][T12467] Cannot create hsr debugfs directory [ 982.957903][ T8184] Bluetooth: hci3: command tx timeout [ 983.076844][T12681] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 984.272857][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 984.582416][ T66] bridge_slave_1: left allmulticast mode [ 984.582444][ T66] bridge_slave_1: left promiscuous mode [ 984.582679][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.816011][ T66] bridge_slave_0: left allmulticast mode [ 984.816036][ T66] bridge_slave_0: left promiscuous mode [ 984.816259][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.421401][ T66] bridge_slave_1: left allmulticast mode [ 985.421439][ T66] bridge_slave_1: left promiscuous mode [ 985.421704][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.591294][ T66] bridge_slave_0: left allmulticast mode [ 985.591332][ T66] bridge_slave_0: left promiscuous mode [ 985.591574][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.070697][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.144367][ T66] bond_slave_0: left promiscuous mode [ 989.212977][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.251224][ T66] bond_slave_1: left promiscuous mode [ 989.252231][ T66] bond0 (unregistering): Released all slaves [ 989.837249][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.987679][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.074036][ T66] bond0 (unregistering): Released all slaves [ 991.236439][ T66] IPVS: stopping backup sync thread 11029 ... [ 994.065401][T12630] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.065629][T12630] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.065877][T12630] bridge_slave_0: entered allmulticast mode [ 994.096894][T12630] bridge_slave_0: entered promiscuous mode [ 994.135926][T12630] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.136245][T12630] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.136760][T12630] bridge_slave_1: entered allmulticast mode [ 994.168708][T12630] bridge_slave_1: entered promiscuous mode [ 998.027785][T12630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.166111][T12630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.212471][ T66] hsr_slave_0: left promiscuous mode [ 1000.256488][ T66] hsr_slave_1: left promiscuous mode [ 1000.257388][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.257408][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.303713][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.303743][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.528075][ T66] hsr_slave_0: left promiscuous mode [ 1000.570022][ T66] hsr_slave_1: left promiscuous mode [ 1000.570994][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.633743][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.734908][ T66] veth1_macvtap: left promiscuous mode [ 1000.736147][ T66] veth0_macvtap: left promiscuous mode [ 1000.736367][ T66] veth1_vlan: left promiscuous mode [ 1000.736540][ T66] veth0_vlan: left promiscuous mode [ 1001.389297][T12749] input: syz0 as /devices/virtual/input/input40 [ 1001.444439][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.833'. [ 1002.163852][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1002.206735][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1004.450754][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1004.513494][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1004.770244][T12630] team0: Port device team_slave_0 added [ 1004.831996][T12630] team0: Port device team_slave_1 added [ 1004.902684][T12630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.902703][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.902735][T12630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.905533][T12630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.905548][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.905578][T12630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.135823][T12630] hsr_slave_0: entered promiscuous mode [ 1005.138283][T12630] hsr_slave_1: entered promiscuous mode [ 1005.139215][T12630] debugfs: 'hsr0' already exists in 'hsr' [ 1005.139239][T12630] Cannot create hsr debugfs directory [ 1005.818134][T12763] fuse: Unknown parameter '¿}'Õð‹e¾)å†Þ(YÕƒ;–z2hŠµ– “i^r™©þæÎHSBçÏqF“/ü¶Þ%%m­ŸŸV ƒo01:u_ÕÃÝx" [ 1005.818134][T12763] vþaU‘lƒ¯Ë“wÛÞ•ª;ã^ [ 1005.818134][T12763] °@h´Uþmàj®n1Ðÿh‹ìßlàS [ 1005.818134][T12763] ©Š}RÜ^L¯z·¯¨ùÄeñ¨ú¦º/ÎTÚûføA¢!kLŒÏé0x0000000000000003' [ 1006.202097][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1006.265403][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1006.272221][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1006.291865][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1006.292586][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1008.664118][ T8184] Bluetooth: hci4: command tx timeout [ 1008.741774][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1008.765775][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1008.786418][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1008.790629][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1008.801800][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1009.591095][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1009.591161][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1010.951351][ T59] Bluetooth: hci4: command tx timeout [ 1012.111928][ T59] Bluetooth: hci6: command tx timeout [ 1012.756221][T12803] input: syz0 as /devices/virtual/input/input41 [ 1012.946202][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.843'. [ 1013.289657][ T59] Bluetooth: hci4: command tx timeout [ 1014.326565][ T59] Bluetooth: hci6: command tx timeout [ 1015.374686][T12826] trusted_key: syz.6.846 sent an empty control message without MSG_MORE. [ 1015.540863][ T8184] Bluetooth: hci4: command tx timeout [ 1015.779811][ T6101] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1015.940755][ T6101] usb 7-1: Using ep0 maxpacket: 16 [ 1015.943114][ T6101] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.943160][ T6101] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1015.943185][ T6101] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.075783][ T6101] usb 7-1: config 0 descriptor?? [ 1016.246066][ T6101] rc_core: IR keymap rc-xbox-dvd not found [ 1016.246085][ T6101] Registered IR keymap rc-empty [ 1016.273176][ T6101] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1016.304071][ T6101] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input42 [ 1016.304373][ T6101] xbox_remote 7-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 1016.441978][ T6101] input: failed to attach handler kbd to device input42, error: -5 [ 1016.447506][ T4950] xbox_remote 7-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 1016.538009][T12088] xbox_remote 7-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 1016.579433][ T8184] Bluetooth: hci6: command tx timeout [ 1016.582078][ T4950] xbox_remote 7-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 1016.678724][ T4950] xbox_remote 7-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 1016.829240][T12826] warning: `syz.6.846' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1016.870336][ T6101] usb 7-1: USB disconnect, device number 22 [ 1019.779766][ T8184] Bluetooth: hci6: command tx timeout [ 1020.350939][T12782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.351050][T12782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.351214][T12782] bridge_slave_0: entered allmulticast mode [ 1020.358077][T12782] bridge_slave_0: entered promiscuous mode [ 1020.411448][T12782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.411577][T12782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.411769][T12782] bridge_slave_1: entered allmulticast mode [ 1020.414124][T12782] bridge_slave_1: entered promiscuous mode [ 1020.748404][T12782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.906239][T12782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.906640][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.906734][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.906869][T12765] bridge_slave_0: entered allmulticast mode [ 1020.910949][T12765] bridge_slave_0: entered promiscuous mode [ 1021.217450][ T66] bridge_slave_1: left allmulticast mode [ 1021.217487][ T66] bridge_slave_1: left promiscuous mode [ 1021.217767][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.437078][ T66] bridge_slave_0: left allmulticast mode [ 1021.437116][ T66] bridge_slave_0: left promiscuous mode [ 1021.437398][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.763735][ T66] bridge_slave_1: left allmulticast mode [ 1021.763770][ T66] bridge_slave_1: left promiscuous mode [ 1021.764003][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.942816][ T66] bridge_slave_0: left allmulticast mode [ 1021.942852][ T66] bridge_slave_0: left promiscuous mode [ 1021.943105][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.210029][ T37] audit: type=1326 audit(1785822578.860:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12888 comm="syz.4.852" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0177bae019 code=0x0 [ 1022.891300][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.006831][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.095680][ T66] bond0 (unregistering): Released all slaves [ 1025.401846][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.572631][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.671670][ T66] bond0 (unregistering): Released all slaves [ 1025.748680][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.748818][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.749054][T12765] bridge_slave_1: entered allmulticast mode [ 1025.751730][T12765] bridge_slave_1: entered promiscuous mode [ 1026.323023][T12907] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1026.355262][T12782] team0: Port device team_slave_0 added [ 1026.499824][T12782] team0: Port device team_slave_1 added [ 1026.669858][T12765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.706364][T12765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.728094][T12782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.728116][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.728138][T12782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.787471][T12782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.787486][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.787508][T12782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.885979][T12765] team0: Port device team_slave_0 added [ 1027.130884][ T66] hsr_slave_0: left promiscuous mode [ 1027.173424][ T66] hsr_slave_1: left promiscuous mode [ 1027.174302][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.197754][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.390525][ T66] hsr_slave_0: left promiscuous mode [ 1028.988151][ T66] hsr_slave_1: left promiscuous mode [ 1028.989170][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.043943][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.581146][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1029.818509][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1030.792414][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1030.845725][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1031.132985][T12765] team0: Port device team_slave_1 added [ 1031.358383][T12927] binder: 12925:12927 ioctl c01c5868 0 returned -22 [ 1031.577874][T12928] ufs: You didn't specify the type of your ufs filesystem [ 1031.577874][T12928] [ 1031.577874][T12928] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1031.577874][T12928] [ 1031.577874][T12928] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1031.578106][T12928] ufs: ufstype=old is supported read-only [ 1035.184634][T12630] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1035.269374][T12630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1035.288563][T12782] hsr_slave_0: entered promiscuous mode [ 1035.289735][T12782] hsr_slave_1: entered promiscuous mode [ 1035.290644][T12782] debugfs: 'hsr0' already exists in 'hsr' [ 1035.290667][T12782] Cannot create hsr debugfs directory [ 1035.312025][T12765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.312069][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.312142][T12765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.461663][T12630] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1035.500877][T12630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.512420][T12765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.512432][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.512451][T12765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.513207][T12630] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1035.583299][T12630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.602516][T12630] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1035.787042][T12630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1035.926460][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1036.216157][T12765] hsr_slave_0: entered promiscuous mode [ 1036.229770][T12765] hsr_slave_1: entered promiscuous mode [ 1036.245201][T12765] debugfs: 'hsr0' already exists in 'hsr' [ 1036.245226][T12765] Cannot create hsr debugfs directory [ 1036.887418][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.866'. [ 1036.887445][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.866'. [ 1036.954434][ T59] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1037.290914][T12959] program syz.4.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1037.551691][ T5617] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1037.731788][ T5617] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1037.731821][ T5617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1037.731850][ T5617] usb 5-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 1037.731871][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.777578][ T5617] usb 5-1: config 0 descriptor?? [ 1038.001993][T12969] program syz.4.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1038.005930][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.029877][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.055799][ T5617] usbhid 5-1:0.0: can't add hid device: -71 [ 1038.055914][ T5617] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1038.115959][T12630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.198986][ T5617] usb 5-1: USB disconnect, device number 15 [ 1038.476931][T12630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.534207][T10492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.534364][T10492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.598147][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.612272][ T7428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.860754][ T66] bridge_slave_1: left allmulticast mode [ 1038.860787][ T66] bridge_slave_1: left promiscuous mode [ 1038.861012][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.048670][ T66] bridge_slave_0: left allmulticast mode [ 1039.048704][ T66] bridge_slave_0: left promiscuous mode [ 1039.049351][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.281014][ T8184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1041.315980][ T8184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1041.318189][ T8184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1041.321180][ T8184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1041.324956][ T8184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.471806][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.636266][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.950264][ T66] bond0 (unregistering): Released all slaves [ 1042.626663][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1045.119515][ T8184] Bluetooth: hci0: command tx timeout [ 1045.327373][ T66] hsr_slave_0: left promiscuous mode [ 1045.381469][ T66] hsr_slave_1: left promiscuous mode [ 1045.382362][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.436778][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.721760][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1047.354310][ T8184] Bluetooth: hci0: command tx timeout [ 1048.008206][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1049.220012][T12782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1049.273981][T12782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.393378][T12782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1049.462962][T12782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.538169][T12782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1049.595106][ T8184] Bluetooth: hci0: command tx timeout [ 1049.802673][T12782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1051.223655][T12782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1051.261117][T12782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1051.849723][ T8184] Bluetooth: hci0: command tx timeout [ 1051.940495][T12765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1052.020853][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1052.049887][T12765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1052.132406][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1052.193730][T12765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1052.235239][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1052.270155][T12765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1052.394972][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1055.103903][ T5260] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1055.355564][T12782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.745499][T12782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.832748][T10490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.849695][T10490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.985165][ T9957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.985423][ T9957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.833519][T13110] program syz.6.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.891302][T12994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.891437][T12994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.891606][T12994] bridge_slave_0: entered allmulticast mode [ 1056.893917][T12994] bridge_slave_0: entered promiscuous mode [ 1056.933813][T12994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.933931][T12994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.934124][T12994] bridge_slave_1: entered allmulticast mode [ 1056.963709][T12994] bridge_slave_1: entered promiscuous mode [ 1056.971300][T12765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.310564][T12994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.339498][T12994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.550261][T12994] team0: Port device team_slave_0 added [ 1057.584469][T12994] team0: Port device team_slave_1 added [ 1057.642585][T12765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.694154][T12994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.694172][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.694200][T12994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.752921][T12994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.752935][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.752955][T12994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.764525][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.764655][ T7008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.868769][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.869001][ T7008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.232601][T12994] hsr_slave_0: entered promiscuous mode [ 1058.235673][T12994] hsr_slave_1: entered promiscuous mode [ 1058.240627][T12994] debugfs: 'hsr0' already exists in 'hsr' [ 1058.240693][T12994] Cannot create hsr debugfs directory [ 1058.738907][ T66] bridge_slave_1: left allmulticast mode [ 1058.738934][ T66] bridge_slave_1: left promiscuous mode [ 1058.739133][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.879233][ T66] bridge_slave_0: left allmulticast mode [ 1058.879259][ T66] bridge_slave_0: left promiscuous mode [ 1058.879428][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.900091][ T6101] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1059.094723][ T6101] usb 7-1: config 0 has no interfaces? [ 1059.114465][ T6101] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1059.114498][ T6101] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1059.114520][ T6101] usb 7-1: Product: syz [ 1059.114537][ T6101] usb 7-1: Manufacturer: syz [ 1059.114548][ T6101] usb 7-1: SerialNumber: syz [ 1059.135937][ T6101] usb 7-1: config 0 descriptor?? [ 1059.842804][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.929173][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.995496][ T66] bond0 (unregistering): Released all slaves [ 1060.516205][ T66] hsr_slave_0: left promiscuous mode [ 1060.535570][ T66] hsr_slave_1: left promiscuous mode [ 1060.536326][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.590053][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.034266][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1061.089106][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1061.316870][T12782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.670993][T12782] veth0_vlan: entered promiscuous mode [ 1061.718846][T12782] veth1_vlan: entered promiscuous mode [ 1061.953338][ T5617] usb 7-1: USB disconnect, device number 23 [ 1062.112445][T12782] veth0_macvtap: entered promiscuous mode [ 1062.144130][T12782] veth1_macvtap: entered promiscuous mode [ 1064.129881][T12782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.174382][T12782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.024801][T12765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.211077][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.211645][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.212361][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.569819][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.569857][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.949250][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.949286][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.214612][T12765] veth0_vlan: entered promiscuous mode [ 1066.276766][T12994] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1066.552938][T12994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1066.555019][T12765] veth1_vlan: entered promiscuous mode [ 1066.570451][T12994] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1068.609890][T12994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1068.623248][T12994] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1068.707273][T12994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1068.725936][T12994] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1068.759300][T12994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.065400][T12765] veth0_macvtap: entered promiscuous mode [ 1069.104172][T12765] veth1_macvtap: entered promiscuous mode [ 1069.226394][T12765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.285758][T12765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.003407][T12994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.396094][ T3402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.396114][ T3402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.450687][T12994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.475073][T10490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.475291][T10490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.525392][ T9957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.525498][ T9957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.626593][ T9957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.626614][ T9957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.730063][ T3402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.731482][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.731662][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.250428][ T9957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.250608][ T9957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.670788][ T5331] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1071.845985][ T5331] usb 7-1: config 0 has no interfaces? [ 1071.850327][ T5331] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1071.850358][ T5331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1071.850380][ T5331] usb 7-1: Product: syz [ 1071.850395][ T5331] usb 7-1: Manufacturer: syz [ 1071.850410][ T5331] usb 7-1: SerialNumber: syz [ 1071.915054][ T5331] usb 7-1: config 0 descriptor?? [ 1073.842773][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1073.895985][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1073.904786][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1073.918894][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1073.928901][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1075.474641][ T5331] usb 7-1: USB disconnect, device number 24 [ 1075.620045][ T7008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.772533][T12994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.797356][ T5727] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1075.959786][ T5331] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1075.959968][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 1075.983511][ T5727] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 1075.983540][ T5727] usb 3-1: config 251 has no interface number 0 [ 1075.983589][ T5727] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1075.983616][ T5727] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1075.983640][ T5727] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1075.983669][ T5727] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1075.983697][ T5727] usb 3-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping [ 1075.983721][ T5727] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.983749][ T5727] usb 3-1: config 251 interface 202 has no altsetting 0 [ 1075.988964][ T5727] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1075.988995][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.989026][ T5727] usb 3-1: Product: syz [ 1075.989040][ T5727] usb 3-1: Manufacturer: syz [ 1075.989073][ T5727] usb 3-1: SerialNumber: syz [ 1076.036673][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1076.036834][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1076.148630][T13265] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1076.224036][ T5331] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1076.224068][ T5331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.224147][ T5331] usb 7-1: Product: syz [ 1076.224162][ T5331] usb 7-1: Manufacturer: syz [ 1076.224177][ T5331] usb 7-1: SerialNumber: syz [ 1076.285708][ T59] Bluetooth: hci1: command tx timeout [ 1076.287869][ T5331] usb 7-1: config 0 descriptor?? [ 1076.377589][ T5331] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1076.456195][ T5727] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1076.537766][ T5727] usb 3-1: USB disconnect, device number 9 [ 1076.580764][ T7008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.108485][ T5331] gspca_sunplus: reg_w_riv err -110 [ 1077.108603][ T5331] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1078.247551][ T7008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.540494][ T59] Bluetooth: hci1: command tx timeout [ 1078.803302][ T7008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.022994][ T36] usb 7-1: USB disconnect, device number 25 [ 1079.110498][T12994] veth0_vlan: entered promiscuous mode [ 1079.218755][T12994] veth1_vlan: entered promiscuous mode [ 1081.235451][ T59] Bluetooth: hci1: command tx timeout [ 1083.479942][ T59] Bluetooth: hci1: command tx timeout [ 1083.950238][T12994] veth0_macvtap: entered promiscuous mode [ 1084.207440][T12994] veth1_macvtap: entered promiscuous mode [ 1084.555114][ T7008] bridge_slave_1: left allmulticast mode [ 1084.555150][ T7008] bridge_slave_1: left promiscuous mode [ 1084.558468][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.724599][ T7008] bridge_slave_0: left allmulticast mode [ 1084.724636][ T7008] bridge_slave_0: left promiscuous mode [ 1084.724909][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.197695][ T7008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.425416][ T7008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.460569][ T7008] bond0 (unregistering): Released all slaves [ 1090.437941][T13234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.444671][T13234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.445191][T13234] bridge_slave_0: entered allmulticast mode [ 1090.451676][T13234] bridge_slave_0: entered promiscuous mode [ 1090.484256][T12994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.485570][T13234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.485698][T13234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.486069][T13234] bridge_slave_1: entered allmulticast mode [ 1090.493131][T13234] bridge_slave_1: entered promiscuous mode [ 1090.750726][T12994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.172268][T13413] netlink: 116 bytes leftover after parsing attributes in process `syz.6.917'. [ 1091.197617][T13234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.248805][T13234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.154253][T13234] team0: Port device team_slave_0 added [ 1096.183875][T13234] team0: Port device team_slave_1 added [ 1096.695969][T13234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.695984][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.696004][T13234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.953770][ T7008] hsr_slave_0: left promiscuous mode [ 1097.061198][ T7008] hsr_slave_1: left promiscuous mode [ 1097.070317][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.070348][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.123620][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.123649][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.388653][ T7008] veth1_macvtap: left promiscuous mode [ 1097.388784][ T7008] veth0_macvtap: left promiscuous mode [ 1097.389058][ T7008] veth1_vlan: left promiscuous mode [ 1097.389270][ T7008] veth0_vlan: left promiscuous mode [ 1098.461262][ T7008] team0 (unregistering): Port device team_slave_1 removed [ 1098.523240][ T7008] team0 (unregistering): Port device team_slave_0 removed [ 1098.742558][T13234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.742575][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.742602][T13234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.813132][T13459] netlink: 25 bytes leftover after parsing attributes in process `syz.2.927'. [ 1099.203840][T13234] hsr_slave_0: entered promiscuous mode [ 1099.209756][T13234] hsr_slave_1: entered promiscuous mode [ 1099.214876][T13234] debugfs: 'hsr0' already exists in 'hsr' [ 1099.214976][T13234] Cannot create hsr debugfs directory [ 1099.318393][ T9957] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.536476][ T7428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.536496][ T7428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.803208][T13492] FAULT_INJECTION: forcing a failure. [ 1100.803208][T13492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.803244][T13492] CPU: 0 UID: 0 PID: 13492 Comm: syz.6.933 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1100.803272][T13492] Tainted: [L]=SOFTLOCKUP [ 1100.803279][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.803292][T13492] Call Trace: [ 1100.803299][T13492] [ 1100.803308][T13492] dump_stack_lvl+0xe8/0x150 [ 1100.803344][T13492] should_fail_ex+0x467/0x600 [ 1100.803384][T13492] _copy_from_user+0x2d/0xb0 [ 1100.803411][T13492] ___sys_sendmsg+0x1c6/0x360 [ 1100.803438][T13492] ? __lock_acquire+0x683/0x2ce0 [ 1100.803465][T13492] ? __pfx____sys_sendmsg+0x10/0x10 [ 1100.803524][T13492] ? __fget_files+0x2a/0x420 [ 1100.803547][T13492] ? __fget_files+0x3a8/0x420 [ 1100.803578][T13492] __x64_sys_sendmsg+0x1b7/0x290 [ 1100.803609][T13492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1100.803652][T13492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.803675][T13492] do_syscall_64+0x174/0x580 [ 1100.803703][T13492] ? trace_irq_disable+0x3b/0x140 [ 1100.803724][T13492] ? clear_bhb_loop+0x40/0x90 [ 1100.803752][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.803772][T13492] RIP: 0033:0x7f749356e019 [ 1100.803792][T13492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.803809][T13492] RSP: 002b:00007f74917c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.803830][T13492] RAX: ffffffffffffffda RBX: 00007f74937f5fa0 RCX: 00007f749356e019 [ 1100.803845][T13492] RDX: 0000000000008010 RSI: 0000200000000240 RDI: 0000000000000003 [ 1100.803858][T13492] RBP: 00007f74917c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.803871][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.803882][T13492] R13: 00007f74937f6038 R14: 00007f74937f5fa0 R15: 00007ffeb119a788 [ 1100.803913][T13492] [ 1101.208535][T13498] overlayfs: missing 'lowerdir' [ 1101.353448][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.353469][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.555581][T10492] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.555632][T10492] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.555673][T10492] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.834357][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 1103.223348][T13526] FAULT_INJECTION: forcing a failure. [ 1103.223348][T13526] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.223383][T13526] CPU: 1 UID: 0 PID: 13526 Comm: syz.2.938 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1103.223410][T13526] Tainted: [L]=SOFTLOCKUP [ 1103.223417][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1103.223429][T13526] Call Trace: [ 1103.223436][T13526] [ 1103.223444][T13526] dump_stack_lvl+0xe8/0x150 [ 1103.223481][T13526] should_fail_ex+0x467/0x600 [ 1103.223516][T13526] should_failslab+0xa8/0x100 [ 1103.223542][T13526] kmem_cache_alloc_noprof+0xa4/0x650 [ 1103.223563][T13526] ? security_file_alloc+0x34/0x310 [ 1103.223584][T13526] ? security_file_alloc+0x34/0x310 [ 1103.223611][T13526] security_file_alloc+0x34/0x310 [ 1103.223635][T13526] init_file+0x96/0x2d0 [ 1103.223657][T13526] alloc_empty_file+0x74/0x1d0 [ 1103.223677][T13526] path_openat+0x8f/0x3850 [ 1103.223709][T13526] ? kasan_save_track+0x3e/0x80 [ 1103.223727][T13526] ? __kasan_slab_alloc+0x6c/0x80 [ 1103.223747][T13526] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1103.223764][T13526] ? do_getname+0x2e/0x250 [ 1103.223790][T13526] ? do_sys_openat2+0xcc/0x200 [ 1103.223808][T13526] ? __x64_sys_openat+0x138/0x170 [ 1103.223826][T13526] ? do_syscall_64+0x174/0x580 [ 