last executing test programs: 15m14.426210075s ago: executing program 0 (id=1192): syz_open_pts(0xffffffffffffffff, 0x50080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003d00)=""/4094, 0xffe}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/90, 0x5a}], 0x3}, 0x40000300) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x7ffe) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 15m10.888946942s ago: executing program 32 (id=1175): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 15m3.380495585s ago: executing program 0 (id=1205): openat$kvm(0x0, &(0x7f0000000040), 0x2a0142, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x580, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x80000000], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x8ee, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x1}}, @in_dx={0x69, 0x20, {0xd21c, 0x2}}], 0x90}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10204, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000002c0)=@vmx={0x3, 0x0, 0x2080, {0x70000, 0x3b3fb005, {0x2}, 0x1, 0x521a}, {"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", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m0.71664887s ago: executing program 0 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x10, r3, 0x29d1a000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x7, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) 14m56.333031417s ago: executing program 0 (id=1212): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in=@local}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8080) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000f00)={{}, 0x0, 0x14, @unused=[0xcc, 0x7, 0x6], @name="dd775c85eab8f74e15285eefedbd801e96f36c7249864f85db13e2f5bc03cf1233158ca45c035c5669f25bf2ad8d06a4e0981af28713e34f086173e3607eed19f8d48ba55fd08462886d4a3e8a2dbb1663df792dc056298ff3ef7e569becd690ef41bf1b7c6c7c0418a3d5abd56a1cd4fa1e4ca55bee9b46f16be8652fc1e9e15fe263eb3d2aeb0aafdd50849e3d856a93ef9cb785d0f4262ecbd910cebc9cd400b0148d870f4474cde791880488ddd04c373256cc9c4a6a144637be55e3a255c307c8cb80d9ed281f9c346178cc3f2c063ddf9e9c0afc5daccfc5070cbb6177e13a54e14c603c5625bcbfba078dfbe3bd07629624d9918285c1cf9c6f589a700a362e8f69dad042cb1ce9159adcdb01805c4dd10cae24f4ac2e1c93398a540e0d2588f43f85f2aa99ed36ca1013e9c6e26d06d036f0b29a8c6c7413384d715135f14584e8e3747503688d3d2f870bcc2482b12e717b956fd8b62531842cdda293c32cac87909e568ee87e35e8e931b69536e93ab13be4a42ad53fa64d0ffa6f46bfad85930dc6064282989026675947de365a0d2e2c058c8d681044733f1c36e132ac618132d068290c8d65ab5a4e5d7685fae8b5d540adea7fb0702b10c3fbe717d775768e9bfdaf5633e4d70b56700dee43dec67c78a45e52a21d652c06104b3c71c744193d59472dbb3106982a9ce328c0f4bf408e41e09f2ad76fdbd1435aa4ba51ea977a61a310bffe6aeca69a2187e01a4878c1ddbc7f1c8744f2629dc5790dd4c4584c24032bb499952751d65aeb52b3ae2a8a41d6d572ab36cc36666903425146192392f228d337dc378b1e2df5eb8bd34f415fef5baaadb25e84e94480089be669caaa9836a613ef054a739500367632d7167a6a71dd3a39b8fc64cb21da463d0d924d9785c8ed3353b4da0760b23599765dce67b665f80e1480521b69dcbadeb28f8df9d8a79b722f5680155a606cb8abc1c357a763295281eb3e9e35a0775532da5950bf2a86da48e5be1a33bd336311d58d6998bb62a5c0ecb65271da8009b2872882afd7405aea969900e8f3f79738406b24203d89eea36d2b4df7b6470404b55b2872282f604cac1d7b8dfb86ee35018fa7dbce15e20c4269a2e95360f435a0e17af1e09554831e69dba518a9dfc0b6f9f3c932c155f79e3311aecc9e13ea81affd95907a3831aff46dcc9a672bd79ca953c2c4438f77a796555c845466a4910d7bd87144898e5f0545925115490a5e77d9b5c9df9e431358991df575fb2582af67a13bed4e227fdfd2d2f11136efa71fba0b99003ba4a5e9cb4de59b180deb6036f5f3957f1ae1a4d5cd984e36732267431e092cc74fd1e9444206e8fd560150abd6dd4c1383378075886f51b33ad7042e90657796d4b72b7ec8b950402a18180f0128e2caff08cbedac7e08ad0e3e159093f34b80772078ccac4a752967a06978b285e9e43d00e3b047e06c1d45b19fdbd9e2543f24489335530271148933b0e5dabfa521397d5058e5c819dc6ddaff341c0e45c15a936aa54c6c5cc31c1afd26affb38597f94815cd1a38cdfa22c624f286d005509750a99281e85fea53840b913c12f303611c81d3576cdcc27824e8c985fb536ec2c257e5366156d962f62a28e4e5f06f0196e43ebd1a3a085665885da4c71b98489e8e31523372a59829a478d437538c6c3d3dfb7d8b9ea596cdbbce0a2a6f304032525de687fb7001ebb9dea32f93111c267ea7ab839bf13d16cc18811160410e803a24fcfad5e45886e89f77e99cb4aafbf8c30fd52c79df87fce74fa37f64b522435c9675cba3d9b37ed382e667ad6f836d22c190220eb2bf811dbdbd76acf7c9f1951bf369ef79e025e055fbd9c25e263c7f3866683ea169d48a13d65660eefcfc13266d1cb63955cae0c5c693057f393529943049504883f1d6438eadcc7abe1791319a79194fd54d47757ce4d0227f09794ae0cbaff35e01b8728a33c72a0b3b270966b026d09fc406d2db339555507ca96fc46d62390232bd54fa356a4232a1c108ae48e213563ee165485a36978f7b47d7c4e0fc702d55c0bd1d3eddf5d192f630b3e5e7c66e8b32d252b35520949b777f3b28a1577f77066c9d03c45695b85dff0b45e41c2380dfd765f3983f0bad59360059d0664427922f8b93e70347b0c71cb1660b3fe2f75c2097a51d7f027f1cd179dd0dda4df56f764f5b64cc03c78d9141658223bd6cfee28ef5aa250f12888a2727075fbcd92c47df6925450602b8043c6909c02259f718307656fd9dc7c403a14e00a7926f0a257dde150cfbf409c0f6c6c366d01f2a34d1d27ddaa5b29597f37ec4233d92eb6cb97f295955d439906c395eeb01abbdb2d4adcb9c3f8997b8a72d8dd6c3d184eb3ee0ecdbffb5336f2bf63f120b7d2270ea823ea2680fcbf9d6986ba84858c5c16aa8f1873121fd3027bf44807bce81d3a0109fea87a4ea630d866e0cbf38013e35b176177889c1e8c6049b9781a85bfc6cfc055b3ad475682903ac4994813596f30e4c26cd3d0f9cb8b5f1fa0abd0bd98308001431332e42bb56fcd8eba101769fd7f55fd15065a4ccf9dee9942c988f0960778b3aab63112d429298efd5fe0042cff43a6f240f73501b7f8e385c4105d48404113dc9029d30a64891cd09a9aa87a52b7930ea6e39df5517b41665e1e08d1b3d987a2ec599e3058972e7eddce7bb8eca37cc4ade88f1e2e8a4592de8d7468bcd5f95d50c90089adac8bf9bcf8409358cc88852aff4d56d66e3a1b4975b8e34601611294973a87c3ec303e1b0b11ea6fcecc9f9316662efd840f58fce32a63acb6080aa6cedfbd7b2928234411c17774a9b25bebe41133466fdc0b60adc71cb06d68411e98656384d9dda3f0d4631c74e380cfbdd13a11b27028885e67df12995db921504d48db5362f4fdb7a1908510dd1b73773e228932d6b542e835439e4f899eb48cf90dd7e515e609a993592cdb71d43889a7e57116ec629cfbd6403eb0effd7b85a1fdd3071b3b5da8bcca9bb975bd1f4e5b3f33bd63b99193a414fa5142df85dcbe806dd2f55b985dc214be1e7416007b0170f752946efd6d05bdd65b3c94a54c4f5b00942a57d7575b8406bd0c3625dd94909126b0d12b6a3f00a50232a804c564132d604f942abda1529a3415c1a1afa404a6bd31ed22e1692839c71a2af5f8134d5370315d3d0fc87a1df942144ca4ac9174ab2b44e3fe715b9e3037a24bd67657ea10b2adf55a139bd5e97068bc781158c954a590afcbfe7d87079a637d8f5a3ac1cc36f5b4e474126e2b0d6fd9f453c83c235a1edc1bf2a29a84b8586919a817896afdc93555cc915affc7113ad3195a56915d306cc96f6219828f1e1c8e0c372035b03475f66b0625011cc2ce74512c5cf2a8c70b1b41ec4a9dfd88ef047911af014c1dcaa8fca2934f4f58e5df298d1e5c6b3725214d581b37d11fcd318dd69921e192cdde7132bc19012fd59d825113f878b01ce8b4a4c447d0e9c64eb09ff51a42816cc513b9525d96414fe8635965a8a2b6f249c6730673bbb8aefb4dd45c3decb0caf05d2115dc44ded8de88317cdeb5c43ccb833136f3f29f6515a4363f20372500dc3e05b46ab8bccc4a23cc2e584bcdf76b13f6e1d74a83fd54b3991cb584e3abbbdde9ed56d339f793f5883846db8ef1980ed8bf25331716a7d31044664c7d62eedc6917443714434e2adb5df8460929e31de842c868092fd3397cde2f6e0120412c8bd7fd025fdcedc91eea905e3892ddd57d9f83ba3e131bbc2c80bee6a57facabc7fc27b870002e27034385b68e06ffeb9af21ded04e4deed0073334375e1b87a79348c0c0aa97417feec86837e8da31eb0e2ac177db4769a55592f33d558d8b2505d3a04f037228ee45c58d4d31411d90d0b953c1c1d0d68d02c5b043b13b55d84917a8abb33af6b4526f0abea1dcfad337c5271ea2b273988c5a6358d1b984f89ee4329177df9a6355cf0f2628f40dce408e613bd82305e502c7dec758b98bdad2af799ec32a15859564da2a7c514e316b10780c9320ae149f96aa3199eba122cd1023a7fbcc23848bc70ab307cd4497a994ee682eabaa614ec10a63c633c7ff2d2b2302482412b02d083bf1dcc1fbfb393726180ee36288bea2085121c07f043a8adf2943266e4f950daddc3c0714f464bb57f2289a845b06d414eece3d2904699b92e28d7fd384391d063af3f501b94fcc3ab2899b5ac37349cbaf874f8a944b1ff6ee5f106a3f74801f63ff099c5fdee5ac3f4f5b1343ee5a8769e7c11b36d5c5aed22fc479b862d9893295c610d79bc639a57ecc1850566088279c88f016a4c7e814687ae794c813e575176d03c14d1bf2cf0662e989b509e715f28a2fa2f429f2762a5e58ac3f9cf34dfbe510bc421e6af47e78075b59743fe6d982236f9f3f6e658a7bb3c5e27af2fe0e421eb4920c3a19f9560f87869f495ac0cbbdafde5520bb2cd0e86d46d38dd9da7763361c91d352e7935da48b755676bd9aa08ac0966ab5814e4bf61d1c6af77ab2bdfaf69dcc4093b057728609c583fb19dda668a82c9c371b484a2a8b34a78d000bbd30e02c35efb10791772ffd283f16bdbf291fe23871663d496c892d54dd6497649c76c3d8201ae3223b52ea775ec9c60c124a7cbc3221cb478c39c367c9e67aba68a495ed101e9470eba700d74e1d7da4205c96d43cb04c0728bea86101de73fe41663fb36bd2204d27bb513af2a29219a4ed6af6413f412f5f32572867101af05c47ebb456f0db6b61ffe0a47941cd69d3faba1e3f653c59ca6432d1b3d4655b24b64e01280e14302055d3d4b7834abd98d49db1f993b9654685b5625ede89fe2e4f80f8ee32c5fb3525aad693665235e59630968d0d28e30965afd2c80bcc0bab48a30de63f52db9cc75df4e31be58b0b2a35c81cb744e34990cccd414fa1874b57105b47d17c971b24ff0aeb54ff38e853f26459f27124a9a321d9fa3b01f6f64f27f11be3eeebeb74da5f154c68d1ff6ba006fe9e6a882fe92f168e73be2ac77a4c9546b68cc21b912881a4f2fae455fb97136cf3a2cd9df1d204cc4fc6bd605b1f106f9783cf40f45e3fa09c62bf1e38548ed3c60194cd472f40448ef260ff511cba4154733f89e69c3ee97256f0c60b2a1b78c0b94e34eb22767a8a2959200d9028ea47c582ca529bdf5ab3eb0a131ccab68c0fa2dc4405cafb41cb4487d98ba39414d32d7e7f3dabb7ec7e717e2820c5ab4736ef0598286396cba4229454509aaf0e84587267494c7954fb6b5b4b19be3d7999f535469fb55c3701d0778735443f1e1c4edb7282eb9d88feef8fdc6c124d2c304eb36a990ec9724e8b1bdabbb6ea07a796fcaa0019ef649ac5c29d6104a93f67ea0c08467c5501d3376f7fbbbc33b75610f091f56d2a306c1a26d2f41673a08f00a75d5048a591b0b02bd4723176d4749519fd9b2a111b8a0effcd529380869cd0e0487e493b9447f10f35d21084a9c6f84cf7a7ce7e0a1a9b14bb6c0d4eec1cabff694d5e6615642cbfa55be84a2a0d41a4e545c26093e83e49b5b6d1cce9364efe3162c39daddeb23c7052c02688bc4cda979540bd9dd3d4f9653481e4d366028ca0c65602c8077eddc613d51cac229250f578dcece8990df68f0e7eca143aee22e6aa1b004dba569011991ad64b8dda158b1a646cef81bf795c14f73dc2d781856127e53a6c1"}) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r2 = socket$netlink(0x10, 0x3, 0x4) unshare(0x20000400) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) lseek(r5, 0x5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14m53.7702028s ago: executing program 0 (id=1219): openat$kvm(0x0, &(0x7f0000000040), 0x2a0142, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x580, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x80000000], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x8ee, 0xfffffffffffffff8}}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x1}}, @in_dx={0x69, 0x20, {0xd21c, 0x2}}], 0xba}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10204, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000002c0)=@vmx={0x3, 0x0, 0x2080, {0x70000, 0x3b3fb005, {0x2}, 0x1, 0x521a}, {"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", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m47.461423424s ago: executing program 0 (id=1224): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 14m39.416716881s ago: executing program 33 (id=1214): syz_open_pts(0xffffffffffffffff, 0x50080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003d00)=""/4094, 0xffe}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/90, 0x5a}], 0x3}, 0x40000300) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x7ffe) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 14m31.991308452s ago: executing program 34 (id=1224): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 13m40.43769051s ago: executing program 2 (id=1307): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000340)='./trace/trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) 13m36.115316436s ago: executing program 2 (id=1313): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) 13m31.969156308s ago: executing program 2 (id=1318): openat$kvm(0x0, &(0x7f0000000040), 0x2a0142, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x580, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x80000000], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x8ee, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x1}}, @in_dx={0x69, 0x20, {0xd21c, 0x2}}], 0xd2}) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10204, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000002c0)=@vmx={0x3, 0x0, 0x2080, {0x70000, 0x3b3fb005, {0x2}, 0x1, 0x521a}, {"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", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m29.455618189s ago: executing program 2 (id=1323): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x8010, r2, 0x93dde000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000033c000480380001800e000100696d6d65646961746500000024000280080001400000000108000140000000080a00014000000013080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100"], 0x90}}, 0x4000000) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x404c4701, &(0x7f0000000040)={0x1, 0xffffffff, 0x0, 0xd, 0x13, "ccd800000000eeff00001000000000008000"}) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0x63, 0x5, 0x2, 0x1}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x3, 0x1000, 0x5c31fe481b8d4bba, 0x2, 0x1, 0x0, [{0x5, 0x8e, 0x6, '\x00', 0x300a}]}) 13m23.238677331s ago: executing program 2 (id=1330): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) writev(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8004, 0x7, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 13m19.950338331s ago: executing program 2 (id=1336): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) open_tree(0xffffffffffffffff, 0x0, 0x8100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x4, 0xe5ce}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) 13m18.853435037s ago: executing program 3 (id=1338): openat$kvm(0x0, &(0x7f0000000040), 0x2a0142, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x580, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x103001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x80000000], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x8ee, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x1}}, @in_dx={0x69, 0x20, {0xd21c, 0x2}}], 0xd2}) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10204, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000002c0)=@vmx={0x3, 0x0, 0x2080, {0x70000, 0x3b3fb005, {0x2}, 0x1, 0x521a}, {"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", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m17.904495551s ago: executing program 3 (id=1341): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x6484, 0xd7b, 0x8000000, 0x1, 0x3, 0x5, 0x4, 0x3ff, 0x54c6cff3, 0xfd, 0x2002, 0x1, 0x0, 0x1, 0x6, 0x6a, 0x3, 0xc7c, 0x1, 0x40000003, 0xe25, 0xcaa5, 0x10000, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) write(r3, 0x0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x20000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20da34ae0f447141d7c2ef", @ANYBLOB="010029bd7000fedbdf251b00000008009a00020000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x40) 13m14.724769658s ago: executing program 3 (id=1343): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) 13m13.894582129s ago: executing program 3 (id=1344): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) 13m13.536445587s ago: executing program 3 (id=1348): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c850) r1 = getpgid(0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r8, &(0x7f0000000180)='nullb1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000280)='12', 0x2) 13m11.884454458s ago: executing program 3 (id=1350): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x8010, r2, 0x93dde000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000033c000480380001800e000100696d6d65646961746500000024000280080001400000000108000140000000080a00014000000013080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100"], 0x90}}, 0x4000000) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x404c4701, &(0x7f0000000040)={0x1, 0xffffffff, 0x0, 0xd, 0x13, "ccd800000000eeff00001000000000008000"}) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0x63, 0x5, 0x2, 0x1}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x3, 0x1000, 0x5c31fe481b8d4bba, 0x2, 0x1, 0x0, [{0x5, 0x8e, 0x6, '\x00', 0x300a}]}) 13m3.554589201s ago: executing program 35 (id=1336): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) open_tree(0xffffffffffffffff, 0x0, 0x8100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x4, 0xe5ce}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) 12m55.691345623s ago: executing program 36 (id=1350): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x8010, r2, 0x93dde000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000033c000480380001800e000100696d6d65646961746500000024000280080001400000000108000140000000080a00014000000013080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100"], 0x90}}, 0x4000000) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x404c4701, &(0x7f0000000040)={0x1, 0xffffffff, 0x0, 0xd, 0x13, "ccd800000000eeff00001000000000008000"}) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0x63, 0x5, 0x2, 0x1}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x3, 0x1000, 0x5c31fe481b8d4bba, 0x2, 0x1, 0x0, [{0x5, 0x8e, 0x6, '\x00', 0x300a}]}) 11m47.956486414s ago: executing program 8 (id=1461): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c850) r1 = getpgid(0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r8, &(0x7f0000000280)='12', 0x2) 11m46.240509365s ago: executing program 8 (id=1463): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x6484, 0xd7b, 0x8000000, 0x1, 0x3, 0x5, 0x4, 0x3ff, 0x54c6cff3, 0xfd, 0x2002, 0x1, 0x0, 0x1, 0x6, 0x6a, 0x3, 0xc7c, 0x1, 0x40000003, 0xe25, 0xcaa5, 0x10000, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) write(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x20000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="010029bd7000fedbdf251b0000"], 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x40) 11m36.806860884s ago: executing program 8 (id=1479): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x20008800) 11m35.148922354s ago: executing program 8 (id=1493): setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x2}, 0xfd}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), 0x0}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 11m34.002569141s ago: executing program 8 (id=1487): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c850) r1 = getpgid(0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)='12', 0x2) 11m29.94348428s ago: executing program 8 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./trace/error_log\x00', 0x118) 11m14.499926524s ago: executing program 37 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./trace/error_log\x00', 