last executing test programs: 2m55.965235004s ago: executing program 3 (id=75): timerfd_create(0x5, 0x80000) r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x2, 0x300) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0) 2m51.933142748s ago: executing program 3 (id=84): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r4, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859894822800800000000000097bdb22d0000b420a1a83c5240f45f819e01177d94f98dd4992861acdfffffff160000000400002000", "0000000000000000113ddb2802e7234f00000000ddff00", [0x100000000, 0x82]}}) 2m50.639816759s ago: executing program 3 (id=86): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') r1 = fanotify_init(0x4, 0x400) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f00000006c0)=""/213, 0xd5}], 0x4) fanotify_mark(r1, 0x1, 0x40001018, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) creat(&(0x7f0000000480)='./file0\x00', 0x20) get_mempolicy(&(0x7f0000000000), 0x0, 0x8000000000000000, &(0x7f0000ffd000/0x3000)=nil, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x3, {0xffffffffffffffff}, {0xee00}, 0x1, 0x18a}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002880)=ANY=[@ANYBLOB="240000004000072bbd7000fedbdf0c067c00001000c2800c0069dedd9ae8bad8f6ffffd5d0d9ac2ebed83af2b8943a13fad18f49be1a580437f458d395aa2a33d3131071d28452beb46a34d7c6bae202440b06f1a5dec1e91bbe4fb26fe4dd6029eef9f1754e3780d78826fc5b9495c358d8", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r5 = getpid() syz_clone3(&(0x7f0000000040)={0x8180080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r5, r3, 0x0], 0x3}, 0x58) 2m49.378915307s ago: executing program 3 (id=89): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') r1 = fanotify_init(0x4, 0x400) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f00000006c0)=""/213, 0xd5}], 0x4) fanotify_mark(r1, 0x1, 0x40001018, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) creat(&(0x7f0000000480)='./file0\x00', 0x20) get_mempolicy(&(0x7f0000000000), 0x0, 0x8000000000000000, &(0x7f0000ffd000/0x3000)=nil, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x3, {0xffffffffffffffff}, {0xee00}, 0x1, 0x18a}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002880)=ANY=[@ANYBLOB="240000004000072bbd7000fedbdf0c067c00001000c2800c0069dedd9ae8bad8f6ffffd5d0d9ac2ebed83af2b8943a13fad18f49be1a580437f458d395aa2a33d3131071d28452beb46a34d7c6bae202440b06f1a5dec1e91bbe4fb26fe4dd6029eef9f1754e3780d78826fc5b9495c358d8", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r6 = getpid() syz_clone3(&(0x7f0000000040)={0x8180080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r6, r4, 0x0], 0x3}, 0x58) 2m44.825779167s ago: executing program 3 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setown(0xffffffffffffffff, 0x8, r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1000007) sched_getaffinity(r0, 0x8, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x27, 0x22, 0x0, &(0x7f00000004c0)="8e5763539bb91a84c8007f5b0800f08db9b5b254aaea0075d4a8248217893240553e", 0x0, 0x4200, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32, @ANYBLOB="080002007f00000108000400ac1e00"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="08003400060202020202000005001801010000000800a10006000000"], 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000800)=ANY=[@ANYBLOB="b0a40c00ffffffffffffffffffffffff5050505050509300b20b8481010002002d00dd9509692b17fbdc065bbbdefa577a1326c3fe53577c8c10497bc42fce4b799a41e320a9e9f7ab8def6eb1af98d095021fecfc0a151d0707efc1745dd01c339ed017432a1bb9a26980afaf4357778af85f11a072d925b22c52260d0594b825ae8b76bc7e96fce5fc905296a72dc0020caf9cbb6d94c7a791fb4d555daee378f3d0d21978f8df257434c53eaf2f516ad12f8a8f0019feadddec5a62a13924b57433ad0bc49de10ccafbb52b240a0ee0c8bea0a3f9f08bac8d24ceadf54151a3b8c87d9755b63cbc428ecbb3ccfe0c7525ba24575dc0ed09b0e7f507fc6969e251b8ac8677c921c05866aa69f93a7546fc168e5f8edcdc76dc3d9a230f6495508896ff2379260e914b39cdbfb79767f3a329197513c0bfb3bc8f6efa4939189b0d2a754545d0e522a48c741c085683cc89b9625f7db6f150f961f52a976a343d32c3bfd5025576ebf8c724a6b2661beace0996739b448f093c68254ec0226c4a725ac78c39736f574f6d8f8764c5cc5c73ddefdddd7012524a1ef34be245972820bbfb9dacbcdde7ea5e7bd8b622cdb7f3ea1ed9cbbab21a2133cf2a5999cd3fffc4bf953bf647c59eb0b8658a1fd1f403d7d254c1535fdb1893ac6120e29ea0746d3c72a20900e13af0e0ddd0e790b8d4f7135c4f40bfee0b02704cb534d445dc852f82a5b8022807e1cb0a653939c3246483db4a70c6bcb91082e75d61c0c46aa211e09deb0d0bbbab5f8e3b470ce476b45a160f8b7d39ebc89804f458d4b45394ae216ae5fee0dd20cc716ae7f9a708057d1c0c34496c9931a0748199ac17037692c15e39dfcef11807d980e2f6dbe40ef3a798beb61213e64e355c7195a9d873c18b96209564f74620a53b3692dde01e08c583b9d3149c5dd3dd600d3f9487d9d588fd02c0fccd8c1b7848b6141dc510bbb3c3023115482f970b55f3e4fb1d05d87b353a62ca648a47b451f8dfe0719de54767486ed2a345718a39aa47b0826ecf39bee3b172c0c06d642d923b5be101041934044e36989ec356c300800000f0f282c474852dba31c1b687645ed4dc9f2e30964079836982042f1bae6d71302821bd563ac171e5358df63e2a7f650d9b016b4a7832da69a1a0dfdfffd5620d091052cccd0c049e9497106a7d8fd8aaf26f0f7395e6d5e51d36db4d39b2548e7d463ecd8db016032bdbeac895c2a662ddd0d5151d6814286b6fd06a8ddb07871ab62a0af0e0c89de69c5015bfc34d86824a4add25d3f19059bed644bc83b6f4eeeee828454730a4b357aae9c6a2f3048fc6d9f664b62765f74fb57a7ad3f2c866319ebbca55bbfa95b3f624fc7b6fb949688571a3871825adb4ffc453a66cab11549fb7b5fd5a080b3de7ac88378e5fdee28c0901a5bda206048c4d4d36f98ebd188ad6efacb27155e6237baa4ef026bcad34de95b8fce58b5a84c663229472da24785bdf293bce0d24010fb2444384ea741c3253551e47567095df9eeca1803e0b"], 0x444) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000000000009111af000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r0, 0x0) r8 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) 2m43.707275273s ago: executing program 4 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000002a000701fcffffffffdbdf25037c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000001c0)={{0x9, 0x7}, 0x4}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000000)={'\x00', 0x1, 0x2000, 0x6, 0x0, 0x0, 0x2, 0x6000, '\x00', 0x81}) 2m43.558638747s ago: executing program 2 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) sendmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000014c0)="b5b2f4b5c3188aac3f84b3e17317ebae519d25c3a63e761930ee012572ef27f5114c9dc96b4e85f7a3a76d6804954e5d2f3dc9d3e73afb708c9ec2220def7872d18fb0efc6f5ade8b753ecb6488a82bea13895743e8420e6a07899c0b34e5e96b010c3456a2ba452ff77833771bf1177c8be2f4ae7f4cb599fab98e9a32a7ce4892a84c93eff10e1e3e3d0fbc79d269d8fe5ff2b78aa470dcb1b707bf4c13b418eb393cafdb7b780041bfad00537b6594d2c507cd0c817", 0xb7}, {&(0x7f0000000280)="570e031c7d6298565784", 0xa}, {&(0x7f0000001580)="6238e1574650555c686638bd5ccf0a21d1565362830c46f78a798f5910d89f5eabe4f4013fcb43e91a994df961223c9b5778df926ef3211e46bbf77147974fbb027c011276d7088fea813976de7fbfb054132f197d391851db0c72", 0x5b}, {&(0x7f0000001600)="4ab43a242e8dbe0edffb5a4a4871b3c907ad4400585d3aa7312b47db0c2b53", 0x1f}, {&(0x7f0000001640)="7b1404b6e9d2488f72137e0b0d707326c29f4d4b797b71ae1a467552fe4756b7a869ae329cfb2e09096e9a58f637e78a8299bdb80cec7917c1d8ba", 0x3b}, {&(0x7f0000001880)="d1811080f175dd1d02deee174a4f1f6252268873288e2c434d11e844ebdf921f4b7babab68079eb9d9d78f9b2bd9c3036433fed29f234507c7691e265d6792202589b92639d802c438c282df053cdfac178bec5ad43dc26006573ba2ba8251f0f029773b08570ef47b1829a18f2e19f7091fe29acf8e40644017422760b13e1b0db67631", 0x84}, {&(0x7f0000001780)="deecb4c8187844b9cedb9d5a920c7aa6d3d9e9deeedb8ef8eb9d52066a1bb7e194c0f44fb4741573841f84c5650805ab9681bda5d0477f954e5613ceb625d1cdd5616ae763644cc8fee9a5157d3da11fe6c14863d2b64f311acfac9314f6929b72ad59fd1f07365b9a3b1471ca21136105b3a48eb2c01c63a407d95f29988a83f1f57b1db444db5881821b16c3c12618049d3bd0ab542683e6403b75eb64d2ba9b22d93a17d27343cc3fe60e2c740663e11348d084b0efd8fd1056e8f724f3cf985aa69d91658053d4f3b4ca958dece4296efa", 0xd3}, {&(0x7f0000001680)="76b06112954cf33775faa6bac8f8e88f2ca8980d884cf78398376023e5c77cc4d42f3e3656b7e68d905ba0561dbe80b6d8aee35dec829c2dd36b27c66432c6688ac2b197e9f5e697e9dc3b75a57ed1dc3893a8403c398b09a484c57cd0d5a779c0e7058d5adb81327284399f84182b500b89153a03be9117a6691f511023843a18e1945e8ec7db1fa9fa7bdb8a74b5a6ce0791a3c16fc352631c24010b707a359508e6a18cac19e684e0218544563f48362a98a05e07eafbe498331fd907871296230b711618543bbe27660b7400125f9b27977c4e8a65a088fb8328d79695b9aff8d9a3126536", 0xe7}, {&(0x7f0000001940)="86470fba3eb8804a5d39e9eed2db980d2cb76b55c7f24274d06948f1e72e4be6c4c7ce29fd9b34bb5b5929ecf0ff5df861f9ae68b9723ff2e483", 0x3a}], 0x9, &(0x7f0000001cc0)=ANY=[@ANYBLOB="a0000000000000000d01000000080000981fcee841c5da830b2dc1257ef708af7b095fe4250818592f1421822d98535ed6767339de413bd9810ea517c05e69630d7fd2fe8ec3ec9a0c85cf12081b473c54ef119b856700f6b0b54f4e483827be289c5cfa91ad9ab0ef3d1a6fbb6abadddbe30016606fcce905bfaaeb86a825284dae7566a69ebcb8c6e8c11034bc9af7579b8a6717d303b888a104af0000000030000000000000000d0100000900000079876c7802a0a9df0977a4efc03748dd12d0ad3148d0f85a50381e04f700000030000000000000000c01000069600000e9a31ca65bd956248741d846b4c40d4c2b4917a6b78944ee6875ac00000000000001"], 0x200}}], 0x1, 0x4000040) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2m43.479678465s ago: executing program 1 (id=110): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r4, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859894822800800000000000097bdb22d0000b420a1a83c5240f45f819e01177d94f98dd4992861acdfffffff160000000400002000", "0000000000000000113ddb2802e7234f00000000ddff00", [0x100000000, 0x82]}}) 2m41.85537564s ago: executing program 1 (id=112): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180200, 0x0) fcntl$setsig(r0, 0xa, 0x10) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) timer_create(0x3, &(0x7f0000000080)={0x0, 0x2f, 0x4}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x19c, 0x32, 0x1, 0x70bd2b, 