1103.223851][T13526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.223890][T13526] do_file_open+0x23e/0x4a0 [ 1103.223913][T13526] ? lockdep_hardirqs_on+0x7a/0x110 [ 1103.223943][T13526] ? __pfx_do_file_open+0x10/0x10 [ 1103.223991][T13526] ? alloc_fd+0x654/0x6d0 [ 1103.224020][T13526] do_sys_openat2+0x115/0x200 [ 1103.224042][T13526] ? __pfx_do_sys_openat2+0x10/0x10 [ 1103.224063][T13526] ? exc_page_fault+0x6a/0xc0 [ 1103.224090][T13526] ? do_user_addr_fault+0xc4a/0x1340 [ 1103.224157][T13526] __x64_sys_openat+0x138/0x170 [ 1103.224179][T13526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.224200][T13526] do_syscall_64+0x174/0x580 [ 1103.224225][T13526] ? trace_irq_disable+0x3b/0x140 [ 1103.224260][T13526] ? clear_bhb_loop+0x40/0x90 [ 1103.224284][T13526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.224302][T13526] RIP: 0033:0x7f8239f7e84e [ 1103.224320][T13526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1103.224335][T13526] RSP: 002b:00007f8238213ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1103.224355][T13526] RAX: ffffffffffffffda RBX: 00007f82382166c0 RCX: 00007f8239f7e84e [ 1103.224369][T13526] RDX: 0000000000000002 RSI: 00007f823a054392 RDI: ffffffffffffff9c [ 1103.224381][T13526] RBP: 00007f8238216090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.224393][T13526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 1103.224405][T13526] R13: 0000200000000600 R14: 0000000000000003 R15: 00007ffeb77bdd98 [ 1103.224433][T13526] [ 1109.508903][T13580] 9p: Bad value for 'rfdno' [ 1113.553499][ T5613] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1113.714655][ T5613] usb 7-1: Using ep0 maxpacket: 8 [ 1113.718790][ T5613] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1113.718815][ T5613] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.718851][ T5613] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1113.718880][ T5613] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1113.718894][ T5613] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.829734][ T5613] usbtmc 7-1:16.0: bulk endpoints not found [ 1114.051601][ T7846] usb 7-1: USB disconnect, device number 26 [ 1114.158889][T13618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.226703][T13618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.472148][ T7846] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1114.630794][ T7846] usb 7-1: Using ep0 maxpacket: 8 [ 1114.634039][ T7846] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1114.634057][ T7846] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.634090][ T7846] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1114.634120][ T7846] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1114.634139][ T7846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.734842][ T7846] usbtmc 7-1:16.0: bulk endpoints not found [ 1115.093794][T13618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.140016][T13618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.568856][T11227] usb 7-1: USB disconnect, device number 27 [ 1117.475187][ T823] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1117.771553][ T823] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 1117.771573][ T823] usb 10-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.771586][ T823] usb 10-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1117.771599][ T823] usb 10-1: config 150 has no interface number 0 [ 1117.771620][ T823] usb 10-1: config 150 interface 204 has no altsetting 0 [ 1117.827256][ T823] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1117.827279][ T823] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.827295][ T823] usb 10-1: Product: syz [ 1117.827305][ T823] usb 10-1: Manufacturer: syz [ 1117.827317][ T823] usb 10-1: SerialNumber: syz [ 1118.049950][ T149] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.050386][ T149] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.050441][ T149] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.050481][ T149] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.151549][T13628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.152249][T13628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.251395][ T823] usb 10-1: USB disconnect, device number 5 [ 1119.454232][T13640] binder: 13637:13640 ioctl c01c5868 0 returned -22 [ 1120.752998][T13234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1120.800621][T13234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1120.805552][T13234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1120.921386][T13234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1120.944852][T13234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1121.026139][T13658] binder: BINDER_SET_CONTEXT_MGR already set [ 1121.026148][T13658] binder: 13655:13658 ioctl 4018620d 200000000100 returned -16 [ 1121.084000][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.970'. [ 1121.336127][T13234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1121.370911][T13657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.432563][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'. [ 1121.852419][T13657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.958111][T13234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1122.119217][T13234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1122.287788][T13675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.358208][T13684] netlink: 'syz.9.974': attribute type 210 has an invalid length. [ 1122.418607][T13234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.479500][T13234] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.504187][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.504344][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.538067][T10496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.540832][T10496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.307618][T13709] syz_tun: entered allmulticast mode [ 1125.641322][T13714] lo: entered allmulticast mode [ 1125.650355][T13711] lo: left allmulticast mode [ 1126.556570][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.982'. [ 1126.556601][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.982'. [ 1126.687818][T13709] syz_tun: left allmulticast mode [ 1127.136671][T13234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.285588][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 1127.862631][T13234] veth0_vlan: entered promiscuous mode [ 1127.884462][T13234] veth1_vlan: entered promiscuous mode [ 1127.933577][T13234] veth0_macvtap: entered promiscuous mode [ 1127.946493][T13234] veth1_macvtap: entered promiscuous mode [ 1127.980213][T13234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.004175][T13234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.686540][T10495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.065322][ T9955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.065368][ T9955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.076895][ T9955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.714518][T13763] input: syz0 as /devices/virtual/input/input43 [ 1129.862345][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.9.989'. [ 1130.145005][ T9957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.145025][ T9957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.513924][T10492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.513945][T10492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.370016][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.9.995'. [ 1142.049576][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1142.049644][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1144.288849][T13842] Bluetooth: hci6: command 0x0406 tx timeout [ 1145.759846][T13860] binder: 13850:13860 ioctl c01c5868 0 returned -22 [ 1148.355727][T11227] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1148.518238][T11227] usb 2-1: Using ep0 maxpacket: 32 [ 1148.520149][T11227] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1148.520177][T11227] usb 2-1: config 0 has no interface number 0 [ 1148.520236][T11227] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1148.520278][T11227] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1148.522802][T11227] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1148.522840][T11227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.522863][T11227] usb 2-1: Product: syz [ 1148.522879][T11227] usb 2-1: Manufacturer: syz [ 1148.522894][T11227] usb 2-1: SerialNumber: syz [ 1148.570740][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1148.663357][T11227] usb 2-1: config 0 descriptor?? [ 1148.692309][ T59] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 1148.703960][T13879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1148.944282][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1148.944315][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.944339][ T9] usb 3-1: Product: syz [ 1148.944425][ T9] usb 3-1: Manufacturer: syz [ 1148.944443][ T9] usb 3-1: SerialNumber: syz [ 1148.980601][ T9] usb 3-1: config 0 descriptor?? [ 1149.169504][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1149.824525][T11227] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1149.824551][T11227] cx231xx 2-1:0.1: Not found matching IAD interface [ 1150.123883][T11227] usb 2-1: USB disconnect, device number 2 [ 1150.410197][ T7846] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1150.841309][ T7846] usb 7-1: Using ep0 maxpacket: 8 [ 1150.858303][ T7846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.858358][ T7846] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1150.858396][ T7846] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1150.909040][ T7846] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1150.909074][ T7846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.909096][ T7846] usb 7-1: Product: syz [ 1150.909112][ T7846] usb 7-1: Manufacturer: syz [ 1150.909126][ T7846] usb 7-1: SerialNumber: syz [ 1150.959892][ T7846] usb 7-1: config 0 descriptor?? [ 1150.994626][ T7846] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1151.287667][ T7846] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 1151.288557][ T7846] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1151.320666][ T7846] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1151.361440][T13872] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 1151.361454][T13872] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1010'. [ 1151.525245][ T7846] usb 7-1: USB disconnect, device number 28 [ 1151.627261][ T9] gspca_stk1135: reg_w 0x200 err -110 [ 1151.628415][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1151.628426][ T9] gspca_stk1135: Sensor write failed [ 1151.628450][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1151.628457][ T9] gspca_stk1135: Sensor write failed [ 1151.628482][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1151.628489][ T9] gspca_stk1135: Sensor read failed [ 1151.628541][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1151.628548][ T9] gspca_stk1135: Sensor read failed [ 1151.628565][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 1151.628627][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1151.628634][ T9] gspca_stk1135: Sensor read failed [ 1151.628659][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1151.628666][ T9] gspca_stk1135: Sensor read failed [ 1151.628701][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1151.628708][ T9] gspca_stk1135: Sensor write failed [ 1151.628733][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1151.628739][ T9] gspca_stk1135: Sensor write failed [ 1151.628801][ T9] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 1151.969796][ T9] usb 3-1: USB disconnect, device number 10 [ 1154.749518][T13923] binder: 13920:13923 ioctl c01c5868 0 returned -22 [ 1160.281784][ T36] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1160.553539][ T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.553579][ T36] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1160.553595][ T36] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1160.561480][ T36] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1160.561500][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1160.561514][ T36] usb 7-1: Product: syz [ 1160.561524][ T36] usb 7-1: Manufacturer: syz [ 1160.561533][ T36] usb 7-1: SerialNumber: syz [ 1160.666181][ T36] usb 7-1: config 0 descriptor?? [ 1160.685612][ T36] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 1160.685700][ T36] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1160.686241][ T36] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1162.085634][ T37] audit: type=1326 audit(1785822708.473:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.085678][ T37] audit: type=1326 audit(1785822708.473:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.085708][ T37] audit: type=1326 audit(1785822708.492:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.085749][ T37] audit: type=1326 audit(1785822708.492:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.085779][ T37] audit: type=1326 audit(1785822708.492:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.085808][ T37] audit: type=1326 audit(1785822708.483:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.085854][ T37] audit: type=1326 audit(1785822708.501:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.086456][ T37] audit: type=1326 audit(1785822708.501:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.325151][ T37] audit: type=1326 audit(1785822708.501:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.325209][ T37] audit: type=1326 audit(1785822708.713:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13975 comm="syz.2.1031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8239fbe019 code=0x7ffc0000 [ 1162.480388][ T59] Bluetooth: hci6: unexpected event for opcode 0x1804 [ 1162.552083][ T31] usb 7-1: USB disconnect, device number 29 [ 1162.846078][T13984] binder: 13980:13984 ioctl c01c5868 0 returned -22 [ 1167.853117][ T31] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1168.017152][ T31] usb 10-1: Using ep0 maxpacket: 8 [ 1168.019891][ T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.019931][ T31] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1168.053620][ T31] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1168.053640][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.053654][ T31] usb 10-1: Product: syz [ 1168.053663][ T31] usb 10-1: Manufacturer: syz [ 1168.053673][ T31] usb 10-1: SerialNumber: syz [ 1168.102832][ T31] usb 10-1: config 0 descriptor?? [ 1168.111861][ T31] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found [ 1168.415409][ T31] snd_usb_toneport 10-1:0.0: cannot get proper max packet size [ 1168.415707][ T31] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected [ 1168.457312][ T31] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1169.773143][ T36] usb 10-1: USB disconnect, device number 6 [ 1172.844618][T14030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.292476][ T37] kauditd_printk_skb: 69 callbacks suppressed [ 1173.292494][ T37] audit: type=1326 audit(1785822718.850:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14033 comm="syz.9.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b9418e019 code=0x0 [ 1173.403323][T14041] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1045'. [ 1173.410384][T14041] netlink: 'syz.9.1045': attribute type 12 has an invalid length. [ 1173.410478][T14041] netlink: 'syz.9.1045': attribute type 29 has an invalid length. [ 1173.410510][T14041] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1045'. [ 1173.410571][T14041] netlink: 59 bytes leftover after parsing attributes in process `syz.9.1045'. [ 1173.548351][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1173.970584][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.970673][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.970741][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.970815][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.970887][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.979210][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.979534][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.979761][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.979887][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.989353][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1173.999916][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.011987][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.012376][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.024607][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.024873][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.029546][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.029846][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.030072][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.038193][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.038489][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.038765][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.067489][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.067852][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.083101][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.106479][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.106798][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.107069][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.107184][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.107332][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.129848][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.165072][T14052] binder: 