0x118) 6m3.424910218s ago: executing program 1 (id=1943): openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0) r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 5m57.11959175s ago: executing program 1 (id=1951): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x20004090) 5m53.340505342s ago: executing program 1 (id=1952): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) socket(0x200000000000011, 0x2, 0xd) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(r3, 0x0, 0x0, 0xab7f) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 5m44.935749365s ago: executing program 1 (id=1959): socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2081, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x34}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 5m42.099560814s ago: executing program 1 (id=1964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xe69, 0x0, 0x0, 0x1000, 0x86, r0, 0x0, 0x30}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x420, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 5m40.115173822s ago: executing program 1 (id=1976): openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0) r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) dup(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) 5m23.527633734s ago: executing program 38 (id=1976): openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0) r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) dup(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) 23.000582072s ago: executing program 5 (id=2493): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, 0x0) write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) 20.22515141s ago: executing program 5 (id=2494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 18.98605439s ago: executing program 5 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x1, 0x70bd3a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) 17.30924428s ago: executing program 5 (id=2497): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r2, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 17.30880667s ago: executing program 6 (id=2499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002200)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {0x0, 0xffff}, {0x5, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c5}, 0x40850) 14.690283953s ago: executing program 5 (id=2501): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c850) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='12', 0x2) 13.547668401s ago: executing program 6 (id=2503): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x7, 0x3}) 12.650531163s ago: executing program 6 (id=2509): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 10.510410235s ago: executing program 9 (id=2511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x1, 0x70bd3a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) 10.508846615s ago: executing program 7 (id=2521): socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2081, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x34}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 10.459528626s ago: executing program 6 (id=2513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x40008d0, &(0x7f0000000200)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) 10.045206786s ago: executing program 7 (id=2514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 9.992492477s ago: executing program 4 (id=2515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002200)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {0x0, 0xffff}, {0x5, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c5}, 0x40850) 8.544442152s ago: executing program 6 (id=2516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4) 8.368790807s ago: executing program 9 (id=2517): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xca6e, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x10b300, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x1, 0xb2be, 0x163f) 8.137721092s ago: executing program 4 (id=2518): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, 0x0, 0x0) 6.820483884s ago: executing program 4 (id=2519): r0 = shmget$private(0x0, 0x400000, 0x54000000, &(0x7f0000bfd000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000f02000/0x4000)=nil, 0x4000) shmdt(r1) 6.796597095s ago: executing program 9 (id=2520): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"a2e3ad21ed0d30f91b5d320987f70e06d038e7ff7fc6e5539b3263298b089b0708356e090890e0878f0e1ac6e7049b3350959bfc9b240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31300d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a204f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b54b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5e3728ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000004000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5182cff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec6800068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000681e6756", 0x1000}}, 0x1006) 6.611069559s ago: executing program 7 (id=2522): socket$inet6_sctp(0xa, 0x5, 0x84) landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x0, 0x2, 0x9}, 0x30, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x2, 0xa, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0xfffffffffffffdc4, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$FUSE(0xffffffffffffffff, &(0x7f0000003540)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 5.924538656s ago: executing program 4 (id=2523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 5.683614512s ago: executing program 9 (id=2524): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 4.229147107s ago: executing program 5 (id=2525): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) setrlimit(0x0, 0x0) 3.208021342s ago: executing program 7 (id=2526): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000340)='./trace/trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) 3.164381183s ago: executing program 4 (id=2527): socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2081, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x34}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 3.088479615s ago: executing program 9 (id=2528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x40008d0, &(0x7f0000000200)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) 1.478075733s ago: executing program 9 (id=2529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002200)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {0x0, 0xffff}, {0x5, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c5}, 0x40850) 1.423180245s ago: executing program 7 (id=2530): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, 0x0, 0x0) 876.415498ms ago: executing program 7 (id=2531): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xca6e, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x10b300, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x1, 0xb2be, 0x163f) 820.810429ms ago: executing program 4 (id=2532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 6 (id=2533): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB], 0x48) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000417000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, &(0x7f0000000440)="f30f1efd0f22d865cf0f009e57fd0000b9800000c00f3235001000000f300fc79b0000000066b871008ec827c744240000000000c7442402129a0000c7442406000000000f011c242e640f009f41b25a84", 0x51}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x636}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4, {0x0, 0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) symlink(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): ensor... [ 927.562651][ T4320] vc032x: probe of 6-1:0.0 failed with error -22 [ 927.656533][ T4320] usb 6-1: USB disconnect, device number 3 [ 927.680544][ T7856] Bluetooth: hci4: Frame reassembly failed (-84) [ 928.217325][ T49] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 928.224770][ T8119] Bluetooth: hci4: command 0x1003 tx timeout [ 928.457354][ T8119] Bluetooth: hci3: command 0x0406 tx timeout [ 928.906285][T10198] x_tables: duplicate underflow at hook 3 [ 931.502274][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.508780][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.179377][T10219] xt_l2tp: missing protocol rule (udp|l2tpip) [ 937.974853][ T7591] Bluetooth: hci6: Frame reassembly failed (-84) [ 938.157425][ T4276] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 938.342719][T10257] xt_l2tp: missing protocol rule (udp|l2tpip) [ 938.698047][T10259] 0x00000000000a-0x000000000309 : "" [ 938.713831][T10259] ftl_cs: FTL header corrupt! [ 939.037324][ T4276] usb 7-1: Using ep0 maxpacket: 8 [ 939.044331][ T4276] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 939.077209][ T4276] usb 7-1: config 0 has no interface number 0 [ 939.104383][ T4276] usb 7-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 939.307272][ T4276] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 939.977334][ T49] Bluetooth: hci6: command 0x1003 tx timeout [ 939.985356][ T8119] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 940.113389][ T4276] usb 7-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 940.153347][ T4276] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.316096][T10272] x_tables: duplicate underflow at hook 3 [ 941.725104][ T4276] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 942.827602][ T4276] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.835673][ T4276] usb 7-1: Product: syz [ 942.840067][ T4276] usb 7-1: Manufacturer: syz [ 942.844721][ T4276] usb 7-1: SerialNumber: syz [ 942.862077][ T4276] usb 7-1: config 0 descriptor?? [ 942.867655][ T4276] usb 7-1: can't set config #0, error -71 [ 942.882559][ T4276] usb 7-1: USB disconnect, device number 2 [ 943.105132][T10277] 9pnet_fd: Insufficient options for proto=fd [ 947.907993][ T3600] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 948.178093][T10315] FAULT_INJECTION: forcing a failure. [ 948.178093][T10315] name failslab, interval 1, probability 0, space 0, times 1 [ 948.200511][T10315] CPU: 0 PID: 10315 Comm: syz.9.1566 Not tainted syzkaller #0 [ 948.208062][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.218211][T10315] Call Trace: [ 948.221539][T10315] [ 948.224516][T10315] dump_stack_lvl+0x188/0x24e [ 948.229301][T10315] ? show_regs_print_info+0x12/0x12 [ 948.234572][T10315] ? load_image+0x410/0x410 [ 948.239164][T10315] ? __might_sleep+0xd0/0xd0 [ 948.243826][T10315] ? __lock_acquire+0x7c40/0x7c40 [ 948.248994][T10315] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 948.255292][T10315] should_fail_ex+0x390/0x4c0 [ 948.260033][T10315] should_failslab+0x5/0x20 [ 948.264583][T10315] slab_pre_alloc_hook+0x59/0x300 [ 948.269661][T10315] kmem_cache_alloc_lru+0x49/0x2e0 [ 948.274819][T10315] ? __d_alloc+0x2e/0x6e0 [ 948.279202][T10315] __d_alloc+0x2e/0x6e0 [ 948.283414][T10315] d_alloc_name+0xb7/0x320 [ 948.287901][T10315] ? clear_nonspinnable+0x60/0x60 [ 948.292998][T10315] ? d_alloc_pseudo+0x70/0x70 [ 948.297730][T10315] proc_setup_thread_self+0xab/0x2d0 [ 948.303091][T10315] ? proc_fill_super+0x514/0x730 [ 948.308078][T10315] ? proc_reconfigure+0x370/0x370 [ 948.313187][T10315] get_tree_nodev+0xb0/0x160 [ 948.317847][T10315] vfs_get_tree+0x88/0x270 [ 948.322346][T10315] do_new_mount+0x247/0xa40 [ 948.326921][T10315] __se_sys_mount+0x2e3/0x3d0 [ 948.331660][T10315] ? __x64_sys_mount+0xc0/0xc0 [ 948.336510][T10315] ? lockdep_hardirqs_on+0x94/0x140 [ 948.341767][T10315] ? __x64_sys_mount+0x1c/0xc0 [ 948.346586][T10315] do_syscall_64+0x4c/0xa0 [ 948.351062][T10315] ? clear_bhb_loop+0x60/0xb0 [ 948.355829][T10315] ? clear_bhb_loop+0x60/0xb0 [ 948.360575][T10315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 948.366530][T10315] RIP: 0033:0x7f3f5f79e159 [ 948.371001][T10315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.390664][T10315] RSP: 002b:00007f3f606a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 948.399152][T10315] RAX: ffffffffffffffda RBX: 00007f3f5fa25fa0 RCX: 00007f3f5f79e159 [ 948.407181][T10315] RDX: 0000200000000300 RSI: 0000200000000200 RDI: 0000000000000000 [ 948.415241][T10315] RBP: 00007f3f5f835024 R08: 0000000000000000 R09: 0000000000000000 [ 948.423264][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.431280][T10315] R13: 00007f3f5fa26038 R14: 00007f3f5fa25fa0 R15: 00007fff424e8f78 [ 948.439322][T10315] [ 948.749439][T10315] proc_fill_super: can't allocate /proc/thread-self [ 949.023675][ T3600] usb 6-1: device descriptor read/all, error -71 [ 949.207903][ T4326] Bluetooth: hci6: Frame reassembly failed (-84) [ 949.392830][T10323] jffs2: notice: (10323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 949.818765][T10337] x_tables: duplicate underflow at hook 3 [ 949.837935][T10337] blktrace: Concurrent blktraces are not allowed on sg0 [ 951.177330][ T8119] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 951.183886][ T49] Bluetooth: hci6: command 0x1003 tx timeout [ 953.048108][T10333] 9pnet_fd: Insufficient options for proto=fd [ 953.422657][T10348] xt_l2tp: missing protocol rule (udp|l2tpip) [ 954.468839][T10358] 0x00000000000a-0x000000000309 : "" [ 954.486066][T10358] ftl_cs: FTL header corrupt! [ 959.238499][T10383] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 960.667540][T10377] autofs4:pid:10377:autofs_fill_super: called with bogus options [ 962.869789][T10407] xt_l2tp: missing protocol rule (udp|l2tpip) [ 963.767934][T10408] x_tables: duplicate underflow at hook 3 [ 963.785139][T10408] blktrace: Concurrent blktraces are not allowed on sg0 [ 965.581497][T10413] 9pnet_fd: Insufficient options for proto=fd [ 969.577402][ T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 969.779834][ T27] usb 6-1: config index 0 descriptor too short (expected 69, got 51) [ 969.801140][ T27] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 969.849217][ T27] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 26213, setting to 1024 [ 969.897018][ T27] usb 6-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 969.973210][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.037178][ T27] usb 6-1: Product: syz [ 970.047887][ T27] usb 6-1: Manufacturer: syz [ 970.052518][ T27] usb 6-1: SerialNumber: syz [ 970.152637][T10449] xt_l2tp: missing protocol rule (udp|l2tpip) [ 970.439603][ T27] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to g@b4.vu [ 970.635012][ T27] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 970.686939][T10446] autofs4:pid:10446:autofs_fill_super: called with bogus options [ 970.772856][ T27] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 970.838317][ T27] usb 6-1: USB disconnect, device number 6 [ 970.861242][T10451] udevd[10451]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.853646][ T7591] Bluetooth: hci4: Frame reassembly failed (-84) [ 972.087618][T10462] x_tables: duplicate underflow at hook 3 [ 972.102463][T10462] blktrace: Concurrent blktraces are not allowed on sg0 [ 973.897724][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 973.905766][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 976.016151][T10472] device syzkaller0 entered promiscuous mode [ 977.603812][T10483] 9pnet_fd: Insufficient options for proto=fd [ 978.508778][T10493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 979.787249][ T8456] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 980.701899][ T8456] usb 7-1: config index 0 descriptor too short (expected 69, got 51) [ 980.758038][ T8456] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 980.857982][ T8456] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 26213, setting to 1024 [ 981.245247][ T8456] usb 7-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 981.750983][T10514] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 982.930348][ T4361] Bluetooth: hci4: Frame reassembly failed (-84) [ 982.937162][ T4361] Bluetooth: hci4: Frame reassembly failed (-84) [ 982.961526][ T8456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.981351][T10511] autofs4:pid:10511:autofs_fill_super: called with bogus options [ 983.046942][ T8456] usb 7-1: Product: syz [ 983.087144][ T8456] usb 7-1: Manufacturer: syz [ 983.091841][ T8456] usb 7-1: SerialNumber: syz [ 983.178021][ T8456] usb 7-1: can't set config #1, error -71 [ 983.191359][ T8456] usb 7-1: USB disconnect, device number 3 [ 984.062802][T10532] 9pnet_fd: Insufficient options for proto=fd [ 984.899582][ T8456] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 984.937781][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 984.944155][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 985.065802][T10550] x_tables: duplicate underflow at hook 3 [ 985.081718][T10550] blktrace: Concurrent blktraces are not allowed on sg0 [ 985.101464][ T8456] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.673692][ T8456] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 986.949849][T10552] xt_l2tp: missing protocol rule (udp|l2tpip) [ 987.368335][ T8456] usb 6-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 987.425045][ T8456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.821812][ T8456] usb 6-1: can't set config #1, error -71 [ 987.949164][ T8456] usb 6-1: USB disconnect, device number 7 [ 988.830257][T10565] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 990.082868][T10575] x_tables: duplicate underflow at hook 3 [ 990.103298][T10575] blktrace: Concurrent blktraces are not allowed on sg0 [ 990.307174][ T8456] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 992.785580][ T8456] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 992.882378][ T8456] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 992.922064][ T8456] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 26213, setting to 1024 [ 992.940467][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.947434][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.979320][ T8456] usb 2-1: string descriptor 0 read error: -71 [ 992.985648][ T8456] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 993.006752][ T8456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.018049][ T8456] usb 2-1: can't set config #1, error -71 [ 993.027432][ T8456] usb 2-1: USB disconnect, device number 11 [ 993.158453][T10580] 9pnet_fd: Insufficient options for proto=fd [ 994.977197][T10596] autofs4:pid:10596:autofs_fill_super: called with bogus options [ 997.736658][T10619] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 