0x25dfdbfc, {0x3}, [@generic="6430bddf33dbba0a8d4a0f4cfa1a303a9896a0078183711e1662fea4753f72b779182231f0be3da117aa7a71", @nested={0xb5, 0x10f, 0x0, 0x1, [@generic="8b5516de370da2892bf5ee9c6f297b490529e0ec141108f2bb645ee9486b756f65ecf94514af9e4d3e2b7fe5a23a9d21e88213647f38f3212a5688c98249c5c82b0914f9dd97974cde4fda4c19c5296c3fecdda3048ec1eb6ac14c7055deb3611e6fa4b3a33dcf543a4740c0ad12b3f66c3aa207871aa6be4de9d03b4ee9362dc654a1bc05c5009040fab3122a8ed44e9e88c52e45f553c14b4bce5c1cac56f72d348ced7881e4ba57ad4d9280a98b550b"]}, @generic="f453d60658d2ddb97c5cc78196f5bd", @typed={0xc, 0x79, 0x0, 0x0, @u64}, @nested={0x87, 0xa7, 0x0, 0x1, [@generic="03f5df0b02441fd83d62cb89303fab46e25e0b1185e4c28e38823b8c0a9d4bd922785fb497553c2c9ea7566dc29f4088b2011ddf98979b4e5ce25bdc94ede0ad077650592e49609ff1393ba1462b4d73bf86e86efc21d5ff1651e70f42986fe10c2004b230b982603f1fc364482f631ecd1304", @nested={0x4, 0x13}, @nested={0x4, 0x8d}, @nested={0x4, 0x106}, @nested={0x4, 0xc3}]}]}, 0x19c}}, 0x4080) timer_getoverrun(r1) timer_delete(r1) r3 = gettid() sched_setscheduler(r3, 0x7, &(0x7f0000000400)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={r2, 0x5, 0xfffffffffffffffa, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000004c0)={{0xa, 0x3, 0x9188, 0xaa, 'syz1\x00', 0xfffffff7}, 0x2, 0x2, 0x9, r3, 0x3, 0xe1, 'syz1\x00', &(0x7f0000000480)=['/dev/ttyS3\x00', '\'\xbb\x00', '\x00'], 0xf}) syz_open_procfs$userns(r3, &(0x7f0000000600)) r5 = socket$inet(0x2, 0x2, 0x9) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) timer_create(0x0, &(0x7f00000006c0)={0x0, 0x2a, 0x4, @tid=r3}, &(0x7f0000000700)=0x0) timer_settime(r6, 0x1, &(0x7f0000000740)={{0x0, 0x3938700}}, &(0x7f0000000780)) bind$tipc(r4, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x2}}, 0x10) timer_delete(r6) getpid() ptrace(0x11, r3) r7 = shmget(0x1, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r7, 0x0) ioctl$DVB_DEMUX_DMX_REQBUFS(r4, 0xc0086f3c, &(0x7f0000000800)={0xe, 0x1ff}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000840)) timer_getoverrun(r1) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000008c0)={0x0, 0x0, "673937798209ef07c5d8a18ad15ebf76"}) 2m41.192195566s ago: executing program 2 (id=113): socket$inet_udp(0x2, 0x2, 0x0) capset(0x0, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011"], 0x0) 2m40.873387436s ago: executing program 4 (id=115): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000200"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100227bd7000fddbdf250000000014000b002001004627000000000000000000000008000700", @ANYRES32=r3, @ANYBLOB="080004007f00000114000c00fc0100"/28], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0xa395, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x3, 0x3, 0x1, 0x4000000000200, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001680)) r6 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000140)={@my=0x1}) capset(&(0x7f0000000500)={0x20080522}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 2m40.751073789s ago: executing program 1 (id=116): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000300)={0x10}, 0x10) write$char_usb(0xffffffffffffffff, &(0x7f0000000b40)="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", 0x516) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000014c0)={0x8, {"1774d10ed679a3761698425e02229859f202c5d54bb9aaa84c470671ed39e31fcd1987c3fab368535c1d72f471356277d68201ce587582e0b61c74107f26d9b357fed4393b6676c62cb12bb5104bc87b40120258613657f462d98097b32565f3c6a065c0ecf81581c270d0adccfdd40199844781374e1cee0129091296af79ff67a1f52be0c73043a7bb6860312b9b2d3514d05233defb9e2e9ae218a0731aa015e7f042114d434f4209218e37f80b240526d575cb63f1ca89512cd50e27c21a827328cbae0874b155506fd933a2e59978eaad1c78dbed757e9e0047f5ebd5e9faefad831e5c55100f289794dc5b2116838edc1caef786cead375259a7768ddfd6cf5ed870b7abdcef90350a64c1eb5d6e54de748d6349f7e5bcb0377df4744678e7700911426a8b8540996d54716ecd8cd3a9f8175f23d45f9a1497654d5f2e4dad96b4b34cce3a39eb084bb829e05c82249951f91b432999c302bbe8ae5f79bb8954ed23ad98f87b5c30d079b1b2186db53a3849f9dce0e4d49c04f3025d4b25bc0728ab25ea5d050dc2586bad7ac437d7a5881c06e8b9f3eae66dc2aa48d0edf763daa7c6aa90df3c61fd69cf301090790b608324f4cfcc23acdcbbf9bd7e224c5c33d817cddcd10e86cbbda0de36f52d2389fa84dad6ed1819ee056b9a80d0b81f2a6b4ac50192f87cabf46f5fc88abcfbeb4301632d353aaf091b7828d941cb1c0e1477e5761032a63dadc3c7f51de8429c63b4ad65e975e38f244c6fe40e8fc6c33c4a16deffbe1b0423e584f45023e196d92b5bbc7d1854c3f33e8b0b7c5d3d87f0119380e2d14d6630219dc0e31469c2af0db2d624cab5c276c396f7d1543370ca9d925ac2dc2204de8008517c815e9fa7cd56e53f82ce1d095cd08032f57835ecb14c39fd57c90e39557934cd278a609e2e05a07a791d417f4460d2c30c10e1ef92cc146b1f9ff6b98b2688e2f050c510feba0d6960d31522cec3f6b0f539f85898a6b6409dd179d990fb57026acd9382f505ce06db211d7a369f46d8ea5804502bc7829155794b19a098d095a00b520966e9f49c74111d1f0f0f75b07aff0d388650a63656c9e601269d2eff1740e87206416ec73c08b56570dd496846b4f1a5d76602b6594e173209e5e7cebbab3f9f29bf957d000510eff9ce7ee3fea7fff32f3b6ae414ac311e14550e9a597aec7e76df40b7352bf4ddbd00739041edda795aeaa2665ad51a836120054bb0c8c1d3149477167214a0f952c78039ec8a70e21158db26d8f0238f782a5d54dced90951085abd412ef2e5b9984c7e263dc3eac6c683e8b82c5d56b5fa1e2f65d5d0afd32bc66d76ddb87a41805e11137de7373a9f6366a9a314cc6d5e731abeb2e83f135798a8bdda1c47b36db21140a9278b86c520bdbc8338ccaf5fbd61d7e73750b38e4bb6c77c33bf5617086c8f97ab219b4f6c930fd717aed4f1fa0eebcda82322c561dcae23284e0bfa4bf7a5b4b19ff3fe3137c4e07c55543a7d3778ccfaf757fae541bcf475382cc8ab6a0ede61789652b528efaacfa804fc1583bdfeaea00565c70a5941dc7a947ed97d9b6688f6363edf0735e72d9b8a4b21e5cd2de518e27bfd41749eafa66f3452e941273050ceaf39435327737857d4718a31b83649b3dced6f37a9ce3621a83a7ba9163dea12990677d21781f4ff95a68dc4b268b4c5e428c0941443c98025773362acd28a88f8d7e42fa72b908ac6a816270d78541c98e36b838b83ba99656192624211a343e6e76e154ebdb1af56aa8489f6a30a6be0dcd84f80ab2d02ac7bee22e5f6207d74c4fda0c6d7cc71bea537718bf8bb1d3c2602903139449b046d09528b4331bd8e396bb9b5c0b15db16a72947eecd0f050de9ee9e6b82fcf48a7fbecf911fda3d013fa9941a60f41b9d1f56ac40f07e7259c7c79f17cb0a90c472d33aed227151fc93c76e7a1fee4675edae1a9fda95a5d2b42c7b13d84995ee1b6411c48329f529752d65601c034cdb13ea4051132ecb7f71953b43663053fc2a174b1a7694d6a8b3eb9facbaf8b7281e00357ee255816a489ca91656dc506deaa9c925a0e53600a9e7df5bc89db907a323ffeba03d3c06a4f0569a6c0cd02ca46eede0b9979aa5b40fa85b47b3d4f4aaf614b5b72ab9ea4289d08346759fbc4c0c25dd179d0efc994f4ace7612720dbd1b40395c95c43e24bdb5941295ccfdfb8b558b3234a80a2cfb5a50d96a31e2f1bcc4aba66994626f735d5fd742f0fc2ab2bcc0a73a6210e9b2222a3577f7cba7fd31459c58bef86eb76dd00fc165a16519d05f5aa5753b89c5391a051b2930b22eadbd1f4fc76fc675faf35bde9306ef48fa349f1978b84e033340681bf06966a833c03902d749444574b9e3e88e027b01d057db785a1e0d6b4135c3b6f2ac370a01351bcdf0474d4708675502e64e02d468c4e1454271dda60f82cefb8f6ec9bd871bb4c7a50a17f3d1d9c1bce2e79cb59704f78a31d13cd6678e20ea53e8d0bff1527bf76670982fab8cbe62377baf3c59f256e0bb21686402efd240cf07989832b02975e09b06da9486667869e543e7e868e1eb2242811f306f9cbeff4e606c62dbccfcc3dec265b396fa70c04b0816dddedfe5d70b44c35e387accad9945c91ced6665482f95e1bcd4fb603eb5add65c934d74a40dd37a24ea972babb9197dd85b102e67d5658dd8cd64b661fac6dae2e1d8f7325e2a62d1060836f53a2f3737c843a42662a7ed6eb63c5ca670273539529a760417f3d95fd4adfe86ae582742c1d54dd121e5ac820d3f547a647f72f723a66dc9830fbcc228559c77d3fd1d7443598717f69d58b9e7cc64e9aad2da810b45aaf01b377d54eddc0e97f6d1dc07aa33c30aa2667719cebf73e67d001bd967e6529f195b38dc6684758b557ce4ba3b47d84a03be117b58cc22adbab162bed3965f768982e5355d241f7f0c0943d389a61ef2c633d8b99c7b6deba3bc4e4c1b7366a178ed6bc1fb49ce646b411ccb940998d01a941546a5ad1988faa66ba6338a7562e17ee0af33e76d6dfcd0ed0fb92911b2c9cb880f367f6429a7446f090b90b83893d1c0ddb138959853b68a85894a6d5aa1d287c2a949f9331fedecf7de02a5b51014c917a42e33274e6d597bd6ab586f73ce61a96f9512a0ebc729869c664a895be61ec7882869852c922d3016726edc90f909af1d07e8a3671bf751135cd24066fad1992103bdcd5052059abb0e1df33560ab3637d66b1013f8a234e3238de1170da7addd84b21f1e870151f534d799ed6164a031686bc48d2ae5a89c81894a28a9cd944a535b907777397e739a3b6a8e7d54bef71907071bc2a047ca14d7ef2e9d9b66da86ce56bc62ada0c813d9d63aa899f77f5d804a13a79b0e2275c4ba387e970519e67d212193d91bd0a96a1068bc136616ab5153b1e4b956f1a44b5334e8fbf8abf57fb28a13a64ad6085497faf88556d721f8e0a0699469646f22789e6530c03c75f69279e809d95d444bd44af1d19d12046de9d524caedc84a506642edf34b409b41ccb9689f8597cacd20eee8beec2b3e89644c06750e080da5cc06f3cb10b854fc23d39e52bf95b88335e7536888d67ea92df5868c5835321234e70ebf80e4365c19693a3a640a30f5aec7c490b4ed32ff169e907e25f862fe5aa8a9238cf5cee03ec2ab9e2801239980e78162b560ae3d066351f944c31d8b57a20cd2419b05b0fdd9f8ca4b7a8e1e7955a6b66a264d6d4c56d83c15871ab3f3327284ff7cf5e8d6c7f762d755fac0c7784af9efd13c9337d38451acb23020f4934ef1708b362b5d5cf4b743fc0f9712860ca2977319e1226ed860c2be3caacc8465ba80a0a6856322bc352972fd3f3c0db3acd66d56fef139e48f3d63d3a62c532aa10485807269bac3348316d9fd1931cbfd2acaa5c4e9102872ab16500260f2aec57025c0d6dc1bd68bff597667469e8eb57459b1881c10bf9531c23a6d9349b06b0db60aa6f89a4e0162038ea1850348b72e16f7d647e092c1d7ca55ba5095e58b18dd56b72ba9cbc09598663e8f54b2594194de72475abafdb285d464007ab91a83b91e7c8d5968ecb452e011c0b74e4309180615c3f67c2cad6e086f3686fd5394efd86d8bd45829314a5eb4a0549613b668e7b97600ac9ffe59df44e87046de44432dcd0aaf0c02c446ee9aaf72e80ce989923d4720fd3b8257d3fec5af22737c1e426f9d851c7929d69713e4751d5d39de20f0990bbdcb579f36b778bba4b8c5bdeb78208412005fe7cee40fe86691b8b0d6d3234e74192528622c31022cc3a81f4a574efdb67348b36ae7fd5977059d911da17746b040f06e7bef06accf4ef1ea4f4402041a98f3760d0fb8851b4e7d1124f37b1c653cc9ac53f4e373f694f8c957c390b0801859a19776a83854d2b65766bb03321fdac9a23d3345821fc21195910245e5ad79926a08094b54e242f002634b7213e5c122e76514f9ce76ce2740741f7ffe30e036de63b737fb16b240c6eeef0c1c537d219449b95d497723088548267c229fd5a122f25f2c6ad2fc3ff28133305ca850c5e2d1453dbb4429a8ee3a8f173feb49b611764c536c668c9aca8b8ec575c2310044898a4657fa1dda2ec6f7b8906d9521525ffd30c2b5948a0250224ba4d6beb39008c3785ddad71ceedb34301706b71634bf74b33ea4c436c2006cc5275d7931855d376c6314f8a5431781c3347bd9b3edadb8fcb959a6bb48e9407de69458fcc61c3a62e32720d3fd838dad3f50e852a2aa6d26af70205f9d8e40d3b9232c2ea9a4f86857fec4f7772e43d6dabd1e34400a84d1d338941bc31ead12047bde3ccdd89c53fcbfeff9fba85be6c11447c4b088eb184186a5e41e17bc0011c008aa8b98b44c1c862f8f977d1998d8dce81688d3d80d0fa2b9b7e7f78f80361f525a7586f3d9e68456b55d6f0e8c99495da3a5f392fc8bfe4e42af04fe85936c99b7be80acd351bffa7b723717621d9ff37b5ef829dfdc6ab085c2e83df864306cee0096486e77a1f9d7b7cf5bd157a69a05a12bb735606ac360af2c23542e52880fe9328524d5b121e378319ef2e1a0874fc99842ac8ac04dd6c634b08d81ffd379e9a52573a1721f63a6c009c590e7f43fcbaa2c23c975dfd1a9d1a6dc21587511b4cfdb6f53721940a9f4dd3d8a2c6bdf9890a152e05c9b561518a58a861aae8cb02f1031a121297f6b0820b22d9d6e544adc91216f4a3c011dee24774bfddef418a56c5f0ed57e6f3ce2a76d812a19a9420141eca0ef3d86f552814cb8b2a68b53bb195b2dd2b44f49e93c742db0b2bd637fd247bc28755819a9e122725a6b4409baec607359268eb6cf83fcb674a3771b75b8a7ea0300c16a624333b69bc188c417557356ff7336cde8645f973ad18ee15fc3b34074e1ec58eb00b779a86c7dd7e76872798a12b29b3f446240770999853686f18a624beb6f07f614b413a0cbd954de99a6a79b7c9dbdec41fa172025d9e7d6e82935fc21b4c90bae9b4e9a84478e2289fda091ceacdd02bee2d96fa9d02982191418a9db4115ba049b045ef03dcffc0566d802df6d97dcd90660cd9c3a682bca8a48dd7168ab86074685993571843f74498f1d3a85ab9c63c83450809e86cb1bcf2f341cfd7db56090ad58c34e3a6a98ea65e7b5b439295b0ad6e6e695d88dec93c2ed776df7fc41ef0cec809500d2ce06ac217001748fa337b91f1bccf4d22ee7183e44a573cf95bdbe1e2e10d0c2d52e1992983f84fa1b109eb1495c9d25651510b75a2d5c689b7fe9", 0x1000}}, 0x1006) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1000, 0x4, 0x101, 0x10001, 0x10001, r0}) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0xa, @raw_data="a1ba13f40f2cfef6b97d8a203e4d114241a6f78b54f6440c83671937d5bb2d580f44e694c0b465ca5c8b8dbf57495c7b90537dbb42ca0360cfc94ee7db341d31935c6a1295ae04f40059ed100a0ce351732349d1f9863b5037c81b158dde58944b212c341fce3e4f824540180c7743be650a8fa1687274f883f237e0a0781178b33e7d5607531cb1ff6c193a7de21aec1c60b6f7723f0e3e014ec1ed68f5389a5a0b2e8468fde885f99d72fcde51ec5d95e12ec4c90f691b0eeb89fdbda449a479dd2581442ef67e"}) 2m40.749853342s ago: executing program 2 (id=117): r0 = socket(0x15, 0xa, 0x808) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000002dc0), &(0x7f0000002e40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000002ec0)=r1}, 0x20) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0xb0, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000002e00)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x80}}}}, 0x0) getresgid(0x0, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) r6 = getegid() setregid(r6, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r5, r6, r7) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x11, 0x56, {0x56, 0xd, "76ff154a496151aff79291207b6e311816d31c696f87f5aa626008cb3e9b580475ec3effbab42d99455b140c5c49a57513d6323c2a3eb3e736c75ddf04f302a33ce344d05ba6af502036a31c9498553b9e2e8acf"}}, &(0x7f0000000200)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "f2ac77dbab5c7a57e7148340ae77d46104256f83bba252259523137d7f022a74b803d19740a9a34f7adf7a80d4ac6b6407b8d87c76a143ceea8b27c6a584152c80d4af15f5055b507e3ab7d90f"}}, &(0x7f0000000280)={0x0, 0xf, 0xb6, {0x5, 0xf, 0xb6, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "984fd1a01811de64ab0f11b1816a460b"}, @generic={0x82, 0x10, 0x3, "1c682f3555aff4eef9c8f68469894dd0b98f7c8e5e4a768a632cc8ba360a067ce4481d8a4fb6f9df015d6d058f934760fed4bfd526d0490faca2037030db4626cc20bdb84f3a1bc63914020c7f44209c65a900e1060eb916c40a07d7db79c5ab3e2f8cd8eb088ee7aea2aef15e21b50cecec023ce3132a7498c7ff7e14a543"}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x9, 0x0, 0xe223, [0x28, 0xc0, 0x0]}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x3, 0xd4, "a58b1e17", "607c45ce"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x8, 0x47, 0x8, 0x5, 0xc}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x40, 0xa, 0x1c, "2d98dfc9c5751fe46184956d5ab77dce2281f4df34a8b64add9ed114"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "6ff8"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xbd15}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="d6ee3158b34f"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "172a"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x72}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000008c0)) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000003000)={0x14, &(0x7f0000002f00)={0x40, 0x21, 0x1e, {0x1e, 0x1, "ebdc4e4ea19afae58bd16fb4c7b022cae28e7ed14d8880bf20465676"}}, &(0x7f0000002f40)={0x0, 0x3, 0x87, @string={0x87, 0x3, "c491ed2e7bb2539c1f89197de1218b0bb4ff5394b226e967062a806fc676c8529796640f69f25e7d41fc63d96adc9325ba9db9660836dfde472aa915f7d297c12a284c282610ea70ac7592d6388948924481442e8c6b90e6508d0ec8e4f4390ed794ed7f11cd602f235cf39ea9ebb84d6bd8ecb35fd420a92e6f49cbe4054a78cb9d4f636e"}}}, &(0x7f0000003280)={0x34, &(0x7f0000003040)={0x40, 0x15, 0xe0, "ebfc34cdb565cbb28d6851287be80a856a0ea38d253037c1d0f86ceef799d9e7d9219be770843826b656214de7e4ad75c1ba9bce9a49390326b21befaad09d9c66e26dc9032b549d5d4902db5e74aace44da02367bcf2187442018e105b18ea1db56ffaafeb948743fa692911df371f1844ec21bc38dbb429729cfb4b57253011f7b0d393973f380f7c4e5a280613e81f058bfaed7686a0136e25195a71ffa5ae9abecd635488162346d4ee65e809679c63e53ce861e6cb2a23ba3aadf378c930fcbd21b96dbc353a6c3ec58544953764c41da227d3e64f1b889d556860fd8df"}, &(0x7f0000003140)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000003180)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000031c0)={0xc0, 0xa1, 0x4, 0xc8c}, &(0x7f0000003200)={0x40, 0xa0, 0x4, 0xffff24a7}, &(0x7f0000003240)={0xc0, 0xa2, 0x2f, "3690effc7900078db35797ddc4941853a2b2e0d0accc12b6c05a31fcea5c78254a26668d7f34a94ab6602c04bd855c"}}) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fefffffffffffffff4000f00fd000000", 0x24) 2m40.693227851s ago: executing program 3 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioprio_set$pid(0x2, 0x0, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) writev(r3, &(0x7f0000000000)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sndmidi(0x0, 0x3, 0x200701) close(r4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m39.112890447s ago: executing program 1 (id=119): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x17, 0xffffffffffffffff, 0x0, 0xffff, 0x0, 0x0, 0x5}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) unshare(0x24020400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x340, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)) 2m38.332261655s ago: executing program 1 (id=120): r0 = socket$kcm(0x2, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000100000000140012000a00a51b"], 0x30}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x800, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{}, {0x5, 0xc9, 0x6}}}, 0x9) mkdir(0x0, 0x0) setxattr$incfs_size(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2={0x1f, 0x102c, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x101, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c1}], 0x2}, 0x8400) openat$vsock(0xffffffffffffff9c, &(0x7f0000000d40), 0x189082, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, 0x1000f) 2m38.159628254s ago: executing program 4 (id=121): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x152, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000440)={0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xdededede}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000180)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000280)=0x28) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000002c0)={0xffffffff, 0xfffffff8, 0x8000004, 0x2}) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200)) accept(0xffffffffffffffff, &(0x7f0000001140)=@rc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) epoll_create(0x3ff) 2m36.443268901s ago: executing program 4 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) sendmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000014c0)="b5b2f4b5c3188aac3f84b3e17317ebae519d25c3a63e761930ee012572ef27f5114c9dc96b4e85f7a3a76d6804954e5d2f3dc9d3e73afb708c9ec2220def7872d18fb0efc6f5ade8b753ecb6488a82bea13895743e8420e6a07899c0b34e5e96b010c3456a2ba452ff77833771bf1177c8be2f4ae7f4cb599fab98e9a32a7ce4892a84c93eff10e1e3e3d0fbc79d269d8fe5ff2b78aa470dcb1b707bf4c13b418eb393cafdb7b780041bfad00537b6594d2c507cd0c817", 0xb7}, {&(0x7f0000000280)="570e031c7d6298565784", 0xa}, {&(0x7f0000001580)="6238e1574650555c686638bd5ccf0a21d1565362830c46f78a798f5910d89f5eabe4f4013fcb43e91a994df961223c9b5778df926ef3211e46bbf77147974fbb027c011276d7088fea813976de7fbfb054132f197d391851db0c72", 0x5b}, {&(0x7f0000001600)="4ab43a242e8dbe0edffb5a4a4871b3c907ad4400585d3aa7312b47db0c2b5301be3cfcf3", 0x24}, {&(0x7f0000001640)="7b1404b6e9d2488f72137e0b0d707326c29f4d4b797b71ae1a467552fe4756b7a869ae329cfb2e09096e9a58f637e78a8299bdb80cec7917c1d8ba", 0x3b}, {&(0x7f0000001880)="d1811080f175dd1d02deee174a4f1f6252268873288e2c434d11e844ebdf921f4b7babab68079eb9d9d78f9b2bd9c3036433fed29f234507c7691e265d6792202589b92639d802c438c282df053cdfac178bec5ad43dc26006573ba2ba8251f0f029773b08570ef47b1829a18f2e19f7091fe29acf8e40644017422760b13e1b0db67631", 0x84}, {&(0x7f0000001780)="deecb4c8187844b9cedb9d5a920c7aa6d3d9e9deeedb8ef8eb9d52066a1bb7e194c0f44fb4741573841f84c5650805ab9681bda5d0477f954e5613ceb625d1cdd5616ae763644cc8fee9a5157d3da11fe6c14863d2b64f311acfac9314f6929b72ad59fd1f07365b9a3b1471ca21136105b3a48eb2c01c63a407d95f29988a83f1f57b1db444db5881821b16c3c12618049d3bd0ab542683e6403b75eb64d2ba9b22d93a17d27343cc3fe60e2c740663e11348d084b0efd8fd1056e8f724f3cf985aa69d91658053d4f3b4ca958dece4296efa", 