14048:14052 ioctl c0306201 2000000003c0 returned -14 [ 1174.165436][T14052] binder: 14048:14052 ioctl c0306201 2000000003c0 returned -14 [ 1174.165732][T14052] binder: 14048:14052 ioctl c0306201 2000000003c0 returned -14 [ 1174.166050][T14052] binder: 14048:14052 ioctl c0306201 2000000003c0 returned -14 [ 1174.166325][T14052] binder: 14048:14052 ioctl c0306201 2000000003c0 returned -14 [ 1174.178145][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.178564][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.178878][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.179002][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.185287][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.189860][T14050] binder: 14048:14050 ioctl c0306201 200000000080 returned -14 [ 1174.195387][T14052] binder: 14048:14052 ioctl c0306201 2000000003c0 returned -14 [ 1176.637767][ T823] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 1177.183182][ T823] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1177.183205][ T823] usb 10-1: config 179 has no interface number 0 [ 1177.183239][ T823] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1177.183260][ T823] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1177.183278][ T823] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 12336, setting to 8 [ 1177.183298][ T823] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1177.183330][ T823] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1177.183348][ T823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.289555][T14056] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1177.349082][ T823] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1177.369148][ T823] xpad 10-1:179.65: probe with driver xpad failed with error -90 [ 1179.069510][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 1179.222166][ T7737] usb 10-1: USB disconnect, device number 7 [ 1180.389926][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1183.334207][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1061'. [ 1183.334481][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1061'. [ 1183.341666][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1061'. [ 1191.819814][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1192.874744][ T36] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1193.040092][ T36] usb 10-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 1193.040136][ T36] usb 10-1: too many endpoints for config 0 interface 0 altsetting 136: 136, using maximum allowed: 30 [ 1193.040177][ T36] usb 10-1: config 0 interface 0 altsetting 136 has 0 endpoint descriptors, different from the interface descriptor's value: 136 [ 1193.040207][ T36] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1193.044645][ T36] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1193.044674][ T36] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1193.044694][ T36] usb 10-1: Manufacturer: syz [ 1193.217748][ T36] usb 10-1: config 0 descriptor?? [ 1193.380078][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1193.546460][ T36] usb 10-1: USB disconnect, device number 8 [ 1200.240602][ T5727] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1200.413688][ T5727] usb 10-1: Using ep0 maxpacket: 32 [ 1200.416195][ T5727] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1200.416220][ T5727] usb 10-1: config 0 has no interface number 0 [ 1200.416264][ T5727] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1200.416286][ T5727] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1200.420017][ T5727] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1200.420045][ T5727] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.420075][ T5727] usb 10-1: Product: syz [ 1200.420089][ T5727] usb 10-1: Manufacturer: syz [ 1200.420104][ T5727] usb 10-1: SerialNumber: syz [ 1200.535435][ T5727] usb 10-1: config 0 descriptor?? [ 1201.143455][T14215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1201.513633][ T5727] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1201.513667][ T5727] cx231xx 10-1:0.1: Not found matching IAD interface [ 1201.527818][ T5727] usb 10-1: USB disconnect, device number 9 [ 1208.806442][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1208.806511][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.214011][T14267] binder: 14261:14267 ioctl c01c5868 0 returned -22 [ 1212.742195][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1214.885117][ T7737] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1214.926512][T14283] process 'syz.6.1095' launched './file0' with NULL argv: empty string added [ 1215.069323][ T7737] usb 2-1: Using ep0 maxpacket: 8 [ 1215.074267][ T7737] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 1215.074294][ T7737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.074313][ T7737] usb 2-1: config 0 has no interface number 0 [ 1215.074367][ T7737] usb 2-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1215.138465][ T7737] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1215.138507][ T7737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.138521][ T7737] usb 2-1: Product: syz [ 1215.138530][ T7737] usb 2-1: Manufacturer: syz [ 1215.138540][ T7737] usb 2-1: SerialNumber: syz [ 1215.180330][ T7737] usb 2-1: config 0 descriptor?? [ 1215.744010][T14297] syz.1.1093 uses obsolete (PF_INET,SOCK_PACKET) [ 1216.312803][ T7737] ath6kl: Failed to submit usb control message: -71 [ 1216.312839][ T7737] ath6kl: unable to send the bmi data to the device: -71 [ 1216.312855][ T7737] ath6kl: Unable to send get target info: -71 [ 1216.332754][ T7737] ath6kl: Failed to init ath6kl core: -71 [ 1216.380296][ T7737] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1216.413075][ T7737] usb 2-1: USB disconnect, device number 3 [ 1217.073612][T13842] Bluetooth: hci1: command 0x0406 tx timeout [ 1217.976301][T14311] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1091'. [ 1217.976396][T14311] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1091'. [ 1219.157906][T14324] syzkaller0: entered promiscuous mode [ 1219.157935][T14324] syzkaller0: entered allmulticast mode [ 1219.519303][T14336] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1096'. [ 1219.936156][T14350] mmap: syz.2.1108 (14350) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1220.262708][T14356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1110'. [ 1221.014465][ T5727] IPVS: starting estimator thread 0... [ 1221.300562][T14364] IPVS: using max 8 ests per chain, 19200 per kthread [ 1221.809562][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1221.857140][T14365] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 1223.820899][T14374] overlayfs: overlapping lowerdir path [ 1225.496204][T14359] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1235.792687][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1121'. [ 1236.809619][T14405] macsec1: entered promiscuous mode [ 1236.809765][T14405] dummy0: entered promiscuous mode [ 1236.922779][T14405] macsec1: entered allmulticast mode [ 1236.923132][T14405] dummy0: entered allmulticast mode [ 1237.693748][T14402] Bluetooth: MGMT ver 1.23 [ 1237.693777][T14402] Bluetooth: hci0: unsupported parameter 255 [ 1237.693789][T14402] Bluetooth: hci0: unsupported parameter 255 [ 1243.338461][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1245.354105][ T36] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1245.528132][ T36] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1245.528230][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.569111][ T36] usb 7-1: config 0 descriptor?? [ 1246.163437][ T36] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1247.075720][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.093954][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.128412][ T36] [drm:udl_init] *ERROR* Selecting channel failed [ 1247.586371][ T36] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1247.586410][ T36] [drm] Initialized udl on minor 2 [ 1247.765437][ T36] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1247.907990][ T36] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1248.048524][T14494] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1143'. [ 1251.303332][ T36] usb 7-1: USB disconnect, device number 30 [ 1251.362381][T14489] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1251.440776][ T31] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1251.599953][ T31] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1251.809905][T14479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.874798][T14479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.825876][T14506] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1148'. [ 