998.640325][ T4379] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 999.027338][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 999.035773][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1001.579188][T10638] x_tables: duplicate underflow at hook 3 [ 1001.594496][T10638] blktrace: Concurrent blktraces are not allowed on sg0 [ 1003.796013][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 1003.802782][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1008.227128][ T4605] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1008.427164][ T4605] usb 8-1: Using ep0 maxpacket: 8 [ 1008.434314][ T4605] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1008.455746][ T4605] usb 8-1: config 179 has no interface number 0 [ 1008.483605][ T4605] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1008.525376][ T4605] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1008.567188][ T4605] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1008.608044][ T4605] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1008.665233][ T4605] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1008.700618][ T4605] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1008.715507][T10669] 9pnet_fd: Insufficient options for proto=fd [ 1008.734063][ T4605] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.780098][T10661] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1009.057371][ T6680] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1009.102961][ T4697] usb 8-1: USB disconnect, device number 2 [ 1009.103008][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1009.117232][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1009.249271][ T6680] usb 10-1: config index 0 descriptor too short (expected 69, got 51) [ 1009.267705][ T6680] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 1009.305431][ T6680] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 26213, setting to 1024 [ 1009.355661][ T6680] usb 10-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 1009.435034][ T6680] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.497191][ T6680] usb 10-1: Product: syz [ 1009.501529][ T6680] usb 10-1: Manufacturer: syz [ 1009.506427][ T6680] usb 10-1: SerialNumber: syz [ 1009.759743][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 1009.767344][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 1009.775826][ T6680] usb 10-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to g@b4.vu [ 1009.796161][ T6680] usb 10-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 1009.843636][ T6680] snd-usb-audio: probe of 10-1:1.0 failed with error -71 [ 1009.871414][T10451] udevd[10451]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.890825][ T6680] usb 10-1: USB disconnect, device number 3 [ 1010.543592][T10695] 9pnet_fd: Insufficient options for proto=fd [ 1010.643285][T10699] autofs4:pid:10699:autofs_fill_super: called with bogus options [ 1011.875779][T10707] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1013.613822][ T4697] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1014.808483][ T4697] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.878675][ T4697] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1014.943946][ T4697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.977321][ T4697] usb 7-1: Product: syz [ 1014.981602][ T4697] usb 7-1: Manufacturer: syz [ 1014.986243][ T4697] usb 7-1: SerialNumber: syz [ 1015.657572][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 1015.664042][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1015.807218][ T4697] usb 7-1: Cannot retrieve CPort count: -110 [ 1015.907263][ T4697] usb 7-1: Cannot retrieve CPort count: -110 [ 1015.913357][ T4697] es2_ap_driver: probe of 7-1:1.0 failed with error -110 [ 1016.065418][ T4379] usb 7-1: USB disconnect, device number 4 [ 1016.525042][T10731] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1671'. [ 1016.645665][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1671'. [ 1019.272542][ T14] kernel read not supported for file /video9 (pid: 14 comm: kworker/0:1) [ 1020.614989][T10776] x_tables: duplicate underflow at hook 3 [ 1020.632019][T10776] blktrace: Concurrent blktraces are not allowed on sg0 [ 1022.574500][T10777] netlink: 'syz.5.1666': attribute type 13 has an invalid length. [ 1023.226441][T10777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1023.337762][T10777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1023.348783][T10777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1023.487801][ T4317] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1023.677506][ T4317] usb 10-1: Using ep0 maxpacket: 32 [ 1023.689028][ T4317] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1023.717986][ T4317] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.777002][ T4317] usb 10-1: Product: syz [ 1027.057129][ T4317] usb 10-1: Manufacturer: syz [ 1027.061908][ T4317] usb 10-1: SerialNumber: syz [ 1027.145712][ T4317] usb 10-1: config 0 descriptor?? [ 1027.217436][T10811] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1027.933925][T10811] page:ffffea00012a0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a800 [ 1027.944851][T10811] head:ffffea00012a0000 order:3 compound_mapcount:0 compound_pincount:0 [ 1027.953504][T10811] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1027.961794][T10811] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888140009640 [ 1027.970642][T10811] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 1027.979449][T10811] page dumped because: unmovable page [ 1027.984931][T10811] page_owner tracks the page as allocated [ 1027.991478][T10811] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4629, tgid 4629 (udevd), ts 142486083193, free_ts 142435681775 [ 1028.016089][T10811] post_alloc_hook+0x173/0x1a0 [ 1028.021095][T10811] get_page_from_freelist+0x206b/0x2180 [ 1028.026779][T10811] __alloc_pages+0x1ec/0x4f0 [ 1028.031556][T10811] alloc_slab_page+0x5d/0x180 [ 1028.036368][T10811] new_slab+0x87/0x2d0 [ 1028.040768][T10811] ___slab_alloc+0xbc5/0x1240 [ 1028.045590][T10811] kmem_cache_alloc+0x111/0x2f0 [ 1028.050659][T10811] getname_flags+0xb7/0x500 [ 1028.055331][T10811] do_sys_openat2+0xdd/0x4f0 [ 1028.060126][T10811] __x64_sys_openat+0x135/0x160 [ 1028.065099][T10811] do_syscall_64+0x4c/0xa0 [ 1028.069779][T10811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1028.075776][T10811] page last free stack trace: [ 1028.080587][T10811] free_unref_page_prepare+0x8e5/0x9e0 [ 1028.086164][T10811] free_unref_page+0x2e/0x3f0 [ 1028.090994][T10811] __unfreeze_partials+0x188/0x1e0 [ 1028.096232][T10811] put_cpu_partial+0x17c/0x250 [ 1028.101138][T10811] qlist_free_all+0x76/0xe0 [ 1028.105746][T10811] kasan_quarantine_reduce+0x144/0x160 [ 1028.111350][T10811] __kasan_slab_alloc+0x1e/0x80 [ 1028.116428][T10811] slab_post_alloc_hook+0x4b/0x490 [ 1028.121739][T10811] __kmem_cache_alloc_node+0x19d/0x270 [ 1028.128177][T10811] __kmalloc+0xa3/0x240 [ 1028.132555][T10811] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1028.138260][T10811] tomoyo_path_perm+0x26f/0x610 [ 1028.143262][T10811] security_inode_getattr+0xcf/0x120 [ 1028.148711][T10811] vfs_getattr+0x26/0x3a0 [ 1028.153148][T10811] __x64_sys_newfstat+0x13d/0x220 [ 1028.158305][T10811] do_syscall_64+0x4c/0xa0 [ 1028.231164][ T4317] usb 10-1: can't set config #0, error -71 [ 1028.247289][ T4317] usb 10-1: USB disconnect, device number 4 [ 1029.241229][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 1029.248987][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1029.533626][T10818] 9pnet_fd: Insufficient options for proto=fd [ 1030.456983][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 1030.766726][T10839] netlink: 'syz.9.1700': attribute type 13 has an invalid length. [ 1032.153815][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 1032.273588][T10851] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1703'. [ 1032.329127][T10839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1032.820206][T10839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1032.984350][T10839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1034.699840][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1034.705987][T10848] Bluetooth: hci4: command 0x1003 tx timeout [ 1035.253503][T10857] ftl_cs: FTL header not found. [ 1035.592543][T10877] x_tables: duplicate underflow at hook 3 [ 1035.661266][T10878] blktrace: Concurrent blktraces are not allowed on sg0 [ 1037.796636][T10857] block2mtd: mtd6: [/dev/zram0] erase_size = 64KiB [65536] [ 1039.581389][T10892] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1040.099251][T10892] page:ffffea00012a0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a800 [ 1041.346149][T10892] head:ffffea00012a0000 order:3 compound_mapcount:0 compound_pincount:0 [ 1041.367320][T10892] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1041.376793][T10892] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888140009640 [ 1041.427187][T10892] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 1041.481903][T10892] page dumped because: unmovable page [ 1041.518557][T10892] page_owner tracks the page as allocated [ 1041.527115][T10892] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4629, tgid 4629 (udevd), ts 142486083193, free_ts 142435681775 [ 1041.642753][T10892] post_alloc_hook+0x173/0x1a0 [ 1041.655481][T10907] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1716'. [ 1041.662858][T10892] get_page_from_freelist+0x206b/0x2180 [ 1041.677364][T10892] __alloc_pages+0x1ec/0x4f0 [ 1041.691447][T10892] alloc_slab_page+0x5d/0x180 [ 1041.706494][T10892] new_slab+0x87/0x2d0 [ 1041.716700][T10892] ___slab_alloc+0xbc5/0x1240 [ 1041.726876][T10892] kmem_cache_alloc+0x111/0x2f0 [ 1041.737180][T10892] getname_flags+0xb7/0x500 [ 1041.747546][T10892] do_sys_openat2+0xdd/0x4f0 [ 1041.757557][T10892] __x64_sys_openat+0x135/0x160 [ 1041.767553][T10892] do_syscall_64+0x4c/0xa0 [ 1041.788283][T10892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.805789][T10892] page last free stack trace: [ 1041.812167][T10892] free_unref_page_prepare+0x8e5/0x9e0 [ 1041.821665][T10892] free_unref_page+0x2e/0x3f0 [ 1041.838832][T10892] __unfreeze_partials+0x188/0x1e0 [ 1041.847334][T10892] put_cpu_partial+0x17c/0x250 [ 1041.872651][T10892] qlist_free_all+0x76/0xe0 [ 1041.882864][T10892] kasan_quarantine_reduce+0x144/0x160 [ 1041.904687][T10892] __kasan_slab_alloc+0x1e/0x80 [ 1041.931002][T10892] slab_post_alloc_hook+0x4b/0x490 [ 1041.940874][T10892] __kmem_cache_alloc_node+0x19d/0x270 [ 1041.956140][T10892] __kmalloc+0xa3/0x240 [ 1043.433693][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 1043.440039][T10892] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1043.440083][T10892] tomoyo_path_perm+0x26f/0x610 [ 1043.440109][T10892] security_inode_getattr+0xcf/0x120 [ 1043.440136][T10892] vfs_getattr+0x26/0x3a0 [ 1043.440162][T10892] __x64_sys_newfstat+0x13d/0x220 [ 1043.440192][T10892] do_syscall_64+0x4c/0xa0 [ 1043.467493][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1045.127527][ T4317] kernel read not supported for file /video9 (pid: 4317 comm: kworker/0:4) [ 1046.239573][T10930] x_tables: duplicate underflow at hook 3 [ 1046.261667][T10930] blktrace: Concurrent blktraces are not allowed on sg0 [ 1051.894313][T10952] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1728'. [ 1054.341943][ T9907] Bluetooth: hci4: Frame reassembly failed (-84) [ 1054.375172][ T9907] Bluetooth: hci4: Frame reassembly failed (-84) [ 1054.392737][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.399280][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.488100][T10967] netlink: 'syz.1.1722': attribute type 13 has an invalid length. [ 1054.700665][T10967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1056.197537][T10959] block2mtd: error: cannot open device /dev/zram0 [ 1056.356065][T10967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1056.377303][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1056.384464][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 1056.417895][T10967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1060.053818][T11003] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1061.133721][T11003] page:ffffea00012a0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a800 [ 1061.168403][T11003] head:ffffea00012a0000 order:3 compound_mapcount:0 compound_pincount:0 [ 1061.176814][T11003] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1061.396758][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1740'. [ 1061.496856][T11003] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888140009640 [ 1061.703315][T11003] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 1061.747181][T11003] page dumped because: unmovable page [ 1062.518085][T11003] page_owner tracks the page as allocated [ 1062.667218][T11003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4629, tgid 4629 (udevd), ts 142486083193, free_ts 142435681775 [ 1063.737208][T11003] post_alloc_hook+0x173/0x1a0 [ 1063.748399][T11003] get_page_from_freelist+0x206b/0x2180 [ 1063.808025][T11003] __alloc_pages+0x1ec/0x4f0 [ 1063.837883][T11003] alloc_slab_page+0x5d/0x180 [ 1063.859840][T11003] new_slab+0x87/0x2d0 [ 1063.876744][ T4319] kernel read not supported for file /video9 (pid: 4319 comm: kworker/0:6) [ 1063.883004][T11003] ___slab_alloc+0xbc5/0x1240 [ 1063.961702][T11026] x_tables: duplicate underflow at hook 3 [ 1063.978495][T11026] blktrace: Concurrent blktraces are not allowed on sg0 [ 1065.579947][T11003] kmem_cache_alloc+0x111/0x2f0 [ 1065.703153][T11003] getname_flags+0xb7/0x500 [ 1065.792922][T11003] do_sys_openat2+0xdd/0x4f0 [ 1065.817242][ T49] Bluetooth: hci6: command 0x1003 tx timeout [ 1065.825631][ T8119] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1065.854064][T11003] __x64_sys_openat+0x135/0x160 [ 1065.923058][T11003] do_syscall_64+0x4c/0xa0 [ 1065.972976][T11003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1066.051960][T11003] page last free stack trace: [ 1066.105293][T11003] free_unref_page_prepare+0x8e5/0x9e0 [ 1066.175564][T11003] free_unref_page+0x2e/0x3f0 [ 1066.245277][T11003] __unfreeze_partials+0x188/0x1e0 [ 1066.301244][T11003] put_cpu_partial+0x17c/0x250 [ 1066.361655][T11003] qlist_free_all+0x76/0xe0 [ 1066.408530][T11003] kasan_quarantine_reduce+0x144/0x160 [ 1066.486067][T11003] __kasan_slab_alloc+0x1e/0x80 [ 1066.575891][T11003] slab_post_alloc_hook+0x4b/0x490 [ 1066.708507][T11003] __kmem_cache_alloc_node+0x19d/0x270 [ 1066.787131][T11003] __kmalloc+0xa3/0x240 [ 1066.791400][T11003] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1066.807212][T11003] tomoyo_path_perm+0x26f/0x610 [ 1066.812115][T11003] security_inode_getattr+0xcf/0x120 [ 1066.880601][T11003] vfs_getattr+0x26/0x3a0 [ 1066.885093][T11003] __x64_sys_newfstat+0x13d/0x220 [ 1067.070481][T11003] do_syscall_64+0x4c/0xa0 [ 1067.467268][ T126] kernel read not supported for file /video9 (pid: 126 comm: kworker/0:2) [ 1070.079186][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1751'. [ 1070.104070][T11060] netlink: 'syz.6.1750': attribute type 13 has an invalid length. [ 1070.581739][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1070.596736][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1070.628574][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1073.224941][ T4419] Bluetooth: hci6: Frame reassembly failed (-84) [ 1075.270223][ T49] Bluetooth: hci6: command 0x1003 tx timeout [ 1075.270411][ T8119] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1076.034182][T11098] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1076.636117][T11103] x_tables: duplicate underflow at hook 3 [ 1076.656977][T11103] blktrace: Concurrent blktraces are not allowed on sg0 [ 1076.937543][T11086] block2mtd: error: cannot open device /dev/zram0 [ 1079.420989][T11098] page:ffffea00012a0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a800 [ 1079.639612][T11098] head:ffffea00012a0000 order:3 compound_mapcount:0 compound_pincount:0 [ 1079.867236][T11098] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1080.678248][T11098] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888140009640 [ 1080.841731][T11098] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 1080.913777][T11098] page dumped because: unmovable page [ 1080.987222][T11098] page_owner tracks the page as allocated [ 1081.807067][T11098] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4629, tgid 4629 (udevd), ts 142486083193, free_ts 142435681775 [ 1081.830309][T11098] post_alloc_hook+0x173/0x1a0 [ 1081.835136][T11098] get_page_from_freelist+0x206b/0x2180 [ 1081.841103][T11098] __alloc_pages+0x1ec/0x4f0 [ 1081.845747][T11098] alloc_slab_page+0x5d/0x180 [ 1081.850865][T11098] new_slab+0x87/0x2d0 [ 1081.855119][T11098] ___slab_alloc+0xbc5/0x1240 [ 1081.865267][T11098] kmem_cache_alloc+0x111/0x2f0 [ 1081.885887][T11098] getname_flags+0xb7/0x500 [ 1081.907209][T11098] do_sys_openat2+0xdd/0x4f0 [ 1081.929725][T11098] __x64_sys_openat+0x135/0x160 [ 1081.965076][T11098] do_syscall_64+0x4c/0xa0 [ 1082.007185][T11098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1082.044674][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'. [ 1082.074206][T11098] page last free stack trace: [ 1082.107438][T11098] free_unref_page_prepare+0x8e5/0x9e0 [ 1082.112970][T11098] free_unref_page+0x2e/0x3f0 [ 1082.937075][T11098] __unfreeze_partials+0x188/0x1e0 [ 1082.987102][T11098] put_cpu_partial+0x17c/0x250 [ 1083.057270][T11098] qlist_free_all+0x76/0xe0 [ 1083.078182][T11098] kasan_quarantine_reduce+0x144/0x160 [ 1083.083752][T11098] __kasan_slab_alloc+0x1e/0x80 [ 1083.197173][T11098] slab_post_alloc_hook+0x4b/0x490 [ 1083.202394][T11098] __kmem_cache_alloc_node+0x19d/0x270 [ 1083.249356][T11098] __kmalloc+0xa3/0x240 [ 1083.253597][T11098] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1083.292579][T11098] tomoyo_path_perm+0x26f/0x610 [ 1083.295067][T11130] comedi comedi1: fl512: I/O port conflict (0xfffffffffffff000,16) [ 1083.317665][T11098] security_inode_getattr+0xcf/0x120 [ 1083.339139][T11098] vfs_getattr+0x26/0x3a0 [ 1083.346157][T11098] __x64_sys_newfstat+0x13d/0x220 [ 1083.353728][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1769'. [ 1083.354874][ T4353] kernel read not supported for file /video9 (pid: 4353 comm: kworker/1:6) [ 1083.378759][T11098] do_syscall_64+0x4c/0xa0 [ 1084.792070][T11154] x_tables: duplicate underflow at hook 3 [ 1084.807836][T11154] blktrace: Concurrent blktraces are