0xd3}, {&(0x7f0000001680)="76b06112954cf33775faa6bac8f8e88f2ca8980d884cf78398376023e5c77cc4d42f3e3656b7e68d905ba0561dbe80b6d8aee35dec829c2dd36b27c66432c6688ac2b197e9f5e697e9dc3b75a57ed1dc3893a8403c398b09a484c57cd0d5a779c0e7058d5adb81327284399f84182b500b89153a03be9117a6691f511023843a18e1945e8ec7db1fa9fa7bdb8a74b5a6ce0791a3c16fc352631c24010b707a359508e6a18cac19e684e0218544563f48362a98a05e07eafbe498331fd907871296230b711618543bbe27660b7400125f9b27977c4e8a65a088fb8328d79695b9aff8d9a3126536", 0xe7}, {&(0x7f0000001940)="86470fba3eb8804a5d39e9eed2db980d2cb76b55c7f24274d06948f1e72e4be6c4c7ce29fd9b34bb5b5929ecf0ff5df861f9ae68b9723ff2e483", 0x3a}], 0x9, &(0x7f0000001cc0)=ANY=[@ANYBLOB="a0000000000000000d01000000080000981fcee841c5da830b2dc1257ef708af7b095fe4250818592f1421822d98535ed6767339de413bd9810ea517c05e69630d7fd2fe8ec3ec9a0c85cf12081b473c54ef119b856700f6b0b54f4e483827be289c5cfa91ad9ab0ef3d1a6fbb6abadddbe30016606fcce905bfaaeb86a825284dae7566a69ebcb8c6e8c11034bc9af7579b8a6717d303b888a104af0000000030000000000000000d0100000900000079876c7802a0a9df0977a4efc03748dd12d0ad3148d0f85a50381e04f700000030000000000000000c01000069600000e9a31ca65bd956248741d846b4c40d4c2b4917a6b78944ee6875ac00000000000001"], 0x200}}], 0x1, 0x4000040) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2m36.41507047s ago: executing program 2 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x21) 2m35.80834477s ago: executing program 2 (id=126): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180200, 0x0) fcntl$setsig(r0, 0xa, 0x10) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) timer_create(0x3, &(0x7f0000000080)={0x0, 0x2f, 0x4}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4080) timer_getoverrun(r1) timer_delete(r1) r3 = gettid() sched_setscheduler(r3, 0x7, &(0x7f0000000400)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={r2, 0x5, 0xfffffffffffffffa, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000004c0)={{0xa, 0x3, 0x9188, 0xaa, 'syz1\x00', 0xfffffff7}, 0x2, 0x2, 0x9, r3, 0x3, 0xe1, 'syz1\x00', &(0x7f0000000480)=['/dev/ttyS3\x00', '\'\xbb\x00', '\x00'], 0xf}) syz_open_procfs$userns(r3, &(0x7f0000000600)) r5 = socket$inet(0x2, 0x2, 0x9) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) timer_create(0x0, &(0x7f00000006c0)={0x0, 0x2a, 0x4, @tid=r3}, &(0x7f0000000700)=0x0) timer_settime(r6, 0x1, &(0x7f0000000740)={{0x0, 0x3938700}}, &(0x7f0000000780)) bind$tipc(r4, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x2}}, 0x10) timer_delete(r6) getpid() ptrace(0x11, r3) r7 = shmget(0x1, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r7, 0x0) ioctl$DVB_DEMUX_DMX_REQBUFS(r4, 0xc0086f3c, &(0x7f0000000800)={0xe, 0x1ff}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000840)) timer_getoverrun(r1) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000008c0)={0x0, 0x0, "673937798209ef07c5d8a18ad15ebf76"}) 2m35.67045476s ago: executing program 4 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) stat(0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2m34.415798184s ago: executing program 4 (id=130): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x17, 0xffffffffffffffff, 0x0, 0xffff, 0x0, 0x0, 0x5}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) unshare(0x24020400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x340, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)) 2m34.408537633s ago: executing program 1 (id=131): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000200"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100227bd7000fddbdf250000000014000b002001004627000000000000000000000008000700", @ANYRES32=r3, @ANYBLOB="080004007f00000114000c00fc0100"/28], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0xa395, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x3, 0x3, 0x1, 0x4000000000200, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001680)) r6 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000140)={@my=0x1}) capset(&(0x7f0000000500)={0x20080522}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 2m34.340802632s ago: executing program 2 (id=132): socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2d", 0xd8a}], 0x1}, 0xff00) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x8) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @broadcast}], 0x10) socket$nl_route(0x10, 0x3, 0x0) 2m25.256214424s ago: executing program 32 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioprio_set$pid(0x2, 0x0, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) writev(r3, &(0x7f0000000000)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sndmidi(0x0, 0x3, 0x200701) close(r4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m17.260091955s ago: executing program 33 (id=131): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000200"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100227bd7000fddbdf250000000014000b002001004627000000000000000000000008000700", @ANYRES32=r3, @ANYBLOB="080004007f00000114000c00fc0100"/28], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0xa395, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x3, 0x3, 0x1, 0x4000000000200, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001680)) r6 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000140)={@my=0x1}) capset(&(0x7f0000000500)={0x20080522}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 2m16.870804599s ago: executing program 34 (id=132): socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xd8a}], 0x1}, 0xff00) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x8) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @broadcast}], 0x10) socket$nl_route(0x10, 0x3, 0x0) 2m16.31619015s ago: executing program 35 (id=130): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x17, 0xffffffffffffffff, 0x0, 0xffff, 0x0, 0x0, 0x5}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) unshare(0x24020400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x340, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)) 40.462983517s ago: executing program 0 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r1, 0xc0185502, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000080)={0x0, 0x2, 0x800}) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000480)=0x7) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x43, 0x2, 0xc, 0x6e}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10442, 0x0) fanotify_init(0xf00, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, 0x0, 0x68042, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="404b040715ca14b9b001000000004705b90080665b8d00000000000000000000098a3b361b4de92ad4e6f4fe9ca362cdebd1e9ff0324b289c3c1a69f15a26acb111f6a6fe1e85d06d2eb7ffa7b9a277a9e61ab51c2dc6cd8c8688e26f2fd89e524267488", @ANYRES32=0x0, @ANYRESDEC=r3], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20040000) 38.677165962s ago: executing program 0 (id=309): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) 36.423894265s ago: executing program 0 (id=314): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x184, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecff, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x33}, @in6=@remote, {0xff7ffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(twofish)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x184}}, 0x44050) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc854) openat(0xffffffffffffff9c, 0x0, 0x400, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) readv(r6, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)}], 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 24.48369413s ago: executing program 0 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r1, 0xc0185502, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000080)={0x0, 0x2, 0x800}) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000480)=0x7) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x43, 0x2, 0xc, 0x6e}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10442, 0x0) fanotify_init(0xf00, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, 0x0, 0x68042, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="404b040715ca14b9b001000000004705b90080665b8d00000000000000000000098a3b361b4de92ad4e6f4fe9ca362cdebd1e9ff0324b289c3c1a69f15a26acb111f6a6fe1e85d06d2eb7ffa7b9a277a9e61ab51c2dc6cd8c8688e26f2fd89e524267488", @ANYRES32=0x0, @ANYRESDEC=r3], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20040000) 21.929360361s ago: executing program 0 (id=369): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) (async, rerun: 32) r2 = socket$phonet(0x23, 0x2, 0x1) listen(r2, 0xff) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904"], 0x0) 21.547604158s ago: executing program 0 (id=371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) connect$x25(0xffffffffffffffff, &(0x7f00000003c0), 0x12) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r2, 0x311, 0x70bd28, 0x25dfdbfa, {0x26, 0x0, 0xa6ff}}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040054) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020028bd7000fcdbdf250f00000005000f007100000008009492bee13d0888ebf5224ed297b2a447aa4d4c29caa6ce0bb094787a8c29d2122bd7fa3ca3384f2c3ef58a34a84ca7ec79e4d320717cf2d241547fda2327e128ba373aa53bc95a9e613cb85ab590ad1406ccdb29f06cbec780a66f1f66fd4faefe5bf2bb04632f8c9275337a05d47bea54479ea34cbd6898f1a58bfdea147c348484d1fc4cd65a5132957338077bd6", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x81) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000780)='%-010d \x00'}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x18, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x4, 0x5, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@map_fd={0x18, 0x1, 0x1, 0x0, r9}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 16.253962505s ago: executing program 6 (id=395): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000500)=0x12, 0x800) connect$x25(r3, &(0x7f00000003c0), 0x12) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r2, 