1255.402085][ T37] audit: type=1107 audit(1785822794.580:84): pid=14532 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1256.461753][ T37] audit: type=1800 audit(1785822795.633:85): pid=14538 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1158" name="power" dev="configfs" ino=55206 res=0 errno=0 [ 1257.559623][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1257.768688][T10496] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.768740][T10496] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.768778][T10496] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.768816][T10496] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.332000][T14541] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1259.332042][T14541] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1259.332085][T14541] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1259.978634][T14550] tipc: Enabling of bearer rejected, failed to enable media [ 1260.601243][T14541] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1261.012464][T14541] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1262.122526][T14593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1171'. [ 1268.206152][ T8184] Bluetooth: hci6: unexpected event for opcode 0x0000 [ 1268.911851][T13842] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 1272.621533][T13842] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1272.621864][T13842] Bluetooth: hci6: Injecting HCI hardware error event [ 1272.624291][ T59] Bluetooth: hci6: hardware error 0x00 [ 1273.711270][T14737] input: syz0 as /devices/virtual/input/input48 [ 1273.840728][T14740] ntfs3(loop9): try to read out of volume at offset 0x0 [ 1275.140606][ T59] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1275.142659][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1275.142744][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1277.279227][T14774] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1284.305294][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1230'. [ 1284.461748][T14849] No source specified [ 1300.587896][T14977] overlayfs: overlapping lowerdir path [ 1301.163521][ T5613] ------------[ cut here ]------------ [ 1301.163535][ T5613] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1301.163559][ T5613] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:3/5613 [ 1301.163701][ T5613] Modules linked in: [ 1301.163727][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1301.163759][ T5613] Tainted: [L]=SOFTLOCKUP [ 1301.163766][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1301.163782][ T5613] Workqueue: events drm_fb_helper_damage_work [ 1301.163855][ T5613] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1301.163885][ T5613] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1301.163905][ T5613] RSP: 0018:ffffc90004dbf7e0 EFLAGS: 00010246 [ 1301.163925][ T5613] RAX: 1ffff11004b91800 RBX: 0000000000000000 RCX: 0000000000000000 [ 1301.163940][ T5613] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1301.163956][ T5613] RBP: ffffc90004dbf8c8 R08: 0000000000000000 R09: 0000000000000000 [ 1301.163970][ T5613] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1301.163987][ T5613] R13: ffff888025c8c000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1301.164003][ T5613] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 1301.164021][ T5613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1301.164036][ T5613] CR2: 00007f7493557180 CR3: 0000000057ed6000 CR4: 00000000003526f0 [ 1301.164055][ T5613] Call Trace: [ 1301.164064][ T5613] [ 1301.164078][ T5613] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1301.164119][ T5613] ? rt_spin_unlock+0x157/0x200 [ 1301.164162][ T5613] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1301.164200][ T5613] ? rt_spin_unlock+0x163/0x200 [ 1301.164227][ T5613] ? drm_vblank_get+0x147/0x280 [ 1301.164258][ T5613] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1301.164287][ T5613] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1301.164335][ T5613] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1301.164421][ T5613] ? process_scheduled_works+0xa20/0x14e0 [ 1301.164457][ T5613] ? rcu_is_watching+0x15/0xb0 [ 1301.164489][ T5613] ? process_scheduled_works+0xa20/0x14e0 [ 1301.164516][ T5613] process_scheduled_works+0xa8e/0x14e0 [ 1301.164577][ T5613] ? __pfx_process_scheduled_works+0x10/0x10 [ 1301.164612][ T5613] ? assign_work+0x3cf/0x5d0 [ 1301.164646][ T5613] worker_thread+0xa47/0xfb0 [ 1301.164707][ T5613] kthread+0x388/0x470 [ 1301.164773][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 1301.164799][ T5613] ? __pfx_kthread+0x10/0x10 [ 1301.164836][ T5613] ret_from_fork+0x514/0xb70 [ 1301.164897][ T5613] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.164933][ T5613] ? __switch_to+0xc89/0x1420 [ 1301.165003][ T5613] ? __pfx_kthread+0x10/0x10 [ 1301.165060][ T5613] ret_from_fork_asm+0x1a/0x30 [ 1301.165104][ T5613] [ 1301.165116][ T5613] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1301.165134][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1301.165165][ T5613] Tainted: [L]=SOFTLOCKUP [ 1301.165173][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1301.165187][ T5613] Workqueue: events drm_fb_helper_damage_work [ 1301.165216][ T5613] Call Trace: [ 1301.165224][ T5613] [ 1301.165233][ T5613] vpanic+0x56c/0xa60 [ 1301.165257][ T5613] ? __pfx__printk+0x10/0x10 [ 1301.165284][ T5613] ? __pfx_vpanic+0x10/0x10 [ 1301.165305][ T5613] ? is_bpf_text_address+0x292/0x2b0 [ 1301.165393][ T5613] ? is_bpf_text_address+0x26/0x2b0 [ 1301.165431][ T5613] panic+0xc5/0xd0 [ 1301.165452][ T5613] ? __pfx_panic+0x10/0x10 [ 1301.165486][ T5613] ? ret_from_fork_asm+0x1a/0x30 [ 1301.165516][ T5613] __warn+0x315/0x4c0 [ 1301.165537][ T5613] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1301.165568][ T5613] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1301.165596][ T5613] __report_bug+0x276/0x570 [ 1301.165681][ T5613] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1301.165713][ T5613] ? __pfx___report_bug+0x10/0x10 [ 1301.165756][ T5613] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1301.165787][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 1301.165818][ T5613] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1301.165852][ T5613] report_bug_entry+0x19a/0x290 [ 1301.165886][ T5613] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 1301.165913][ T5613] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 1301.165942][ T5613] handle_bug+0xce/0x200 [ 1301.165977][ T5613] exc_invalid_op+0x1a/0x50 [ 1301.166011][ T5613] asm_exc_invalid_op+0x1a/0x20 [ 1301.166034][ T5613] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1301.166063][ T5613] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1301.166082][ T5613] RSP: 0018:ffffc90004dbf7e0 EFLAGS: 00010246 [ 1301.166101][ T5613] RAX: 1ffff11004b91800 RBX: 0000000000000000 RCX: 0000000000000000 [ 1301.166116][ T5613] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1301.166133][ T5613] RBP: ffffc90004dbf8c8 R08: 0000000000000000 R09: 0000000000000000 [ 1301.166147][ T5613] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1301.166164][ T5613] R13: ffff888025c8c000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1301.166206][ T5613] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1301.166233][ T5613] ? rt_spin_unlock+0x157/0x200 [ 1301.166258][ T5613] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1301.166295][ T5613] ? rt_spin_unlock+0x163/0x200 [ 1301.166330][ T5613] ? drm_vblank_get+0x147/0x280 [ 1301.166360][ T5613] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1301.166388][ T5613] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1301.166427][ T5613] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1301.166480][ T5613] ? process_scheduled_works+0xa20/0x14e0 [ 1301.166516][ T5613] ? rcu_is_watching+0x15/0xb0 [ 1301.166548][ T5613] ? process_scheduled_works+0xa20/0x14e0 [ 1301.166576][ T5613] process_scheduled_works+0xa8e/0x14e0 [ 1301.166637][ T5613] ? __pfx_process_scheduled_works+0x10/0x10 [ 1301.166674][ T5613] ? assign_work+0x3cf/0x5d0 [ 1301.166708][ T5613] worker_thread+0xa47/0xfb0 [ 1301.166768][ T5613] kthread+0x388/0x470 [ 1301.166802][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 1301.166830][ T5613] ? __pfx_kthread+0x10/0x10 [ 1301.166865][ T5613] ret_from_fork+0x514/0xb70 [ 1301.166903][ T5613] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.166938][ T5613] ? __switch_to+0xc89/0x1420 [ 1301.166971][ T5613] ? __pfx_kthread+0x10/0x10 [ 1301.167010][ T5613] ret_from_fork_asm+0x1a/0x30 [ 1301.167052][ T5613] [ 1301.167657][ T5613] Kernel Offset: disabled