not allowed on sg0 [ 1090.077885][T11174] netlink: 'syz.7.1775': attribute type 13 has an invalid length. [ 1090.372201][T11174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1090.547269][T11174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1090.598459][ T5266] Bluetooth: hci4: Frame reassembly failed (-84) [ 1090.627816][T11174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1090.653427][ T5266] Bluetooth: hci4: Frame reassembly failed (-84) [ 1092.178902][T11197] 9pnet_fd: Insufficient options for proto=fd [ 1092.627991][T10848] Bluetooth: hci4: command 0x1003 tx timeout [ 1092.634434][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1092.774616][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1783'. [ 1092.797380][T11169] block2mtd: error: cannot open device /dev/zram0 [ 1096.736672][T11237] x_tables: duplicate underflow at hook 3 [ 1096.752436][T11237] blktrace: Concurrent blktraces are not allowed on sg0 [ 1101.787426][T11247] page:ffffea00012a0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a800 [ 1102.747620][T11247] head:ffffea00012a0000 order:3 compound_mapcount:0 compound_pincount:0 [ 1102.756112][T11247] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1102.997918][T11247] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888140009640 [ 1103.104389][T11247] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 1103.142254][T11247] page dumped because: unmovable page [ 1103.156723][T11264] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1795'. [ 1103.270680][T11247] page_owner tracks the page as allocated [ 1103.317473][T11247] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4629, tgid 4629 (udevd), ts 142486083193, free_ts 142435681775 [ 1103.433571][T11268] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1797'. [ 1103.532946][T11247] post_alloc_hook+0x173/0x1a0 [ 1103.632518][T11269] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1792'. [ 1104.437275][T11247] get_page_from_freelist+0x206b/0x2180 [ 1104.447400][T11247] __alloc_pages+0x1ec/0x4f0 [ 1104.468291][T11247] alloc_slab_page+0x5d/0x180 [ 1104.508301][T11247] new_slab+0x87/0x2d0 [ 1104.569082][T11247] ___slab_alloc+0xbc5/0x1240 [ 1104.628108][T11247] kmem_cache_alloc+0x111/0x2f0 [ 1104.633053][T11247] getname_flags+0xb7/0x500 [ 1104.696604][T11273] 9pnet_fd: Insufficient options for proto=fd [ 1104.707881][T11247] do_sys_openat2+0xdd/0x4f0 [ 1104.746602][T11247] __x64_sys_openat+0x135/0x160 [ 1104.777915][T11247] do_syscall_64+0x4c/0xa0 [ 1104.813993][T11247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.864628][T11247] page last free stack trace: [ 1104.899921][T11247] free_unref_page_prepare+0x8e5/0x9e0 [ 1104.977137][T11247] free_unref_page+0x2e/0x3f0 [ 1104.981975][T11247] __unfreeze_partials+0x188/0x1e0 [ 1105.007608][T11247] put_cpu_partial+0x17c/0x250 [ 1105.012523][T11247] qlist_free_all+0x76/0xe0 [ 1105.100505][T11247] kasan_quarantine_reduce+0x144/0x160 [ 1105.106045][T11247] __kasan_slab_alloc+0x1e/0x80 [ 1105.173407][T11247] slab_post_alloc_hook+0x4b/0x490 [ 1105.251115][T11247] __kmem_cache_alloc_node+0x19d/0x270 [ 1105.256651][T11247] __kmalloc+0xa3/0x240 [ 1105.373624][T11247] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1105.379845][T11247] tomoyo_path_perm+0x26f/0x610 [ 1105.384750][T11247] security_inode_getattr+0xcf/0x120 [ 1105.477291][T11247] vfs_getattr+0x26/0x3a0 [ 1105.481725][T11247] __x64_sys_newfstat+0x13d/0x220 [ 1105.486769][T11247] do_syscall_64+0x4c/0xa0 [ 1108.857458][T10848] Bluetooth: hci4: command 0x1003 tx timeout [ 1108.865224][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1110.512977][T11349] x_tables: duplicate underflow at hook 3 [ 1110.527593][T11349] blktrace: Concurrent blktraces are not allowed on sg0 [ 1115.820553][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.827026][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.277274][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1810'. [ 1116.682639][T11397] 9pnet_fd: Insufficient options for proto=fd [ 1117.457102][ T22] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1117.487152][ T6680] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1119.157177][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 1119.162442][ T6680] usb 10-1: Using ep0 maxpacket: 8 [ 1119.171296][ T6680] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1119.185907][ T22] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1119.209546][ T6680] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1119.229811][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.257247][ T6680] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1119.285909][ T22] usb 6-1: Product: syz [ 1119.296163][ T22] usb 6-1: Manufacturer: syz [ 1119.306288][ T6680] usb 10-1: Product: syz [ 1119.332988][ T22] usb 6-1: SerialNumber: syz [ 1119.337981][ T6680] usb 10-1: Manufacturer: syz [ 1119.349301][ T22] usb 6-1: config 0 descriptor?? [ 1119.356740][ T6680] usb 10-1: SerialNumber: syz [ 1119.386471][ T22] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1119.413770][ T22] pctv452e: pctv452e_power_ctrl: 1 [ 1119.413770][ T22] [ 1119.431584][ T22] usb 6-1: selecting invalid altsetting 3 [ 1119.607555][ T6680] usb 10-1: Handspring Visor / Palm OS: No valid connect info available [ 1119.638375][ T22] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1119.638375][ T22] [ 1119.653518][ T6680] usb 10-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1120.428082][ T6680] usb 10-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1120.436338][ T6680] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1120.450194][ T22] dvb-usb: bulk message failed: -22 (5/0) [ 1120.458980][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1120.474239][ T6680] visor 10-1:1.0: Handspring Visor / Palm OS converter detected [ 1120.569424][ T22] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1120.640566][ T22] usb 6-1: media controller created [ 1120.649907][ T6680] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1120.684738][ T22] dvb-usb: bulk message failed: -22 (8/0) [ 1120.724558][ T22] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1120.766636][ T6680] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1120.835018][ T22] dvb-usb: MAC address reading failed. [ 1120.902668][ T6680] usb 10-1: USB disconnect, device number 5 [ 1120.961809][ T6680] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1120.974255][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1121.017284][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 1121.023816][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1121.089310][ T6680] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1121.102289][ T6680] visor 10-1:1.0: device disconnected [ 1121.279331][ T22] DVB: Unable to find symbol stb0899_attach() [ 1121.285696][ T22] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1121.658918][ T22] rc_core: IR keymap rc-tt-1500 not found [ 1121.664740][ T22] Registered IR keymap rc-empty [ 1122.518641][ T22] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1122.530758][ T22] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input18 [ 1122.547838][ T22] dvb-usb: schedule remote query interval to 100 msecs. [ 1122.554853][ T22] pctv452e: pctv452e_power_ctrl: 0 [ 1122.554853][ T22] [ 1122.562367][ T22] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1122.575266][ T22] usb 6-1: USB disconnect, device number 9 [ 1123.500555][ T22] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1123.676325][T11413] block2mtd: error: cannot open device /dev/zram0 [ 1123.735598][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1821'. [ 1123.850309][T11455] 9pnet_fd: Insufficient options for proto=fd [ 1125.031555][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1834'. [ 1125.334314][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1837'. [ 1125.485608][T11482] x_tables: duplicate underflow at hook 3 [ 1125.517130][ T4697] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1125.554169][T11483] blktrace: Concurrent blktraces are not allowed on sg0 [ 1127.247316][ T4697] usb 7-1: Using ep0 maxpacket: 8 [ 1127.360435][ T4697] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1127.555165][ T4697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.700028][ T4697] usb 7-1: Product: syz [ 1127.772839][ T4697] usb 7-1: Manufacturer: syz [ 1127.851213][ T4697] usb 7-1: SerialNumber: syz [ 1128.100556][ T4697] usb 7-1: config 0 descriptor?? [ 1128.309586][ T4697] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1129.867439][ T4697] pctv452e: pctv452e_power_ctrl: 1 [ 1129.867439][ T4697] [ 1129.874866][ T4697] usb 7-1: selecting invalid altsetting 3 [ 1130.008807][ T4697] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1130.008807][ T4697] [ 1130.057292][ T4697] dvb-usb: bulk message failed: -22 (5/0) [ 1130.109252][ T4697] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1130.188606][ T4697] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1130.247178][ T4697] usb 7-1: media controller created [ 1130.275691][ T4697] dvb-usb: bulk message failed: -22 (8/0) [ 1130.319945][ T4697] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1130.376556][ T4697] dvb-usb: MAC address reading failed. [ 1130.445930][ T4697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1130.674439][ T4697] DVB: Unable to find symbol stb0899_attach() [ 1130.681531][ T4697] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1132.079741][ T5258] Bluetooth: hci4: Frame reassembly failed (-84) [ 1132.137177][ T4697] rc_core: IR keymap rc-tt-1500 not found [ 1132.142993][ T4697] Registered IR keymap rc-empty [ 1132.201120][T11517] 9pnet_fd: Insufficient options for proto=fd [ 1132.218108][ T4697] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1132.258770][ T4697] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input19 [ 1132.338332][ T4697] dvb-usb: schedule remote query interval to 100 msecs. [ 1132.345402][ T4697] pctv452e: pctv452e_power_ctrl: 0 [ 1132.345402][ T4697] [ 1132.384406][ T4697] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1132.477506][ T4697] usb 7-1: USB disconnect, device number 5 [ 1132.489557][ T3600] dvb-usb: bulk message failed: -22 (4/0) [ 1132.517210][ T3600] dvb-usb: error -22 while querying for an remote control event. [ 1132.675505][ T4697] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1134.137218][ T49] Bluetooth: hci4: command 0x1003 tx timeout [ 1134.137313][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1136.704661][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1840'. [ 1137.782972][T11560] x_tables: duplicate underflow at hook 3 [ 1137.799641][T11560] blktrace: Concurrent blktraces are not allowed on sg0 [ 1137.810158][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1844'. [ 1140.470082][ T4605] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1142.187068][ T4605] usb 10-1: Using ep0 maxpacket: 8 [ 1142.245581][ T4605] usb 10-1: device descriptor read/all, error -71 [ 1143.023187][T11580] 9pnet_fd: Insufficient options for proto=fd [ 1145.284826][T11602] FAULT_INJECTION: forcing a failure. [ 1145.284826][T11602] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.298394][T11602] CPU: 0 PID: 11602 Comm: syz.1.1855 Not tainted syzkaller #0 [ 1145.305924][T11602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.316021][T11602] Call Trace: [ 1145.319324][T11602] [ 1145.322279][T11602] dump_stack_lvl+0x188/0x24e [ 1145.327028][T11602] ? show_regs_print_info+0x12/0x12 [ 1145.332294][T11602] ? load_image+0x410/0x410 [ 1145.336925][T11602] ? __might_sleep+0xd0/0xd0 [ 1145.341666][T11602] ? __lock_acquire+0x7c40/0x7c40 [ 1145.346761][T11602] should_fail_ex+0x390/0x4c0 [ 1145.351489][T11602] should_failslab+0x5/0x20 [ 1145.356003][T11602] slab_pre_alloc_hook+0x59/0x300 [ 1145.361070][T11602] ? __lock_acquire+0x138a/0x7c40 [ 1145.366123][T11602] ? __kernfs_new_node+0xa6/0x7f0 [ 1145.371173][T11602] __kmem_cache_alloc_node+0x4f/0x270 [ 1145.376560][T11602] ? mark_lock+0x94/0x320 [ 1145.380920][T11602] ? __kernfs_new_node+0xa6/0x7f0 [ 1145.385957][T11602] __kmalloc_node_track_caller+0xa0/0x240 [ 1145.391702][T11602] kstrdup_const+0x56/0x90 [ 1145.396161][T11602] __kernfs_new_node+0xa6/0x7f0 [ 1145.401050][T11602] ? kernfs_new_node+0x250/0x250 [ 1145.406000][T11602] ? mark_lock+0x94/0x320 [ 1145.410364][T11602] ? mark_lock+0x94/0x320 [ 1145.414725][T11602] ? __lock_acquire+0x138a/0x7c40 [ 1145.419781][T11602] kernfs_new_node+0x148/0x250 [ 1145.424573][T11602] __kernfs_create_file+0x47/0x2e0 [ 1145.429716][T11602] cgroup_addrm_files+0x80c/0xd50 [ 1145.434778][T11602] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 1145.440945][T11602] ? mark_lock+0x94/0x320 [ 1145.445294][T11602] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1145.451347][T11602] ? css_next_descendant_pre+0x179/0x250 [ 1145.457035][T11602] css_populate_dir+0x1da/0x3b0 [ 1145.461936][T11602] cgroup_mkdir+0xc61/0xe70 [ 1145.466498][T11602] ? css_task_iter_end+0x280/0x280 [ 1145.471660][T11602] ? kernfs_iop_permission+0x26d/0x350 [ 1145.477159][T11602] ? css_task_iter_end+0x280/0x280 [ 1145.482309][T11602] kernfs_iop_mkdir+0x23d/0x3d0 [ 1145.487200][T11602] vfs_mkdir+0x386/0x570 [ 1145.491474][T11602] do_mkdirat+0x1d8/0x440 [ 1145.495830][T11602] ? vfs_mkdir+0x570/0x570 [ 1145.500285][T11602] __x64_sys_mkdirat+0x85/0x90 [ 1145.505078][T11602] do_syscall_64+0x4c/0xa0 [ 1145.509533][T11602] ? clear_bhb_loop+0x60/0xb0 [ 1145.514244][T11602] ? clear_bhb_loop+0x60/0xb0 [ 1145.518959][T11602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1145.524924][T11602] RIP: 0033:0x7f3d8db9e159 [ 1145.529363][T11602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.549001][T11602] RSP: 002b:00007f3d8ea78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1145.557447][T11602] RAX: ffffffffffffffda RBX: 00007f3d8de25fa0 RCX: 00007f3d8db9e159 [ 1145.565459][T11602] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1145.573452][T11602] RBP: 00007f3d8dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 1145.581443][T11602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.589458][T11602] R13: 00007f3d8de26038 R14: 00007f3d8de25fa0 R15: 00007ffc33cb3fb8 [ 1145.597470][T11602] [ 1145.755089][T11602] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 1145.807403][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1856'. [ 1148.157215][ T4323] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1148.347177][ T4323] usb 2-1: Using ep0 maxpacket: 8 [ 1148.518677][ T4323] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1148.538288][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.546372][ T4323] usb 2-1: Product: syz [ 1148.561231][ T4323] usb 2-1: Manufacturer: syz [ 1148.565983][ T4323] usb 2-1: SerialNumber: syz [ 1148.605646][ T4323] usb 2-1: config 0 descriptor?? [ 1148.650478][ T4323] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1148.698947][ T4323] pctv452e: pctv452e_power_ctrl: 1 [ 1148.698947][ T4323] [ 1148.737303][ T4323] usb 2-1: selecting invalid altsetting 3 [ 1148.797765][ T4323] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1148.797765][ T4323] [ 1148.847885][ T4323] dvb-usb: bulk message failed: -22 (5/0) [ 1148.883995][ T4323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1148.924226][ T4323] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1148.954398][ T4323] usb 2-1: media controller created [ 1148.995034][ T4323] dvb-usb: bulk message failed: -22 (8/0) [ 1149.015184][ T4323] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1149.047199][ T4323] dvb-usb: MAC address reading failed. [ 1149.131450][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1149.425366][ T4323] DVB: Unable to find symbol stb0899_attach() [ 1149.447633][ T4323] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1149.877210][ T4323] rc_core: IR keymap rc-tt-1500 not found [ 1149.883094][ T4323] Registered IR keymap rc-empty [ 1149.936398][ T4323] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1149.979656][ T4323] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input20 [ 1150.059025][ T4323] dvb-usb: schedule remote query interval to 100 msecs. [ 1150.072180][ T4323] pctv452e: pctv452e_power_ctrl: 0 [ 1150.072180][ T4323] [ 1150.277656][ T4323] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1150.314605][ T4323] usb 2-1: USB disconnect, device number 12 [ 1150.418579][ T4323] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1152.215649][T11659] x_tables: duplicate underflow at hook 3 [ 1152.231426][T11659] blktrace: Concurrent blktraces are not allowed on sg0 [ 1152.240154][T11659] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1862'. [ 1160.460520][T10848] Bluetooth: hci4: command 0x1003 tx timeout [ 1160.467134][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1162.802881][T11711] x_tables: duplicate underflow at hook 3 [ 1162.817570][T11711] blktrace: Concurrent blktraces are not allowed on sg0 [ 1162.826363][T11711] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1883'. [ 1167.907086][ T4353] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1169.697058][ T4353] usb 7-1: Using ep0 maxpacket: 32 [ 1169.704280][ T4353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.715739][ T4353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.726644][ T4353] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1169.772513][ T4353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.808503][ T4353] usb 7-1: config 0 descriptor?? [ 1169.866120][ T4353] hub 7-1:0.0: USB hub found [ 1170.020156][ T4353] hub 7-1:0.0: 1 port detected [ 1170.448534][ T4353] usb 7-1: USB disconnect, device number 6 [ 1175.581004][ T8119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1177.260866][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.267345][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.309839][T11830] x_tables: duplicate underflow at hook 3 [ 1181.325421][T11830] blktrace: Concurrent blktraces are not allowed on sg0 [ 1181.334434][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1900'. [ 1184.239245][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1912'. [ 1187.421654][T11859] Bluetooth: MGMT ver 1.22 [ 1189.574534][T11877] netlink: 'syz.7.1922': attribute type 1 has an invalid length. [ 1191.486604][ T5066] Bluetooth: hci4: Frame reassembly failed (-84) [ 1191.801877][T11890] x_tables: duplicate underflow at hook 3 [ 1191.817192][T11890] blktrace: Concurrent blktraces are not allowed on sg0 [ 