0x311, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040054) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003580)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xb, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0xff14) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0xfffffffe, 0x1, 0x9}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a0001"], 0x24}}, 0x20000050) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020028bd7000fcdbdf250f00000005000f007100000008009492bee13d0888ebf5224ed297b2a447aa4d4c29caa6ce0bb094787a8c29d2122bd7fa3ca3384f2c3ef58a34a84ca7ec79e4d320717cf2d241547fda2327e128ba373aa53bc95a9e613cb85ab590ad1406ccdb29f06cbec780a66f1f66fd4faefe5bf2bb04632f8c9275337a05d47bea54479ea34cbd6898f1a58bfdea147c348484d1fc4cd65a5132957338077bd6", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x81) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r11, 0x80dc5521, &(0x7f0000000540)=""/51) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r12, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000780)='%-010d \x00'}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r13, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x18, &(0x7f00000004c0)=ANY=[@ANYRES32=r14, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x4, 0x5, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@map_fd={0x18, 0x1, 0x1, 0x0, r14}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 16.089296387s ago: executing program 6 (id=396): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c1000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r7, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={r7, 0x6}, 0x8) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="370a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r8, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x16, 0x28, "c0601b1ae0ffb056a6b77029d5a022642f70036bb568c0a31c209541071fc882d5133b4d33388f9f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000480)={0x0, 0x14}, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000003c000180060001000a0000000c004f9da7040002d8ffe212096b9f0a070000000000000000000800090064000000090006006e6f6e6500000000080008000000d4f5b88857e0a4870000"], 0x50}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r9) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600", @ANYRESOCT], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r10, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x557f389c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x118, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x75629f6d}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfb}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xd52}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x418}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xcf}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}]}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x50}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x401}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x504}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8001}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040060}, 0x8001) 15.915655066s ago: executing program 6 (id=397): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000003000000000000000000000105000000080000000000000001000005000000000000000001000000000000000000a122d481344281c0bb15a77142f5c1de50b2f0400350b2d8548651b10d6af451b983e9cc134849cab4c6f15d498ee0804617d6d5975d6e49fedca8af49f989048cfc5304b1bba50752a9811f359c8e9e101de17491f5ceea003b03"], 0x0, 0x5a}, 0x28) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x181e40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000030000000500000007000000c1000000", @ANYRES32, @ANYBLOB="0000000000000000000000d142748e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), 0x3f, r5}, 0x38) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x89ff, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060300000000000000000000000000140007800800124000000000050015000200000005000100060000000500050002000000050004000000000009"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000002380)=ANY=[@ANYBLOB="1800000002000100000000000000000095194ebfb49fa87c0be0351dae74021434b21207cdb1d1542b6a85b9d4ef7571d67c3be4f731cb687d84467c4f59ebfd90868fa795d3ff2e433548f1ed59a1a547b7225cfe0ffba23b25bb7d7765dc57002e3f6df55350befc0133f091596423761251c65aaf57bae954dcb1f75f70d4a008b9a766e8796977b4d4c1d1057053e3a64e4246efed5f0b0608aa5eb708077f8a722ef2112f5496a74ed99054dfc394f72f3e3dbdc781e82df64ead5b5bfb968700"/210], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.750746664s ago: executing program 6 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x5, @mcast2}, 0x0, {[0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x1, 0x5]}}, 0x5c) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r5}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100001f20bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r6}) 15.557341075s ago: executing program 6 (id=399): pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x5, '\x00', @buffer={"638391fa1b5e124b43175553975a2561ead98593e9060ad61456e06afea3cd65", 0x20}, 0x7ff}, {0x20, '\x00', @st={0x4, [{0x0, @uvalue=0x2}, {0x2, @svalue=0x3d}, {0x3, @svalue=0x9}, {0x2, @uvalue=0x6}]}, 0x5}, {0x25, '\x00', @buffer={"f335f2a95f2639f06213d5007fbb7424bde5c361de6d9c57c7b5b0bc0dc4a01f", 0x20}, 0x7a7ce1c4}]}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{}], 0xa, "b15eeaa3ad5ee5fa3e0445292b22b9bce10b14aa0bc3b741827a9fed5f4717f14b1edec8f349c6e89512f3a26c4884d58d4432987065"}, 0x834) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 15.280411059s ago: executing program 6 (id=400): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710023000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (rerun: 64) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r4, 0x113, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe5b7, 0x15}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x20044084) (rerun: 32) 6.082388641s ago: executing program 36 (id=371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) connect$x25(0xffffffffffffffff, &(0x7f00000003c0), 0x12) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r2, 0x311, 0x70bd28, 0x25dfdbfa, {0x26, 0x0, 0xa6ff}}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040054) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020028bd7000fcdbdf250f00000005000f007100000008009492bee13d0888ebf5224ed297b2a447aa4d4c29caa6ce0bb094787a8c29d2122bd7fa3ca3384f2c3ef58a34a84ca7ec79e4d320717cf2d241547fda2327e128ba373aa53bc95a9e613cb85ab590ad1406ccdb29f06cbec780a66f1f66fd4faefe5bf2bb04632f8c9275337a05d47bea54479ea34cbd6898f1a58bfdea147c348484d1fc4cd65a5132957338077bd6", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x81) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000780)='%-010d \x00'}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x18, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x4, 0x5, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@map_fd={0x18, 0x1, 0x1, 0x0, r9}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 0s ago: executing program 37 (id=400): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710023000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (rerun: 64) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r4, 0x113, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe5b7, 0x15}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x20044084) (rerun: 32) kernel console output (not intermixed with test programs): e_slave_1) entered disabled state [ 191.581008][ T6265] bridge_slave_1: entered allmulticast mode [ 191.585711][ T6265] bridge_slave_1: entered promiscuous mode [ 191.938800][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.033933][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.130356][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.234887][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.235386][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.235590][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.235790][ T6276] bridge_slave_0: entered allmulticast mode [ 194.238766][ T6276] bridge_slave_0: entered promiscuous mode [ 194.318877][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.319026][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.319272][ T6287] bridge_slave_0: entered allmulticast mode [ 194.356313][ T6287] bridge_slave_0: entered promiscuous mode [ 194.440203][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.440334][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.440521][ T6276] bridge_slave_1: entered allmulticast mode [ 194.447877][ T6276] bridge_slave_1: entered promiscuous mode [ 194.460653][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.460985][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.461510][ T6287] bridge_slave_1: entered allmulticast mode [ 194.470878][ T6287] bridge_slave_1: entered promiscuous mode [ 194.600825][ T6260] team0: Port device team_slave_0 added [ 194.611004][ T6265] team0: Port device team_slave_0 added [ 195.420728][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.420800][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.437095][ T162] hsr_slave_0: left promiscuous mode [ 195.485976][ T162] hsr_slave_1: left promiscuous mode [ 195.487312][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.493204][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.620353][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.620382][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.759371][ T162] veth1_macvtap: left promiscuous mode [ 195.759565][ T162] veth0_macvtap: left promiscuous mode [ 195.760077][ T162] veth1_vlan: left promiscuous mode [ 195.908559][ T6220] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.078457][ T6220] usb 1-1: Using ep0 maxpacket: 32 [ 196.082700][ T6220] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.082724][ T6220] usb 1-1: config 0 has no interface number 0 [ 196.086224][ T6220] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 196.086256][ T6220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.086276][ T6220] usb 1-1: Product: syz [ 196.086290][ T6220] usb 1-1: Manufacturer: syz [ 196.086304][ T6220] usb 1-1: SerialNumber: syz [ 196.101021][ T6220] usb 1-1: config 0 descriptor?? [ 196.164839][ T6220] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 196.164858][ T6220] usb 1-1: selecting invalid altsetting 1 [ 196.164870][ T6220] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 196.192220][ T6220] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 196.193334][ T6220] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 196.193380][ T6220] usb 1-1: media controller created [ 196.207373][ T6220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.334254][ T6220] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 196.334294][ T6220] zl10353_read_register: readreg error (reg=127, ret==-71) [ 196.334654][ T6220] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 196.433261][ T6220] usb 1-1: USB disconnect, device number 9 [ 196.752508][ T162] team0 (unregistering): Port device team_slave_1 removed [ 196.802772][ T162] team0 (unregistering): Port device team_slave_0 removed [ 197.210287][ T6265] team0: Port device team_slave_1 added [ 197.212463][ T6260] team0: Port device team_slave_1 added [ 197.233136][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.382819][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.440806][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.456494][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.544943][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.544962][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.544990][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.547525][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.547540][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.547567][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.777004][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.777023][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.777051][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.866775][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.866794][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.866825][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.870207][ T6276] team0: Port device team_slave_0 added [ 197.930643][ T6287] team0: Port device team_slave_0 added [ 198.000991][ T6276] team0: Port device team_slave_1 added [ 198.015139][ T6287] team0: Port device team_slave_1 added [ 199.287668][ T6426] netlink: 392 bytes leftover after parsing attributes in process `syz.0.157'. [ 199.488243][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 199.490769][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.490785][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.490812][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.516849][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.516894][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.516982][ T6287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.738771][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.738784][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.738803][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.739983][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.739997][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.740021][ T6287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.835502][ T6265] hsr_slave_0: entered promiscuous mode [ 199.881683][ T6265] hsr_slave_1: entered promiscuous mode [ 199.903545][ T6260] hsr_slave_0: entered promiscuous mode [ 199.904650][ T6260] hsr_slave_1: entered promiscuous mode [ 199.905581][ T6260] debugfs: 'hsr0' already exists in 'hsr' [ 199.905597][ T6260] Cannot create hsr debugfs directory [ 200.255854][ T6276] hsr_slave_0: entered promiscuous mode [ 200.256868][ T6276] hsr_slave_1: entered promiscuous mode [ 200.257584][ T6276] debugfs: 'hsr0' already exists in 'hsr' [ 200.257601][ T6276] Cannot create hsr debugfs directory [ 200.288782][ T6287] hsr_slave_0: entered promiscuous mode [ 200.290234][ T6287] hsr_slave_1: entered promiscuous mode [ 200.291214][ T6287] debugfs: 'hsr0' already exists in 'hsr' [ 200.291238][ T6287] Cannot create hsr debugfs directory [ 200.509925][ T6443] FAULT_INJECTION: forcing a failure. [ 200.509925][ T6443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.509962][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.509987][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.510000][ T6443] Call Trace: [ 200.510008][ T6443] [ 200.510017][ T6443] dump_stack_lvl+0xe8/0x150 [ 200.510050][ T6443] should_fail_ex+0x46b/0x600 [ 200.510090][ T6443] _copy_from_user+0x2d/0xb0 [ 200.510117][ T6443] kstrtouint_from_user+0xd6/0x180 [ 200.510154][ T6443] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 200.510207][ T6443] proc_fail_nth_write+0x8e/0x210 [ 200.510244][ T6443] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 200.510287][ T6443] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 200.510325][ T6443] vfs_write+0x2a3/0xba0 [ 200.510372][ T6443] ? __pfx_vfs_write+0x10/0x10 [ 200.510400][ T6443] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 200.510436][ T6443] ? lockdep_hardirqs_on+0x7a/0x110 [ 200.510469][ T6443] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 200.510507][ T6443] ? mutex_lock_nested+0x152/0x1d0 [ 200.510533][ T6443] ? fdget_pos+0x252/0x320 [ 200.510563][ T6443] ksys_write+0x156/0x270 [ 200.510591][ T6443] ? __pfx_ksys_write+0x10/0x10 [ 200.510615][ T6443] ? __pfx_binder_ioctl+0x10/0x10 [ 200.510647][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.510679][ T6443] do_syscall_64+0x15f/0xf80 [ 200.510699][ T6443] ? trace_irq_disable+0x3b/0x140 [ 200.510726][ T6443] ? clear_bhb_loop+0x40/0x90 [ 200.510754][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.510776][ T6443] RIP: 0033:0x7fd09a06d60e [ 200.510796][ T6443] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.510814][ T6443] RSP: 002b:00007fd0982fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.510837][ T6443] RAX: ffffffffffffffda RBX: 00007fd0982fe6c0 RCX: 00007fd09a06d60e [ 200.510853][ T6443] RDX: 0000000000000001 RSI: 00007fd0982fe0a0 RDI: 0000000000000006 [ 200.510866][ T6443] RBP: 00007fd0982fe090 R08: 0000000000000000 R09: 0000000000000000 [ 200.510879][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.510892][ T6443] R13: 00007fd09a326038 R14: 00007fd09a325fa0 R15: 00007ffcb97fcfc8 [ 200.510926][ T6443] [ 201.507274][ T162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.631502][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 201.864713][ T162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.234389][ T162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.537488][ T6475] netlink: 392 bytes leftover after parsing attributes in process `syz.0.164'. [ 202.743609][ T162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.107088][ T6265] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.290470][ T6488] FAULT_INJECTION: forcing a failure. [ 203.290470][ T6488] name failslab, interval 1, probability 0, space 0, times 0 [ 203.290529][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.0.166 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 203.290553][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.290566][ T6488] Call Trace: [ 203.290574][ T6488] [ 203.290583][ T6488] dump_stack_lvl+0xe8/0x150 [ 203.290614][ T6488] should_fail_ex+0x46b/0x600 [ 203.290673][ T6488] should_failslab+0xa8/0x100 [ 203.290703][ T6488] kmem_cache_alloc_noprof+0x87/0x680 [ 203.290728][ T6488] ? fcntl_setlk+0xa9/0x1090 [ 203.290757][ T6488] fcntl_setlk+0xa9/0x1090 [ 203.290791][ T6488] ? __might_fault+0xaf/0x130 [ 203.290819][ T6488] ? __might_fault+0xaf/0x130 [ 203.290848][ T6488] ? __pfx_fcntl_setlk+0x10/0x10 [ 203.290890][ T6488] do_fcntl+0x981/0x19e0 [ 203.290919][ T6488] ? smack_file_fcntl+0x27a/0x320 [ 203.290946][ T6488] ? __pfx_do_fcntl+0x10/0x10 [ 203.290973][ T6488] ? __pfx_smack_file_fcntl+0x10/0x10 [ 203.291007][ T6488] ? __rcu_read_unlock+0x83/0xe0 [ 203.291035][ T6488] ? __fget_files+0x2a/0x420 [ 203.291076][ T6488] ? bpf_lsm_file_fcntl+0x9/0x20 [ 203.291107][ T6488] __se_sys_fcntl+0xcb/0x160 [ 203.291132][ T6488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.291157][ T6488] do_syscall_64+0x15f/0xf80 [ 203.291181][ T6488] ? clear_bhb_loop+0x40/0x90 [ 203.291210][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.291233][ T6488] RIP: 0033:0x7fd09a0acdd9 [ 203.291253][ T6488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.291272][ T6488] RSP: 002b:00007fd0982bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 203.291295][ T6488] RAX: ffffffffffffffda RBX: 00007fd09a326180 RCX: 00007fd09a0acdd9 [ 203.291311][ T6488] RDX: 0000200000000140 RSI: 0000000000000006 RDI: 0000000000000006 [ 203.291325][ T6488] RBP: 00007fd0982bc090 R08: 0000000000000000 R09: 0000000000000000 [ 203.291338][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.291351][ T6488] R13: 00007fd09a326218 R14: 00007fd09a326180 R15: 00007ffcb97fcfc8 [ 203.291385][ T6488] [ 203.827434][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.878706][ T6265] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.993908][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.007967][ T6265] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 204.091277][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.160315][ T6265] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.244541][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.320527][ T6494] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 