1191.828855][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'. [ 1193.498245][T10848] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1193.504738][ T8119] Bluetooth: hci4: command 0x1003 tx timeout [ 1197.868015][ T8119] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 1197.979637][T10848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 1197.996605][T10848] CPU: 1 PID: 10848 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1198.004275][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1198.014344][T10848] Workqueue: hci2 hci_rx_work [ 1198.019055][T10848] Call Trace: [ 1198.022440][T10848] [ 1198.025383][T10848] dump_stack_lvl+0x188/0x24e [ 1198.030107][T10848] ? show_regs_print_info+0x12/0x12 [ 1198.035414][T10848] ? load_image+0x410/0x410 [ 1198.039940][T10848] sysfs_create_dir_ns+0x26a/0x290 [ 1198.045072][T10848] ? __lock_acquire+0x7c40/0x7c40 [ 1198.050128][T10848] ? sysfs_warn_dup+0xa0/0xa0 [ 1198.054892][T10848] ? do_raw_spin_unlock+0x11d/0x230 [ 1198.060140][T10848] kobject_add_internal+0x617/0xca0 [ 1198.065412][T10848] kobject_add+0x160/0x230 [ 1198.069868][T10848] ? kobject_init+0x1c0/0x1c0 [ 1198.074565][T10848] ? __raw_spin_lock_init+0x41/0x100 [ 1198.079858][T10848] ? klist_children_get+0x50/0x50 [ 1198.084902][T10848] ? get_device_parent+0x121/0x3e0 [ 1198.090033][T10848] device_add+0x470/0x1050 [ 1198.094471][T10848] hci_conn_add_sysfs+0xd1/0x1e0 [ 1198.099445][T10848] hci_conn_complete_evt+0x875/0x1450 [ 1198.104882][T10848] ? hci_inquiry_result_evt+0x520/0x520 [ 1198.110460][T10848] ? __skb_clone+0x446/0x6c0 [ 1198.115072][T10848] ? skb_pull_data+0xec/0x1f0 [ 1198.119758][T10848] ? hci_inquiry_result_evt+0x520/0x520 [ 1198.125352][T10848] hci_event_packet+0x806/0x1290 [ 1198.130337][T10848] ? lock_chain_count+0x20/0x20 [ 1198.135211][T10848] ? hci_conn_valid+0x220/0x220 [ 1198.140071][T10848] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1198.145979][T10848] ? kcov_remote_start+0x50f/0x810 [ 1198.151105][T10848] ? lockdep_hardirqs_on+0x94/0x140 [ 1198.156345][T10848] ? hci_send_to_monitor+0x9c/0x4a0 [ 1198.161583][T10848] hci_rx_work+0x3eb/0xd40 [ 1198.166012][T10848] ? _raw_spin_unlock+0x40/0x40 [ 1198.170878][T10848] ? process_one_work+0x7b4/0x1160 [ 1198.176018][T10848] process_one_work+0x8ab/0x1160 [ 1198.180983][T10848] ? worker_detach_from_pool+0x240/0x240 [ 1198.186630][T10848] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1198.191667][T10848] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1198.197242][T10848] ? wq_worker_running+0x97/0x190 [ 1198.202329][T10848] worker_thread+0xaf5/0x12a0 [ 1198.207075][T10848] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1198.212995][T10848] kthread+0x29d/0x330 [ 1198.217081][T10848] ? worker_clr_flags+0x1a0/0x1a0 [ 1198.222120][T10848] ? kthread_blkcg+0xd0/0xd0 [ 1198.226718][T10848] ret_from_fork+0x1f/0x30 [ 1198.231183][T10848] [ 1198.235480][T10848] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1198.248798][T10848] Bluetooth: hci2: failed to register connection device [ 1199.957172][T10848] Bluetooth: hci2: command 0x0409 tx timeout [ 1202.613479][T10848] Bluetooth: hci2: command 0x041b tx timeout [ 1202.771362][T11948] netlink: 'syz.6.1935': attribute type 1 has an invalid length. [ 1204.092886][T11955] x_tables: duplicate underflow at hook 3 [ 1204.110471][T11955] blktrace: Concurrent blktraces are not allowed on sg0 [ 1204.121849][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1937'. [ 1204.697426][T10848] Bluetooth: hci2: command 0x040f tx timeout [ 1209.309918][T10848] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1209.322410][ T8119] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 1209.339538][ T8119] CPU: 0 PID: 8119 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1209.347130][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1209.357205][ T8119] Workqueue: hci3 hci_rx_work [ 1209.361922][ T8119] Call Trace: [ 1209.365208][ T8119] [ 1209.368147][ T8119] dump_stack_lvl+0x188/0x24e [ 1209.372862][ T8119] ? show_regs_print_info+0x12/0x12 [ 1209.378091][ T8119] ? load_image+0x410/0x410 [ 1209.382615][ T8119] sysfs_create_dir_ns+0x26a/0x290 [ 1209.387744][ T8119] ? __lock_acquire+0x7c40/0x7c40 [ 1209.392782][ T8119] ? sysfs_warn_dup+0xa0/0xa0 [ 1209.397486][ T8119] ? do_raw_spin_unlock+0x11d/0x230 [ 1209.402738][ T8119] kobject_add_internal+0x617/0xca0 [ 1209.408021][ T8119] kobject_add+0x160/0x230 [ 1209.412454][ T8119] ? kobject_init+0x1c0/0x1c0 [ 1209.417145][ T8119] ? __raw_spin_lock_init+0x41/0x100 [ 1209.422439][ T8119] ? klist_children_get+0x50/0x50 [ 1209.427481][ T8119] ? get_device_parent+0x121/0x3e0 [ 1209.432641][ T8119] device_add+0x470/0x1050 [ 1209.437085][ T8119] hci_conn_add_sysfs+0xd1/0x1e0 [ 1209.442047][ T8119] hci_conn_complete_evt+0x875/0x1450 [ 1209.447467][ T8119] ? hci_inquiry_result_evt+0x520/0x520 [ 1209.453041][ T8119] ? __skb_clone+0x446/0x6c0 [ 1209.457655][ T8119] ? skb_pull_data+0xec/0x1f0 [ 1209.462363][ T8119] ? hci_inquiry_result_evt+0x520/0x520 [ 1209.467923][ T8119] hci_event_packet+0x806/0x1290 [ 1209.472877][ T8119] ? lock_chain_count+0x20/0x20 [ 1209.477746][ T8119] ? hci_conn_valid+0x220/0x220 [ 1209.482601][ T8119] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1209.488512][ T8119] ? kcov_remote_start+0x50f/0x810 [ 1209.493635][ T8119] ? lockdep_hardirqs_on+0x94/0x140 [ 1209.498856][ T8119] ? hci_send_to_monitor+0x9c/0x4a0 [ 1209.504075][ T8119] hci_rx_work+0x3eb/0xd40 [ 1209.508519][ T8119] ? _raw_spin_unlock+0x40/0x40 [ 1209.513392][ T8119] ? process_one_work+0x7b4/0x1160 [ 1209.518523][ T8119] process_one_work+0x8ab/0x1160 [ 1209.523511][ T8119] ? worker_detach_from_pool+0x240/0x240 [ 1209.529172][ T8119] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1209.534212][ T8119] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1209.539777][ T8119] ? wq_worker_running+0x97/0x190 [ 1209.544824][ T8119] worker_thread+0xaf5/0x12a0 [ 1209.549529][ T8119] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1209.555465][ T8119] kthread+0x29d/0x330 [ 1209.559544][ T8119] ? worker_clr_flags+0x1a0/0x1a0 [ 1209.564600][ T8119] ? kthread_blkcg+0xd0/0xd0 [ 1209.569240][ T8119] ret_from_fork+0x1f/0x30 [ 1209.573718][ T8119] [ 1209.580414][ T8119] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1209.593726][ T8119] Bluetooth: hci3: failed to register connection device [ 1210.067311][T11969] kernel profiling enabled (shift: 5) [ 1211.477350][ T8119] Bluetooth: hci3: command 0x0409 tx timeout [ 1213.497045][ T8119] Bluetooth: hci3: command 0x041b tx timeout [ 1215.925157][ T8119] Bluetooth: hci3: command 0x040f tx timeout [ 1216.764410][T12012] x_tables: duplicate underflow at hook 3 [ 1216.781038][T12012] blktrace: Concurrent blktraces are not allowed on sg0 [ 1216.790997][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1950'. [ 1225.973462][ T8119] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 1225.988034][T10848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:200' [ 1226.004962][T10848] CPU: 1 PID: 10848 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1226.012624][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1226.022729][T10848] Workqueue: hci5 hci_rx_work [ 1226.027435][T10848] Call Trace: [ 1226.030738][T10848] [ 1226.033679][T10848] dump_stack_lvl+0x188/0x24e [ 1226.038391][T10848] ? show_regs_print_info+0x12/0x12 [ 1226.043619][T10848] ? load_image+0x410/0x410 [ 1226.048174][T10848] sysfs_create_dir_ns+0x26a/0x290 [ 1226.053366][T10848] ? __lock_acquire+0x7c40/0x7c40 [ 1226.058435][T10848] ? sysfs_warn_dup+0xa0/0xa0 [ 1226.063142][T10848] ? do_raw_spin_unlock+0x11d/0x230 [ 1226.068364][T10848] kobject_add_internal+0x617/0xca0 [ 1226.073598][T10848] kobject_add+0x160/0x230 [ 1226.078032][T10848] ? kobject_init+0x1c0/0x1c0 [ 1226.082722][T10848] ? __raw_spin_lock_init+0x41/0x100 [ 1226.088021][T10848] ? klist_children_get+0x50/0x50 [ 1226.093068][T10848] ? get_device_parent+0x121/0x3e0 [ 1226.098203][T10848] device_add+0x470/0x1050 [ 1226.102641][T10848] hci_conn_add_sysfs+0xd1/0x1e0 [ 1226.107603][T10848] hci_conn_complete_evt+0x875/0x1450 [ 1226.112999][T10848] ? hci_inquiry_result_evt+0x520/0x520 [ 1226.118556][T10848] ? __skb_clone+0x446/0x6c0 [ 1226.123183][T10848] ? skb_pull_data+0xec/0x1f0 [ 1226.127909][T10848] ? hci_inquiry_result_evt+0x520/0x520 [ 1226.133532][T10848] hci_event_packet+0x806/0x1290 [ 1226.138510][T10848] ? lock_chain_count+0x20/0x20 [ 1226.143397][T10848] ? hci_conn_valid+0x220/0x220 [ 1226.148272][T10848] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1226.154215][T10848] ? kcov_remote_start+0x50f/0x810 [ 1226.159377][T10848] ? lockdep_hardirqs_on+0x94/0x140 [ 1226.164608][T10848] ? hci_send_to_monitor+0x9c/0x4a0 [ 1226.169857][T10848] hci_rx_work+0x3eb/0xd40 [ 1226.174304][T10848] ? _raw_spin_unlock+0x40/0x40 [ 1226.179179][T10848] ? process_one_work+0x7b4/0x1160 [ 1226.184309][T10848] process_one_work+0x8ab/0x1160 [ 1226.189304][T10848] ? worker_detach_from_pool+0x240/0x240 [ 1226.194958][T10848] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1226.200007][T10848] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1226.205591][T10848] ? wq_worker_running+0x97/0x190 [ 1226.210651][T10848] worker_thread+0xaf5/0x12a0 [ 1226.215363][T10848] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1226.221285][T10848] kthread+0x29d/0x330 [ 1226.225360][T10848] ? worker_clr_flags+0x1a0/0x1a0 [ 1226.230398][T10848] ? kthread_blkcg+0xd0/0xd0 [ 1226.234999][T10848] ret_from_fork+0x1f/0x30 [ 1226.239442][T10848] [ 1226.250219][T10848] kobject_add_internal failed for hci5:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1226.264022][T10848] Bluetooth: hci5: failed to register connection device [ 1227.977117][T10848] Bluetooth: hci5: command 0x0409 tx timeout [ 1230.057121][T10848] Bluetooth: hci5: command 0x041b tx timeout [ 1233.104002][T10848] Bluetooth: hci5: command 0x040f tx timeout [ 1233.831353][T12073] netlink: 'syz.9.1965': attribute type 1 has an invalid length. [ 1238.516596][T12093] x_tables: duplicate underflow at hook 3 [ 1238.532794][T12093] blktrace: Concurrent blktraces are not allowed on sg0 [ 1238.541534][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'. [ 1238.700755][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.707348][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.855257][T10848] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1247.978378][T10848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 1247.995398][T10848] CPU: 0 PID: 10848 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1248.003107][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1248.013203][T10848] Workqueue: hci0 hci_rx_work [ 1248.017952][T10848] Call Trace: [ 1248.021267][T10848] [ 1248.024242][T10848] dump_stack_lvl+0x188/0x24e [ 1248.029024][T10848] ? show_regs_print_info+0x12/0x12 [ 1248.034277][T10848] ? load_image+0x410/0x410 [ 1248.038847][T10848] sysfs_create_dir_ns+0x26a/0x290 [ 1248.044009][T10848] ? __lock_acquire+0x7c40/0x7c40 [ 1248.049093][T10848] ? sysfs_warn_dup+0xa0/0xa0 [ 1248.053825][T10848] ? do_raw_spin_unlock+0x11d/0x230 [ 1248.059077][T10848] kobject_add_internal+0x617/0xca0 [ 1248.064339][T10848] kobject_add+0x160/0x230 [ 1248.068810][T10848] ? kobject_init+0x1c0/0x1c0 [ 1248.073593][T10848] ? __raw_spin_lock_init+0x41/0x100 [ 1248.078926][T10848] ? klist_children_get+0x50/0x50 [ 1248.084018][T10848] ? get_device_parent+0x121/0x3e0 [ 1248.089184][T10848] device_add+0x470/0x1050 [ 1248.093663][T10848] hci_conn_add_sysfs+0xd1/0x1e0 [ 1248.098664][T10848] hci_conn_complete_evt+0x875/0x1450 [ 1248.104094][T10848] ? hci_inquiry_result_evt+0x520/0x520 [ 1248.109683][T10848] ? __skb_clone+0x446/0x6c0 [ 1248.114340][T10848] ? skb_pull_data+0xec/0x1f0 [ 1248.119060][T10848] ? hci_inquiry_result_evt+0x520/0x520 [ 1248.124650][T10848] hci_event_packet+0x806/0x1290 [ 1248.129641][T10848] ? lock_chain_count+0x20/0x20 [ 1248.134574][T10848] ? hci_conn_valid+0x220/0x220 [ 1248.139482][T10848] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1248.145427][T10848] ? kcov_remote_start+0x50f/0x810 [ 1248.150585][T10848] ? lockdep_hardirqs_on+0x94/0x140 [ 1248.155843][T10848] ? hci_send_to_monitor+0x9c/0x4a0 [ 1248.161125][T10848] hci_rx_work+0x3eb/0xd40 [ 1248.165598][T10848] ? _raw_spin_unlock+0x40/0x40 [ 1248.170508][T10848] ? process_one_work+0x7b4/0x1160 [ 1248.175670][T10848] process_one_work+0x8ab/0x1160 [ 1248.180678][T10848] ? worker_detach_from_pool+0x240/0x240 [ 1248.186368][T10848] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1248.191456][T10848] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1248.197050][T10848] ? wq_worker_running+0x97/0x190 [ 1248.202138][T10848] worker_thread+0xaf5/0x12a0 [ 1248.206891][T10848] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1248.212869][T10848] kthread+0x29d/0x330 [ 1248.216975][T10848] ? worker_clr_flags+0x1a0/0x1a0 [ 1248.222050][T10848] ? kthread_blkcg+0xd0/0xd0 [ 1248.226683][T10848] ret_from_fork+0x1f/0x30 [ 1248.231203][T10848] [ 1248.270032][T10848] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1248.284318][T10848] Bluetooth: hci0: failed to register connection device [ 1248.857207][T10848] Bluetooth: hci0: command 0x0409 tx timeout [ 1251.677965][T10848] Bluetooth: hci0: command 0x041b tx timeout [ 1251.747105][T10933] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1251.957068][T10933] usb 8-1: Using ep0 maxpacket: 32 [ 1251.964886][T10933] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1251.997284][T10933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.216700][T10933] usb 8-1: config 0 descriptor?? [ 1252.225813][T10933] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1253.027910][T10933] gspca_vc032x: reg_r err -110 [ 1253.037350][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.042744][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.066429][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.072021][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.091448][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.200436][T12146] IPVS: Error connecting to the multicast addr [ 1254.097019][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.102383][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.134216][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.137153][T10848] Bluetooth: hci0: command 0x040f tx timeout [ 1254.139622][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.150959][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.156281][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.161670][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.167053][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.172412][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.180280][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.236988][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1254.342152][T12152] x_tables: duplicate underflow at hook 3 [ 1254.367871][T12152] blktrace: Concurrent blktraces are not allowed on sg0 [ 1254.377653][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1984'. [ 1256.757110][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.762591][T10933] gspca_vc032x: I2c Bus Busy Wait 00 [ 1257.071502][T10933] gspca_vc032x: Unknown sensor... [ 1257.076853][T10933] vc032x: probe of 8-1:0.0 failed with error -22 [ 1257.086085][T10933] usb 8-1: USB disconnect, device number 3 [ 1257.588087][ T8119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1257.666598][ T8119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1257.675177][ T8119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1257.684292][ T8119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1257.692118][ T8119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1257.700626][ T8119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1259.692802][T12180] x_tables: duplicate underflow at hook 3 [ 1259.719241][T12180] blktrace: Concurrent blktraces are not allowed on sg0 [ 1259.777103][ T6680] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1259.817193][T10848] Bluetooth: hci4: command 0x0409 tx timeout [ 1261.897076][T10848] Bluetooth: hci4: command 0x041b tx timeout [ 1262.301056][ T6680] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1262.311089][ T6680] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.322594][ T6680] usb 7-1: config 0 descriptor?? [ 1262.365697][ T5270] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.632630][ T6680] ath6kl: Failed to submit usb control message: -71 [ 1262.650039][ T6680] ath6kl: unable to send the bmi data to the device: -71 [ 1262.696384][ T6680] ath6kl: Unable to send get target info: -71 [ 1262.727371][ T6680] ath6kl: Failed to init ath6kl core: -71 [ 1264.253538][T10848] Bluetooth: hci4: command 0x040f tx timeout [ 1264.317265][ T6680] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 1264.417203][ T6680] usb 7-1: USB disconnect, device number 7 [ 1264.536106][ T5270] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.811840][T12201] x_tables: duplicate underflow at hook 3 [ 1264.827606][T12201] blktrace: Concurrent blktraces are not allowed on sg0 [ 1266.297401][T10848] Bluetooth: hci4: command 0x0419 tx timeout [ 1267.484952][ T5270] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.938491][T10848] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 1268.941795][ T8119] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 1268.958719][ T8119] CPU: 1 PID: 8119 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1268.966307][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1268.976378][ T8119] Workqueue: hci1 hci_rx_work [ 1268.981095][ T8119] Call Trace: [ 1268.984384][ T8119] [ 1268.987327][ T8119] dump_stack_lvl+0x188/0x24e [ 1268.992039][ T8119] ? show_regs_print_info+0x12/0x12 [ 1268.997269][ T8119] ? load_image+0x410/0x410 [ 1269.001805][ T8119] sysfs_create_dir_ns+0x26a/0x290 [ 1269.006950][ T8119] ? __lock_acquire+0x7c40/0x7c40 [ 1269.012010][ T8119] ? sysfs_warn_dup+0xa0/0xa0 [ 1269.016704][ T8119] ? do_raw_spin_unlock+0x11d/0x230 [ 1269.021915][ T8119] kobject_add_internal+0x617/0xca0 [ 1269.027146][ T8119] kobject_add+0x160/0x230 [ 1269.031687][ T8119] ? kobject_init+0x1c0/0x1c0 [ 1269.036403][ T8119] ? __raw_spin_lock_init+0x41/0x100 [ 1269.041698][ T8119] ? klist_children_get+0x50/0x50 [ 1269.046740][ T8119] ? get_device_parent+0x121/0x3e0 [ 1269.051873][ T8119] device_add+0x470/0x1050 [ 1269.056312][ T8119] hci_conn_add_sysfs+0xd1/0x1e0 [ 1269.061278][ T8119] hci_conn_complete_evt+0x875/0x1450 [ 1269.066687][ T8119] ? hci_inquiry_result_evt+0x520/0x520 [ 1269.072262][ T8119] ? __skb_clone+0x446/0x6c0 [ 1269.076926][ T8119] ? skb_pull_data+0xec/0x1f0 [ 1269.081655][ T8119] ? hci_inquiry_result_evt+0x520/0x520 [ 1269.087270][ T8119] hci_event_packet+0x806/0x1290 [ 1269.092263][ T8119] ? lock_chain_count+0x20/0x20 [ 1269.097158][ T8119] ? hci_conn_valid+0x220/0x220 [ 1269.102056][ T8119] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1269.107981][ T8119] ? kcov_remote_start+0x50f/0x810 [ 1269.113120][ T8119] ? lockdep_hardirqs_on+0x94/0x140 [ 1269.118353][ T8119] ? hci_send_to_monitor+0x9c/0x4a0 [ 1269.123598][ T8119] hci_rx_work+0x3eb/0xd40 [ 1269.128062][ T8119] ? _raw_spin_unlock+0x40/0x40 [ 1269.132950][ T8119] ? process_one_work+0x7b4/0x1160 [ 1269.138199][ T8119] process_one_work+0x8ab/0x1160 [ 1269.143177][ T8119] ? worker_detach_from_pool+0x240/0x240 [ 1269.148841][ T8119] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1269.153899][ T8119] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1269.159481][ T8119] ? wq_worker_running+0x97/0x190 [ 1269.164539][ T8119] worker_thread+0xaf5/0x12a0 [ 1269.169260][ T8119] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1269.175205][ T8119] kthread+0x29d/0x330 [ 1269.179299][ T8119] ? worker_clr_flags+0x1a0/0x1a0 [ 1269.184356][ T8119] ? kthread_blkcg+0xd0/0xd0 [ 1269.188972][ T8119] ret_from_fork+0x1f/0x30 [ 1269.193433][ T8119] [ 1269.197315][ T8119] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1269.210666][ T8119] Bluetooth: hci1: failed to register connection device [ 1269.250284][ T5270] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.422707][T12157] chnl_net:caif_netlink_parms(): no params data found [ 1270.127059][ T4317] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1270.857155][ T4317] usb 6-1: Using ep0 maxpacket: 32 [ 1270.883201][ T4317] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1270.925150][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.942130][T12157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.985038][T12157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.014862][ T4317] usb 6-1: config 0 descriptor?? [ 1271.025020][T12157] device bridge_slave_0 entered promiscuous mode [ 1271.031990][ T8119] Bluetooth: hci1: command 0x0409 tx timeout [ 1271.079403][T12157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.302285][ T4317] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1271.357328][T12157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.432888][T12157] device bridge_slave_1 entered promiscuous mode [ 1271.824472][T12157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.041097][ T4317] gspca_vc032x: reg_r err -32 [ 1273.045873][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.097119][ T8119] Bluetooth: hci1: command 0x041b tx timeout [ 1273.143526][T12233] IPVS: Error connecting to the multicast addr [ 1273.179857][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.185240][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.211540][T12157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.288116][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.308075][T12157] team0: Port device team_slave_0 added [ 1273.327292][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.357315][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.361839][T12157] team0: Port device team_slave_1 added [ 1273.369723][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.382220][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.402156][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.420511][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.446301][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.457223][T11958] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1273.493244][T12157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.513279][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.540083][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.545427][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.562522][T12157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.577145][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.587297][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.592650][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.601266][T12157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.622103][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.629891][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.678881][T11958] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1273.708611][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.714326][ T4317] gspca_vc032x: Unknown sensor... [ 1273.720353][ T4317] vc032x: probe of 6-1:0.0 failed with error -22 [ 1273.732328][ T4317] usb 6-1: USB disconnect, device number 10 [ 1273.737057][T11958] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.765304][T12157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.802157][T11958] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1273.847314][T11958] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.905141][T11958] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1273.941854][T11958] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1273.974104][T11958] usb 8-1: Product: syz [ 1274.007077][T11958] usb 8-1: Manufacturer: syz [ 1274.036209][T11958] cdc_wdm 8-1:1.0: skipping garbage [ 1274.062154][T11958] cdc_wdm 8-1:1.0: skipping garbage [ 1274.088595][T11958] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 1274.238785][T11958] usb 8-1: USB disconnect, device number 4 [ 1274.690166][T12157] device hsr_slave_0 entered promiscuous mode [ 1274.892754][T12157] device hsr_slave_1 entered promiscuous mode [ 1275.177220][ T8119] Bluetooth: hci1: command 0x040f tx timeout [ 1279.277411][ T8119] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 1279.300172][T10848] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1279.960852][T12157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.290527][T12157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.337087][ T126] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1280.527202][ T126] usb 7-1: Using ep0 maxpacket: 32 [ 1280.535640][ T126] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1280.600228][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.640365][ T126] usb 7-1: config 0 descriptor?? [ 1280.668256][ T126] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1280.829766][T12299] x_tables: duplicate underflow at hook 3 [ 1280.852603][T12299] blktrace: Concurrent blktraces are not allowed on sg0 [ 1281.177882][ T126] gspca_vc032x: reg_r err -110 [ 1281.206820][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1281.337060][T10848] Bluetooth: hci5: command 0x0409 tx timeout [ 1282.441309][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1282.510224][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1283.674807][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1283.733019][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1283.804476][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1283.895035][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1283.972789][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.029505][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.087837][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.144418][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.206714][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.341948][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.415243][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.478311][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.514915][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.554761][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.585406][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 1284.592404][ T126] gspca_vc032x: Unknown sensor... [ 1284.602228][ T126] vc032x: probe of 7-1:0.0 failed with error -22 [ 1284.702846][T12157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.838881][T12301] IPVS: Error connecting to the multicast addr [ 1285.673186][ T126] usb 7-1: USB disconnect, device number 8 [ 1285.834667][T12157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.068254][ T22] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1286.303276][ T22] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1286.365440][ T22] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.559353][ T22] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1286.698285][ T22] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.845004][ T22] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1286.933709][ T22] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1286.985780][ T22] usb 10-1: Product: syz [ 1287.027390][ T22] usb 10-1: Manufacturer: syz [ 1287.055868][ T22] cdc_wdm 10-1:1.0: skipping garbage [ 1287.095525][ T22] cdc_wdm 10-1:1.0: skipping garbage [ 1287.121556][ T22] cdc_wdm: probe of 10-1:1.0 failed with error -22 [ 1287.174002][T10848] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 1287.174572][ T8119] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1287.267653][ T3600] usb 10-1: USB disconnect, device number 8 [ 1287.368677][T12336] FAULT_INJECTION: forcing a failure. [ 1287.368677][T12336] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.393942][ T5270] device hsr_slave_0 left promiscuous mode [ 1287.405950][ T5270] device hsr_slave_1 left promiscuous mode [ 1287.419567][ T5270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.438577][ T5270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.449042][T12336] CPU: 1 PID: 12336 Comm: syz.5.2023 Not tainted syzkaller #0 [ 1287.456582][T12336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1287.466716][T12336] Call Trace: [ 1287.470057][T12336] [ 1287.473033][T12336] dump_stack_lvl+0x188/0x24e [ 1287.477778][T12336] ? show_regs_print_info+0x12/0x12 [ 1287.483037][T12336] ? load_image+0x410/0x410 [ 1287.487601][T12336] ? __might_sleep+0xd0/0xd0 [ 1287.492248][T12336] ? __lock_acquire+0x7c40/0x7c40 [ 1287.497343][T12336] should_fail_ex+0x390/0x4c0 [ 1287.502123][T12336] should_failslab+0x5/0x20 [ 1287.506669][T12336] slab_pre_alloc_hook+0x59/0x300 [ 1287.511752][T12336] ? __list_lru_init+0xb0/0x600 [ 1287.516659][T12336] __kmem_cache_alloc_node+0x4f/0x270 [ 1287.522091][T12336] ? __list_lru_init+0xb0/0x600 [ 1287.526997][T12336] __kmalloc+0xa3/0x240 [ 1287.531221][T12336] __list_lru_init+0xb0/0x600 [ 1287.535975][T12336] alloc_super+0x766/0x930 [ 1287.540449][T12336] ? kill_litter_super+0xa0/0xa0 [ 1287.545442][T12336] sget_fc+0x2d4/0x750 [ 1287.549566][T12336] ? kill_litter_super+0xa0/0xa0 [ 1287.554554][T12336] ? fuse_reconfigure+0xb0/0xb0 [ 1287.559452][T12336] get_tree_nodev+0x26/0x160 [ 1287.564105][T12336] fuse_get_tree+0x2d7/0x4d0 [ 1287.568751][T12336] vfs_get_tree+0x88/0x270 [ 1287.573218][T12336] do_new_mount+0x247/0xa40 [ 1287.577778][T12336] __se_sys_mount+0x2e3/0x3d0 [ 1287.582515][T12336] ? __x64_sys_mount+0xc0/0xc0 [ 1287.587355][T12336] ? lockdep_hardirqs_on+0x94/0x140 [ 1287.592601][T12336] ? __x64_sys_mount+0x1c/0xc0 [ 1287.597427][T12336] do_syscall_64+0x4c/0xa0 [ 1287.601919][T12336] ? clear_bhb_loop+0x60/0xb0 [ 1287.606658][T12336] ? clear_bhb_loop+0x60/0xb0 [ 1287.611431][T12336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1287.617396][T12336] RIP: 0033:0x7f8f6179e159 [ 1287.621866][T12336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.641527][T12336] RSP: 002b:00007f8f625ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1287.650032][T12336] RAX: ffffffffffffffda RBX: 00007f8f61a25fa0 RCX: 00007f8f6179e159 [ 1287.658061][T12336] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1287.666082][T12336] RBP: 00007f8f61835024 R08: 0000200000000580 R09: 0000000000000000 [ 1287.674106][T12336] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1287.682127][T12336] R13: 00007f8f61a26038 R14: 00007f8f61a25fa0 R15: 00007ffc2ad0e568 [ 1287.690168][T12336] [ 1287.717150][ T5270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.755669][ T5270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.793722][ T5270] device bridge_slave_1 left promiscuous mode [ 1287.806602][ T5270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.850724][ T5270] device bridge_slave_0 left promiscuous mode [ 1287.868953][ T5270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.952264][ T5270] device veth1_macvtap left promiscuous mode [ 1287.970844][ T5270] device veth0_macvtap left promiscuous mode [ 1287.993625][ T5270] device veth1_vlan left promiscuous mode [ 1288.012746][ T5270] device veth0_vlan left promiscuous mode [ 1288.847089][ T8289] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1289.037075][ T8289] usb 10-1: Using ep0 maxpacket: 32 [ 1289.177045][T10848] Bluetooth: hci1: command 0x0409 tx timeout [ 1290.565627][ T8289] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1290.711085][ T8289] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.774914][ T8289] usb 10-1: config 0 descriptor?? [ 1290.822147][ T8289] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1290.867318][ T8119] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1291.009807][ T8289] gspca_vc032x: reg_r err -32 [ 1291.014639][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.020574][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.026011][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.031679][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.037333][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.042657][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.048541][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.053868][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.059618][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.756157][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.762043][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.767594][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.773029][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.782333][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.792362][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.798394][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.803796][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.810148][ T8289] gspca_vc032x: I2c Bus Busy Wait 00 [ 1291.815550][ T8289] gspca_vc032x: Unknown sensor... [ 1291.821111][ T8289] vc032x: probe of 10-1:0.0 failed with error -22 [ 1293.278087][T12372] x_tables: duplicate underflow at hook 3 [ 1293.347949][T12373] blktrace: Concurrent blktraces are not allowed on sg0 [ 1295.390251][ T5270] team0 (unregistering): Port device team_slave_1 removed [ 1295.841769][ T5270] team0 (unregistering): Port device team_slave_0 removed [ 1296.235858][ T5270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.518190][ T5270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.252097][ T5270] bond0 (unregistering): Released all slaves [ 1297.441367][T12366] IPVS: Error connecting to the multicast addr [ 1297.509098][T10933] usb 10-1: USB disconnect, device number 9 [ 1297.854890][T10848] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 1297.856209][ T8119] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1298.022938][T12157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1298.099743][T12157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1298.164990][T12157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1298.411949][T12157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1299.203909][T12157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.119460][ T8119] Bluetooth: hci1: command 0x0409 tx timeout [ 1300.199846][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.206174][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.229740][ T7596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1300.266988][ T4319] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1300.269736][ T7596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1300.311244][ T5270] Bluetooth: hci2: Frame reassembly failed (-84) [ 1300.324651][T12157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.347115][ T5270] Bluetooth: hci2: Frame reassembly failed (-84) [ 1300.381814][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1300.431772][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1300.462656][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.469893][ T6456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.489013][ T4319] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1300.509290][ T4319] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.547278][ T4319] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1300.548457][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1300.589887][ T4319] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.638516][ T4319] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1300.648263][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1300.677103][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1300.685179][ T4319] usb 7-1: Product: syz [ 1300.703164][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.710393][ T6456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.727147][ T4319] usb 7-1: Manufacturer: syz [ 1300.772676][ T4319] cdc_wdm 7-1:1.0: skipping garbage [ 1300.782550][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1300.821766][ T4319] cdc_wdm 7-1:1.0: skipping garbage [ 1300.839231][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1300.867047][ T4319] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 1300.929976][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1301.006368][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1301.029246][ T4317] usb 7-1: USB disconnect, device number 9 [ 1301.065783][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1301.115374][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1301.155360][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1301.206362][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1301.235521][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1301.254785][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1301.313989][T12157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1301.360315][T12157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1301.383575][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1302.257365][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1302.387514][T10848] Bluetooth: hci2: command 0x1003 tx timeout [ 1302.395379][ T8119] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1302.567806][ T8119] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1302.576752][T10848] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1302.703167][T12424] x_tables: duplicate underflow at hook 3 [ 1302.717813][T12424] blktrace: Concurrent blktraces are not allowed on sg0 [ 1304.617192][T10848] Bluetooth: hci0: command 0x0409 tx timeout [ 1305.883393][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1305.908651][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1305.953501][T12157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.893542][T12441] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1307.396374][T12441] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1309.467572][T10848] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 1309.467934][ T8119] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1311.033225][T12488] x_tables: duplicate underflow at hook 3 [ 1311.049268][T12488] blktrace: Concurrent blktraces are not allowed on sg0 [ 1311.497001][ T8119] Bluetooth: hci1: command 0x0409 tx timeout [ 1314.771624][T10848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1315.549829][T10848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1315.559600][T10848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1316.493764][T10848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1316.507931][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1316.515191][T10848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1316.563685][ T5258] Bluetooth: hci6: Frame reassembly failed (-84) [ 1316.987038][T11958] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1317.928974][T12516] siw: device registration error -23 [ 1318.548240][ T8119] Bluetooth: hci4: command 0x0409 tx timeout [ 1318.617234][T10848] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1318.623805][ T8119] Bluetooth: hci6: command 0x1003 tx timeout [ 1319.087533][T11958] usb 6-1: device descriptor read/all, error -71 [ 1319.840034][T12498] chnl_net:caif_netlink_parms(): no params data found [ 1320.233028][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.357161][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.366021][T12498] device bridge_slave_0 entered promiscuous mode [ 1320.511462][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.554822][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.597661][T12498] device bridge_slave_1 entered promiscuous mode [ 1320.617551][ T8119] Bluetooth: hci4: command 0x041b tx timeout [ 1320.693071][T12498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.747127][T12498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.231369][T12498] team0: Port device team_slave_0 added [ 1321.390412][T12498] team0: Port device team_slave_1 added [ 1321.672820][ T8119] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1321.687680][T10848] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1321.818128][T12498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.825152][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.004901][T12498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.697530][T10848] Bluetooth: hci4: command 0x040f tx timeout [ 1323.051081][T12498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.067378][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.294741][T12498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.738087][T10848] Bluetooth: hci0: command 0x0409 tx timeout [ 1323.753398][T12498] device hsr_slave_0 entered promiscuous mode [ 1323.838688][T11958] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1323.890612][T12498] device hsr_slave_1 entered promiscuous mode [ 1323.909479][T12498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1323.927037][T12498] Cannot create hsr debugfs directory [ 1324.059828][T11958] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.080350][T11958] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1324.131487][T11958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.184098][T11958] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 1324.247614][T11958] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 1325.060452][T12585] siw: device registration error -23 [ 1325.695612][T10848] Bluetooth: hci4: command 0x0419 tx timeout [ 1325.704290][T11958] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 1325.719129][T11958] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 1325.726950][T11958] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 1325.745661][T11958] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1325.755082][T11958] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1325.769259][T11958] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 1325.826222][T11958] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1325.883913][T11958] usb 7-1: USB disconnect, device number 10 [ 1326.047321][T11958] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1326.120278][T11958] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1326.166180][T11958] keyspan 7-1:1.0: device disconnected [ 1326.959658][T10848] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 1327.947599][ T5258] device hsr_slave_0 left promiscuous mode [ 1328.047223][ T5258] device hsr_slave_1 left promiscuous mode [ 1328.117487][ T5258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.380037][ T5258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.467769][ T5258] device bridge_slave_1 left promiscuous mode [ 1328.474078][ T5258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.626527][ T5258] device bridge_slave_0 left promiscuous mode [ 1328.669752][ T5258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.726684][ T5066] Bluetooth: hci2: Frame reassembly failed (-84) [ 1329.027437][T10848] Bluetooth: hci5: command 0x0409 tx timeout [ 1330.561101][ T5258] team0 (unregistering): Port device team_slave_1 removed [ 1330.778087][T10848] Bluetooth: hci2: command 0x1003 tx timeout [ 1330.785951][ T8119] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1330.890520][ T5258] team0 (unregistering): Port device team_slave_0 removed [ 1331.166227][ T5258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.486103][ T5258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.452909][T12657] siw: device registration error -23 [ 1335.413499][ T5258] bond0 (unregistering): Released all slaves [ 1336.172649][ T8119] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 1338.217168][T10848] Bluetooth: hci1: command 0x0409 tx timeout [ 1340.168270][T12498] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1340.307229][T12498] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1340.366332][T12498] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1341.827066][ T8119] Bluetooth: hci2: command 0x1003 tx timeout [ 1341.834683][T10848] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1342.043964][T12498] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1342.517789][T12498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.576126][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1342.617675][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1342.650669][T12498] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.679442][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1342.689574][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1342.727506][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.734706][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.828439][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1342.842770][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1342.894649][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1342.927667][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.934838][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.018093][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1343.070797][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1343.131106][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1343.169535][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1343.206822][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1343.228200][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1343.284359][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1343.346691][T12498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1343.414582][T12498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1343.481119][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1343.499630][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1343.597857][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1343.621098][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1343.678716][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1344.852199][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1344.870015][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1344.997217][T12498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.264027][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1346.282376][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1346.342737][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1346.355423][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1346.365514][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1346.381071][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1346.392323][T12498] device veth0_vlan entered promiscuous mode [ 1346.417574][T12498] device veth1_vlan entered promiscuous mode [ 1346.480615][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1346.494124][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1346.506344][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1346.519676][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1346.533371][T12498] device veth0_macvtap entered promiscuous mode [ 1346.551263][T12498] device veth1_macvtap entered promiscuous mode [ 1346.576373][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.588623][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.598971][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.610321][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.620538][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.633647][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.643886][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.661021][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.671518][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.700154][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.712030][T12498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.720934][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1346.730483][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1346.740948][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1346.750334][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1346.762801][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.775793][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.787251][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.799368][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.809825][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.820831][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.830959][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.841888][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.852934][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.863901][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.876286][T12498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.887447][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1346.896809][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1346.917821][T12498] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.926599][T12498] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.936104][T12498] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.946381][T12498] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.056753][ T6456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.087323][ T6456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.096829][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1347.138112][ T7591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.146027][ T7591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.154610][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1349.766212][ T7591] Bluetooth: hci2: Frame reassembly failed (-84) [ 1350.774755][T12765] siw: device registration error -23 [ 1351.817051][T10848] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1357.496048][ T8119] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 1359.790085][T12788] Bluetooth: hci1: Opcode 0x080f failed: -110 [ 1359.804727][ T8119] Bluetooth: hci1: command 0x080f tx timeout [ 1359.811598][ T8119] Bluetooth: hci4: command 0x0409 tx timeout [ 1362.697669][ T49] Bluetooth: hci2: command 0x1003 tx timeout [ 1362.705111][T10848] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1363.036457][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.042870][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.497029][ T49] Bluetooth: hci2: command 0x1003 tx timeout [ 1369.497156][T10848] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1370.343114][T10848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 1370.353293][T10848] CPU: 0 PID: 10848 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1370.360989][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1370.371080][T10848] Workqueue: hci4 hci_rx_work [ 1370.375797][T10848] Call Trace: [ 1370.379098][T10848] [ 1370.382064][T10848] dump_stack_lvl+0x188/0x24e [ 1370.386778][T10848] ? show_regs_print_info+0x12/0x12 [ 1370.392028][T10848] ? load_image+0x410/0x410 [ 1370.396577][T10848] sysfs_create_dir_ns+0x26a/0x290 [ 1370.401724][T10848] ? __lock_acquire+0x7c40/0x7c40 [ 1370.406776][T10848] ? sysfs_warn_dup+0xa0/0xa0 [ 1370.411496][T10848] ? do_raw_spin_unlock+0x11d/0x230 [ 1370.416726][T10848] kobject_add_internal+0x617/0xca0 [ 1370.421964][T10848] kobject_add+0x160/0x230 [ 1370.426413][T10848] ? kobject_init+0x1c0/0x1c0 [ 1370.431118][T10848] ? __raw_spin_lock_init+0x41/0x100 [ 1370.436430][T10848] ? klist_children_get+0x50/0x50 [ 1370.441490][T10848] ? get_device_parent+0x121/0x3e0 [ 1370.446650][T10848] device_add+0x470/0x1050 [ 1370.451107][T10848] hci_conn_add_sysfs+0xd1/0x1e0 [ 1370.456083][T10848] hci_conn_complete_evt+0x875/0x1450 [ 1370.461494][T10848] ? hci_inquiry_result_evt+0x520/0x520 [ 1370.467060][T10848] ? __skb_clone+0x446/0x6c0 [ 1370.471686][T10848] ? skb_pull_data+0xec/0x1f0 [ 1370.476386][T10848] ? hci_inquiry_result_evt+0x520/0x520 [ 1370.481959][T10848] hci_event_packet+0x806/0x1290 [ 1370.486932][T10848] ? lock_chain_count+0x20/0x20 [ 1370.491812][T10848] ? hci_conn_valid+0x220/0x220 [ 1370.496685][T10848] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1370.502613][T10848] ? kcov_remote_start+0x50f/0x810 [ 1370.507754][T10848] ? lockdep_hardirqs_on+0x94/0x140 [ 1370.512987][T10848] ? hci_send_to_monitor+0x9c/0x4a0 [ 1370.518223][T10848] hci_rx_work+0x3eb/0xd40 [ 1370.522675][T10848] ? _raw_spin_unlock+0x40/0x40 [ 1370.527661][T10848] ? process_one_work+0x7b4/0x1160 [ 1370.532843][T10848] process_one_work+0x8ab/0x1160 [ 1370.537870][T10848] ? worker_detach_from_pool+0x240/0x240 [ 1370.543546][T10848] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1370.548783][T10848] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1370.554369][T10848] ? wq_worker_running+0x97/0x190 [ 1370.559433][T10848] worker_thread+0xaf5/0x12a0 [ 1370.564155][T10848] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1370.570095][T10848] kthread+0x29d/0x330 [ 1370.574212][T10848] ? worker_clr_flags+0x1a0/0x1a0 [ 1370.579271][T10848] ? kthread_blkcg+0xd0/0xd0 [ 1370.583886][T10848] ret_from_fork+0x1f/0x30 [ 1370.588344][T10848] [ 1370.596993][T10848] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1370.610343][T10848] Bluetooth: hci4: failed to register connection device [ 1371.550160][T12896] sctp: failed to load transform for md5: -2 [ 1372.697088][T10848] Bluetooth: hci4: command 0x041b tx timeout [ 1372.828546][ T9907] Bluetooth: hci2: Frame reassembly failed (-84) [ 1375.559382][T10848] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1375.566642][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 1375.572825][ T49] Bluetooth: hci2: command 0x1003 tx timeout [ 1380.248561][T12929] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1381.305694][ T4380] Bluetooth: hci2: Frame reassembly failed (-84) [ 1381.325714][ T4380] Bluetooth: hci2: Frame reassembly failed (-84) [ 1383.257309][ T8119] Bluetooth: hci2: command 0x1003 tx timeout [ 1383.263741][T12929] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1384.902934][T12929] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1387.902925][ T4326] Bluetooth: hci6: Frame reassembly failed (-84) [ 1387.916990][ T4326] Bluetooth: hci6: Frame reassembly failed (-84) [ 1388.298445][ T26] audit: type=1326 audit(1788669433.782:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1388.428851][ T26] audit: type=1326 audit(1788669433.812:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1388.626376][ T26] audit: type=1326 audit(1788669433.812:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1388.778096][ T26] audit: type=1326 audit(1788669433.812:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1388.955839][ T26] audit: type=1326 audit(1788669433.812:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1389.053272][ T8119] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 1389.062067][ T49] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1389.370552][ T26] audit: type=1326 audit(1788669433.812:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1389.987327][T12929] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1389.993943][ T49] Bluetooth: hci6: command 0x1003 tx timeout [ 1390.167159][ T26] audit: type=1326 audit(1788669433.812:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1390.464890][ T26] audit: type=1326 audit(1788669433.812:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1390.826650][ T26] audit: type=1326 audit(1788669433.812:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1390.900130][ T26] audit: type=1326 audit(1788669433.812:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.5.2188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6179e159 code=0x7ffc0000 [ 1391.099650][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 1391.614035][T13105] syz.9.2201 uses obsolete (PF_INET,SOCK_PACKET) [ 1392.159843][ T7856] Bluetooth: hci7: Frame reassembly failed (-84) [ 1393.024086][T12929] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1393.024536][ T8119] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1394.217279][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1394.223961][ T8119] Bluetooth: hci7: command 0x1003 tx timeout [ 1395.097421][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 1401.027527][ T49] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1401.997998][ T49] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1403.097013][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 1405.252991][ T49] Bluetooth: hci2: command 0x1003 tx timeout [ 1405.259622][ T8119] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1408.477500][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1408.477517][ T26] audit: type=1326 audit(1788669453.972:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13232 comm="syz.9.