204.800394][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 205.058953][ T6260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.106891][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.126423][ T6260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.171580][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.328143][ T5774] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.356013][ T162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.356040][ T162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.423600][ T6260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.441428][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.479429][ T5774] usb 1-1: Using ep0 maxpacket: 32 [ 205.491937][ T5774] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.491961][ T5774] usb 1-1: config 0 has no interface number 0 [ 205.539970][ T5774] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 205.539999][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.540020][ T5774] usb 1-1: Product: syz [ 205.540034][ T5774] usb 1-1: Manufacturer: syz [ 205.540049][ T5774] usb 1-1: SerialNumber: syz [ 205.569170][ T5774] usb 1-1: config 0 descriptor?? [ 205.595761][ T6260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.626375][ T5774] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 205.626394][ T5774] usb 1-1: selecting invalid altsetting 1 [ 205.626405][ T5774] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 205.676843][ T5774] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 205.676901][ T6260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.677871][ T5774] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 205.677923][ T5774] usb 1-1: media controller created [ 205.731332][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.787159][ T5774] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 205.787215][ T5774] zl10353_read_register: readreg error (reg=127, ret==-71) [ 205.787699][ T5774] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 205.906155][ T5774] usb 1-1: USB disconnect, device number 10 [ 206.036906][ T162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.036932][ T162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.326231][ T162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.326259][ T162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.526488][ T6276] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 206.634850][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.763425][ T6530] netlink: 392 bytes leftover after parsing attributes in process `syz.0.171'. [ 207.015086][ T162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.015147][ T162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.071780][ T6542] process 'syz.0.172' launched './file2' with NULL argv: empty string added [ 207.097093][ T6276] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 207.221915][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.258166][ T6276] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 207.327275][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.412517][ T6276] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 207.453699][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.485644][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 207.816283][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.934160][ T5774] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 207.937574][ T6287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 207.978540][ T6287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.000649][ T6287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 208.039351][ T6287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.084495][ T5774] usb 1-1: Using ep0 maxpacket: 32 [ 208.084615][ T6287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 208.090529][ T5774] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.090554][ T5774] usb 1-1: config 0 has no interface number 0 [ 208.093133][ T5774] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 208.093162][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.093186][ T5774] usb 1-1: Product: syz [ 208.093196][ T5774] usb 1-1: Manufacturer: syz [ 208.093207][ T5774] usb 1-1: SerialNumber: syz [ 208.160298][ T5774] usb 1-1: config 0 descriptor?? [ 208.183625][ T5774] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 208.183645][ T5774] usb 1-1: selecting invalid altsetting 1 [ 208.183657][ T5774] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 208.212278][ T5774] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.212706][ T5774] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 208.212764][ T5774] usb 1-1: media controller created [ 208.213412][ T6287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.250726][ T6287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 208.301131][ T6287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.324467][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.361614][ T6265] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.395088][ T5774] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 208.395144][ T5774] zl10353_read_register: readreg error (reg=127, ret==-71) [ 208.395784][ T5774] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 208.481476][ T5774] usb 1-1: USB disconnect, device number 11 [ 208.673546][ T162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.753268][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.753417][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.820682][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.835545][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.835680][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.023965][ T162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.083517][ T6566] FAULT_INJECTION: forcing a failure. [ 209.083517][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 209.083541][ T6566] CPU: 1 UID: 0 PID: 6566 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.083558][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.083567][ T6566] Call Trace: [ 209.083572][ T6566] [ 209.083582][ T6566] dump_stack_lvl+0xe8/0x150 [ 209.083604][ T6566] should_fail_ex+0x46b/0x600 [ 209.083632][ T6566] should_failslab+0xa8/0x100 [ 209.083652][ T6566] __kmalloc_noprof+0xdf/0x7b0 [ 209.083670][ T6566] ? bpf_test_init+0x9f/0x150 [ 209.083686][ T6566] ? __lock_acquire+0x6b5/0x2cf0 [ 209.083710][ T6566] bpf_test_init+0x9f/0x150 [ 209.083727][ T6566] bpf_prog_test_run_skb+0x392/0x2260 [ 209.083742][ T6566] ? bpf_prog_test_run_skb+0x1c1/0x2260 [ 209.083789][ T6566] ? __fget_files+0x3a6/0x420 [ 209.083813][ T6566] ? __fget_files+0x2a/0x420 [ 209.083841][ T6566] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 209.083858][ T6566] bpf_prog_test_run+0x2cd/0x340 [ 209.083881][ T6566] __sys_bpf+0x643/0x950 [ 209.083901][ T6566] ? __pfx___sys_bpf+0x10/0x10 [ 209.083918][ T6566] ? rt_mutex_slowunlock+0x1cb/0x300 [ 209.083950][ T6566] ? ksys_write+0x248/0x270 [ 209.083970][ T6566] ? __pfx_ksys_write+0x10/0x10 [ 209.083990][ T6566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.084007][ T6566] __x64_sys_bpf+0x7c/0x90 [ 209.084025][ T6566] do_syscall_64+0x15f/0xf80 [ 209.084039][ T6566] ? trace_irq_disable+0x3b/0x140 [ 209.084058][ T6566] ? clear_bhb_loop+0x40/0x90 [ 209.084077][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.084093][ T6566] RIP: 0033:0x7fd09a0acdd9 [ 209.084107][ T6566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.084120][ T6566] RSP: 002b:00007fd0982fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.084136][ T6566] RAX: ffffffffffffffda RBX: 00007fd09a325fa0 RCX: 00007fd09a0acdd9 [ 209.084148][ T6566] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 209.084158][ T6566] RBP: 00007fd0982fe090 R08: 0000000000000000 R09: 0000000000000000 [ 209.084167][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.084176][ T6566] R13: 00007fd09a326038 R14: 00007fd09a325fa0 R15: 00007ffcb97fcfc8 [ 209.084200][ T6566] [ 209.643102][ T162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.794739][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.110860][ T162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.195228][ T2339] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.195483][ T2339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.339566][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.340617][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.415731][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 210.459331][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.872382][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 211.053498][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.236775][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.237007][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.397795][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.398025][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.437910][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.217008][ T4914] Bluetooth: hci3: command 0x0406 tx timeout [ 213.484706][ T162] bridge_slave_1: left allmulticast mode [ 213.484735][ T162] bridge_slave_1: left promiscuous mode [ 213.484950][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.545823][ T162] bridge_slave_0: left allmulticast mode [ 213.545849][ T162] bridge_slave_0: left promiscuous mode [ 213.546033][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.785459][ T162] bridge_slave_1: left allmulticast mode [ 213.785487][ T162] bridge_slave_1: left promiscuous mode [ 213.785665][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.846236][ T162] bridge_slave_0: left allmulticast mode [ 213.846263][ T162] bridge_slave_0: left promiscuous mode [ 213.846776][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.075962][ T162] bridge0: port 3(vlan0) entered disabled