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f5f79e159 code=0x0 [ 1408.599265][ T49] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1408.599729][ T8119] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1411.280824][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 1413.598429][T12929] Bluetooth: hci2: command 0x1003 tx timeout [ 1413.606055][ T8119] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1416.777113][T12929] Bluetooth: hci2: command 0x1003 tx timeout [ 1416.784661][ T8119] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1417.230704][ T8119] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1417.257006][T12929] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1419.257361][T12929] Bluetooth: hci0: command 0x0409 tx timeout [ 1420.473404][T13300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1420.549065][T13300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1420.564414][T13300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1423.031847][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.038314][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.489166][T13320] Bluetooth: MGMT ver 1.22 [ 1428.248755][ T8119] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1428.277378][ T49] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1430.217252][T12929] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1430.331207][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 1435.502840][ T49] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 1435.503136][T12929] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1436.057217][ T7592] Bluetooth: hci2: Frame reassembly failed (-84) [ 1437.577130][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 1438.057006][T12929] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1440.937629][T12929] Bluetooth: hci4: command 0x0406 tx timeout [ 1441.687844][T12929] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1441.766586][ T49] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1443.737016][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 1448.159242][T12929] Bluetooth: hci6: command 0x1003 tx timeout [ 1448.168804][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1454.557518][T12929] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1454.569378][ T8119] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1456.497489][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1456.815333][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 1461.429447][T13546] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1461.438423][T13546] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1461.447555][T13546] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1466.468709][ T8119] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1466.477427][ T8119] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1468.597170][ T8119] Bluetooth: hci3: command 0x0409 tx timeout [ 1472.247271][ T8119] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1472.257824][ T49] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1473.620121][T13622] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1473.628710][T13622] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1473.637480][T13622] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1474.296939][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 1474.564541][T13645] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1477.994022][ T49] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1477.995866][ T8119] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1480.067152][ T8119] Bluetooth: hci0: command 0x0409 tx timeout [ 1480.124379][T13720] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1480.132886][T13720] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1480.141550][T13720] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1483.161122][ T8119] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 1483.339079][ T49] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1484.462521][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.468946][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.707241][T13782] ======================================================= [ 1484.707241][T13782] WARNING: The mand mount option has been deprecated and [ 1484.707241][T13782] and is ignored by this kernel. Remove the mand [ 1484.707241][T13782] option from the mount to silence this warning. [ 1484.707241][T13782] ======================================================= [ 1485.176943][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 1486.201422][T13804] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1486.210849][T13804] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1486.219485][T13804] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1487.183797][ T8119] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 1487.185104][ T49] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1489.257020][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 1492.794100][ T49] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 1492.795436][ T8119] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1494.919518][T13888] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1494.928142][T13888] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1494.937098][T13888] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1495.807136][ T8119] Bluetooth: hci0: command 0x0409 tx timeout [ 1499.416325][ T8119] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1502.663233][T13956] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1502.671774][T13956] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1502.680399][T13956] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1504.540253][T13969] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1504.548756][T13969] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1504.557418][T13969] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1507.081045][ T8119] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1509.225044][T14019] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1509.233568][T14019] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1509.242220][T14019] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1514.372021][ T8119] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1515.672429][T14083] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1515.681023][T14083] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1515.689646][T14083] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1521.058944][ T8119] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 1523.097379][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 1528.847129][T14174] loop4: detected capacity change from 0 to 7 [ 1529.701072][T14174] Dev loop4: unable to read RDB block 7 [ 1529.707018][T14174] loop4: unable to read partition table [ 1529.712795][T14174] loop4: partition table beyond EOD, truncated [ 1529.719098][T14174] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1530.136407][ T49] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 1530.174785][T14164] syz.6.2455 (14164) used greatest stack depth: 20528 bytes left [ 1532.136903][ T8119] Bluetooth: hci5: command 0x0409 tx timeout [ 1536.300384][T14220] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1536.310991][T14220] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1536.319932][T14220] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1537.080203][T14225] loop4: detected capacity change from 0 to 7 [ 1537.929977][T14225] Dev loop4: unable to read RDB block 7 [ 1537.935583][T14225] loop4: unable to read partition table [ 1537.941367][T14225] loop4: partition table beyond EOD, truncated [ 1537.947593][T14225] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1544.548171][T14275] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1544.556558][T14275] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1544.565192][T14275] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1545.931520][T14278] loop4: detected capacity change from 0 to 7 [ 1546.772092][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.778543][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.832847][T14278] Dev loop4: unable to read RDB block 7 [ 1546.838492][T14278] loop4: unable to read partition table [ 1546.844245][T14278] loop4: partition table beyond EOD, truncated [ 1546.850448][T14278] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1547.011336][ T8119] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1549.017081][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 1553.414108][T14312] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1553.422930][T14312] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1553.432033][T14312] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1556.233578][T14339] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1556.242052][T14339] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1556.250666][T14339] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1557.738402][T14349] loop4: detected capacity change from 0 to 7 [ 1558.607951][T14349] Dev loop4: unable to read RDB block 7 [ 1558.613569][T14349] loop4: unable to read partition table [ 1558.619491][T14349] loop4: partition table beyond EOD, truncated [ 1558.625718][T14349] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1561.053628][T14378] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1561.062155][T14378] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1561.070735][T14378] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1566.123557][T14410] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1566.132472][T14410] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1566.141123][T14410] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1567.731737][T14428] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1567.740166][T14428] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1567.748766][T14428] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1573.247288][T14459] ------------[ cut here ]------------ [ 1573.253160][T14459] failed to allocate ring buffer on CPU 1 [ 1574.268505][T14471] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1574.277115][T14471] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1574.285643][T14471] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1574.733338][T14459] WARNING: CPU: 1 PID: 14459 at kernel/trace/ring_buffer.c:5860 trace_rb_cpu_prepare+0x349/0x3c0 [ 1574.744110][T14459] Modules linked in: [ 1574.748168][T14459] CPU: 1 PID: 14459 Comm: syz.5.2525 Not tainted syzkaller #0 [ 1574.755829][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1574.766162][T14459] RIP: 0010:trace_rb_cpu_prepare+0x349/0x3c0 [ 1574.772348][T14459] Code: f0 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d6 01 fd ff 48 c7 c7 60 73 90 8a 44 89 f6 e8 17 89 c8 ff <0f> 0b b8 f4 ff ff ff eb d4 e8 b9 01 fd ff 0f 0b e9 07 fd ff ff e8 [ 1574.792225][T14459] RSP: 0018:ffffc9000511fa98 EFLAGS: 00010246 [ 1574.798602][T14459] RAX: b6b10f5e45819700 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1574.806717][T14459] RDX: ffffc9001db9a000 RSI: 0000000000060613 RDI: 0000000000060614 [ 1574.814858][T14459] RBP: ffff888058cd2288 R08: ffffc9000511f727 R09: 1ffff92000a23ee4 [ 1574.823013][T14459] R10: dffffc0000000000 R11: fffff52000a23ee5 R12: ffff8880566e38b0 [ 1574.831762][T14459] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888058cd2288 [ 1574.839966][T14459] FS: 00007f8f625a96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1574.849018][T14459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1574.855677][T14459] CR2: 00007f52baeb4000 CR3: 000000005db45000 CR4: 00000000003506e0 [ 1574.863768][T14459] Call Trace: [ 1574.867210][T14459] [ 1574.870250][T14459] ? rb_get_reader_page+0xcd0/0xcd0 [ 1574.875586][T14459] cpuhp_invoke_callback+0x481/0x7e0 [ 1574.881065][T14459] ? cpuhp_issue_call+0x43c/0x7f0 [ 1574.886148][T14459] ? rb_get_reader_page+0xcd0/0xcd0 [ 1574.891461][T14459] cpuhp_issue_call+0x452/0x7f0 [ 1574.896353][T14459] ? _find_next_bit+0x87/0x130 [ 1574.901214][T14459] __cpuhp_state_add_instance_cpuslocked+0x229/0x600 [ 1574.907938][T14459] __cpuhp_state_add_instance+0x21/0x30 [ 1574.913498][T14459] __ring_buffer_alloc+0x336/0x5d0 [ 1574.918656][T14459] allocate_trace_buffers+0x70/0x2b0 [ 1574.924035][T14459] trace_array_create+0x2d6/0xcb0 [ 1574.929122][T14459] ? instance_mkdir+0xb9/0x120 [ 1574.933922][T14459] instance_mkdir+0xc8/0x120 [ 1574.938585][T14459] tracefs_syscall_mkdir+0xb7/0x110 [ 1574.943863][T14459] vfs_mkdir+0x386/0x570 [ 1574.948202][T14459] do_mkdirat+0x1d8/0x440 [ 1574.952567][T14459] ? vfs_mkdir+0x570/0x570 [ 1574.957032][T14459] __x64_sys_mkdirat+0x85/0x90 [ 1574.961807][T14459] do_syscall_64+0x4c/0xa0 [ 1574.966258][T14459] ? clear_bhb_loop+0x60/0xb0 [ 1574.970979][T14459] ? clear_bhb_loop+0x60/0xb0 [ 1574.975675][T14459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1574.981631][T14459] RIP: 0033:0x7f8f6179e159 [ 1574.986060][T14459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.005733][T14459] RSP: 002b:00007f8f625a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1575.014207][T14459] RAX: ffffffffffffffda RBX: 00007f8f61a26090 RCX: 00007f8f6179e159 [ 1575.022233][T14459] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1575.030242][T14459] RBP: 00007f8f61835024 R08: 0000000000000000 R09: 0000000000000000 [ 1575.038259][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1575.046243][T14459] R13: 00007f8f61a26128 R14: 00007f8f61a26090 R15: 00007ffc2ad0e568 [ 1575.054269][T14459] [ 1575.057329][T14459] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1575.064610][T14459] CPU: 1 PID: 14459 Comm: syz.5.2525 Not tainted syzkaller #0 [ 1575.072069][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1575.082135][T14459] Call Trace: [ 1575.085421][T14459] [ 1575.088360][T14459] dump_stack_lvl+0x188/0x24e [ 1575.093052][T14459] ? memcpy+0x3c/0x60 [ 1575.097137][T14459] ? show_regs_print_info+0x12/0x12 [ 1575.102362][T14459] ? load_image+0x410/0x410 [ 1575.106897][T14459] panic+0x2d3/0x710 [ 1575.110807][T14459] ? bpf_jit_dump+0xd0/0xd0 [ 1575.115331][T14459] __warn+0x2f8/0x4f0 [ 1575.119352][T14459] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 1575.124739][T14459] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 1575.130116][T14459] report_bug+0x2ba/0x4f0 [ 1575.134464][T14459] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 1575.139853][T14459] handle_bug+0x3a/0x70 [ 1575.144037][T14459] exc_invalid_op+0x16/0x40 [ 1575.148583][T14459] asm_exc_invalid_op+0x16/0x20 [ 1575.153456][T14459] RIP: 0010:trace_rb_cpu_prepare+0x349/0x3c0 [ 1575.159461][T14459] Code: f0 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d6 01 fd ff 48 c7 c7 60 73 90 8a 44 89 f6 e8 17 89 c8 ff <0f> 0b b8 f4 ff ff ff eb d4 e8 b9 01 fd ff 0f 0b e9 07 fd ff ff e8 [ 1575.179080][T14459] RSP: 0018:ffffc9000511fa98 EFLAGS: 00010246 [ 1575.185180][T14459] RAX: b6b10f5e45819700 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1575.193170][T14459] RDX: ffffc9001db9a000 RSI: 0000000000060613 RDI: 0000000000060614 [ 1575.201160][T14459] RBP: ffff888058cd2288 R08: ffffc9000511f727 R09: 1ffff92000a23ee4 [ 1575.209145][T14459] R10: dffffc0000000000 R11: fffff52000a23ee5 R12: ffff8880566e38b0 [ 1575.217142][T14459] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888058cd2288 [ 1575.225179][T14459] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 1575.230590][T14459] ? rb_get_reader_page+0xcd0/0xcd0 [ 1575.235804][T14459] cpuhp_invoke_callback+0x481/0x7e0 [ 1575.241112][T14459] ? cpuhp_issue_call+0x43c/0x7f0 [ 1575.246157][T14459] ? rb_get_reader_page+0xcd0/0xcd0 [ 1575.251373][T14459] cpuhp_issue_call+0x452/0x7f0 [ 1575.256245][T14459] ? _find_next_bit+0x87/0x130 [ 1575.261029][T14459] __cpuhp_state_add_instance_cpuslocked+0x229/0x600 [ 1575.267735][T14459] __cpuhp_state_add_instance+0x21/0x30 [ 1575.273360][T14459] __ring_buffer_alloc+0x336/0x5d0 [ 1575.278526][T14459] allocate_trace_buffers+0x70/0x2b0 [ 1575.283862][T14459] trace_array_create+0x2d6/0xcb0 [ 1575.288921][T14459] ? instance_mkdir+0xb9/0x120 [ 1575.293715][T14459] instance_mkdir+0xc8/0x120 [ 1575.298321][T14459] tracefs_syscall_mkdir+0xb7/0x110 [ 1575.303542][T14459] vfs_mkdir+0x386/0x570 [ 1575.307816][T14459] do_mkdirat+0x1d8/0x440 [ 1575.312170][T14459] ? vfs_mkdir+0x570/0x570 [ 1575.316612][T14459] __x64_sys_mkdirat+0x85/0x90 [ 1575.321406][T14459] do_syscall_64+0x4c/0xa0 [ 1575.325856][T14459] ? clear_bhb_loop+0x60/0xb0 [ 1575.330558][T14459] ? clear_bhb_loop+0x60/0xb0 [ 1575.335290][T14459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1575.341216][T14459] RIP: 0033:0x7f8f6179e159 [ 1575.345664][T14459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.365317][T14459] RSP: 002b:00007f8f625a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1575.373778][T14459] RAX: ffffffffffffffda RBX: 00007f8f61a26090 RCX: 00007f8f6179e159 [ 1575.381798][T14459] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1575.389790][T14459] RBP: 00007f8f61835024 R08: 0000000000000000 R09: 0000000000000000 [ 1575.397782][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1575.405769][T14459] R13: 00007f8f61a26128 R14: 00007f8f61a26090 R15: 00007ffc2ad0e568 [ 1575.413771][T14459] [ 1575.417385][T14459] Kernel Offset: disabled [ 1575.421844][T14459] Rebooting in 86400 seconds..