state [ 214.117789][ T162] bridge_slave_1: left allmulticast mode [ 214.117816][ T162] bridge_slave_1: left promiscuous mode [ 214.119700][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.167903][ T162] bridge_slave_0: left allmulticast mode [ 214.167936][ T162] bridge_slave_0: left promiscuous mode [ 214.168111][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.067609][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.148846][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.172394][ T162] bond0 (unregistering): Released all slaves [ 215.498524][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.538770][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.561959][ T162] bond0 (unregistering): Released all slaves [ 215.908984][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.989226][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.021806][ T162] bond0 (unregistering): Released all slaves [ 216.561809][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.655098][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.655313][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.788529][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.788763][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.843001][ T6265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.190115][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 218.332646][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 218.482486][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 218.500144][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.500171][ T9] usb 1-1: config 0 has no interface number 0 [ 218.525730][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 218.525759][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.525780][ T9] usb 1-1: Product: syz [ 218.525795][ T9] usb 1-1: Manufacturer: syz [ 218.525810][ T9] usb 1-1: SerialNumber: syz [ 218.572229][ T9] usb 1-1: config 0 descriptor?? [ 218.610509][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 218.610529][ T9] usb 1-1: selecting invalid altsetting 1 [ 218.610540][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 218.636692][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 218.636934][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 218.636977][ T9] usb 1-1: media controller created [ 218.668948][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.970395][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 218.970454][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 218.978501][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 219.339339][ T9] usb 1-1: USB disconnect, device number 12 [ 219.905958][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.409762][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.466744][ T6265] veth0_vlan: entered promiscuous mode [ 220.719937][ T6265] veth1_vlan: entered promiscuous mode [ 220.821312][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 221.012235][ T37] audit: type=1326 audit(1778893675.007:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.012707][ T37] audit: type=1326 audit(1778893675.007:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.013165][ T37] audit: type=1326 audit(1778893675.007:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.013323][ T37] audit: type=1326 audit(1778893675.007:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.014717][ T37] audit: type=1326 audit(1778893675.007:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.129200][ T37] audit: type=1326 audit(1778893675.007:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.129253][ T37] audit: type=1326 audit(1778893675.017:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.129288][ T37] audit: type=1326 audit(1778893675.017:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.129321][ T37] audit: type=1326 audit(1778893675.017:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.129355][ T37] audit: type=1326 audit(1778893675.017:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09a0acdd9 code=0x7ffc0000 [ 221.327282][ T6703] FAULT_INJECTION: forcing a failure. [ 221.327282][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 221.327308][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.327327][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.327337][ T6703] Call Trace: [ 221.327342][ T6703] [ 221.327350][ T6703] dump_stack_lvl+0xe8/0x150 [ 221.327373][ T6703] should_fail_ex+0x46b/0x600 [ 221.327402][ T6703] should_failslab+0xa8/0x100 [ 221.327423][ T6703] __kmalloc_noprof+0xdf/0x7b0 [ 221.327439][ T6703] ? kfree+0x4d/0x6c0 [ 221.327453][ T6703] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 221.327482][ T6703] tomoyo_realpath_from_path+0xe3/0x5d0 [ 221.327507][ T6703] ? tomoyo_domain+0xd8/0x130 [ 221.327526][ T6703] ? tomoyo_path_number_perm+0x219/0x630 [ 221.327546][ T6703] tomoyo_path_number_perm+0x246/0x630 [ 221.327568][ T6703] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.327588][ T6703] ? __lock_acquire+0x6b5/0x2cf0 [ 221.327612][ T6703] ? do_raw_spin_lock+0x12b/0x2f0 [ 221.327654][ T6703] ? __fget_files+0x2a/0x420 [ 221.327680][ T6703] ? __fget_files+0x2a/0x420 [ 221.327703][ T6703] ? __fget_files+0x3a6/0x420 [ 221.327726][ T6703] ? __fget_files+0x2a/0x420 [ 221.327752][ T6703] security_file_ioctl+0xc3/0x2a0 [ 221.327775][ T6703] __se_sys_ioctl+0x47/0x170 [ 221.327799][ T6703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.327816][ T6703] do_syscall_64+0x15f/0xf80 [ 221.327831][ T6703] ? trace_irq_disable+0x3b/0x140 [ 221.327850][ T6703] ? clear_bhb_loop+0x40/0x90 [ 221.327870][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.327885][ T6703] RIP: 0033:0x7fd09a0acdd9 [ 221.327899][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.327917][ T6703] RSP: 002b:00007fd0982fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.327933][ T6703] RAX: ffffffffffffffda RBX: 00007fd09a325fa0 RCX: 00007fd09a0acdd9 [ 221.327944][ T6703] RDX: 0000200000000200 RSI: 00000000c01064c8 RDI: 0000000000000003 [ 221.327954][ T6703] RBP: 00007fd0982fe090 R08: 0000000000000000 R09: 0000000000000000 [ 221.327964][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.327973][ T6703] R13: 00007fd09a326038 R14: 00007fd09a325fa0 R15: 00007ffcb97fcfc8 [ 221.327997][ T6703] [ 221.328003][ T6703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.602566][ T6265] veth0_macvtap: entered promiscuous mode [ 222.726478][ T6265] veth1_macvtap: entered promiscuous mode [ 223.107794][ T5603] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 223.269441][ T5603] usb 1-1: Using ep0 maxpacket: 32 [ 223.273332][ T5603] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.273360][ T5603] usb 1-1: config 0 has no interface number 0 [ 223.296457][ T5603] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 223.296548][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.296598][ T5603] usb 1-1: Product: syz [ 223.296642][ T5603] usb 1-1: Manufacturer: syz [ 223.296678][ T5603] usb 1-1: SerialNumber: syz [ 223.342556][ T5603] usb 1-1: config 0 descriptor?? [ 223.385895][ T5603] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 223.385924][ T5603] usb 1-1: selecting invalid altsetting 1 [ 223.385940][ T5603] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 223.411902][ T5603] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 223.412282][ T5603] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 223.412333][ T5603] usb 1-1: media controller created [ 223.454375][ T5603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.589793][ T5603] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 223.589853][ T5603] zl10353_read_register: readreg error (reg=127, ret==-71) [ 223.590653][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.591877][ T5603] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 223.672782][ T6260] veth0_vlan: entered promiscuous mode [ 223.691654][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.834585][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.854009][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 223.944085][ T5603] usb 1-1: USB disconnect, device number 13 [ 224.258619][ T3307] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.285386][ T3307] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.388466][ T6260] veth1_vlan: entered promiscuous mode [ 224.406313][ T3307] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.434103][ T3307] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.595152][ T5604] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 224.699414][ T162] hsr_slave_0: left promiscuous mode [ 224.729915][ T162] hsr_slave_1: left promiscuous mode [ 224.737342][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.737369][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.774619][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.774646][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.919727][ T162] hsr_slave_0: left promiscuous mode [ 224.959968][ T162] hsr_slave_1: left promiscuous mode [ 224.960856][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.960880][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.010811][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.010838][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.170468][ T162] hsr_slave_0: left promiscuous mode [ 225.189990][ T162] hsr_slave_1: left promiscuous mode [ 225.190914][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.190933][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.231522][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.231542][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.389775][ T162] veth1_macvtap: left promiscuous mode [ 225.389883][ T162] veth0_macvtap: left promiscuous mode [ 225.402910][ T162] veth1_vlan: left promiscuous mode [ 225.403087][ T162] veth0_vlan: left promiscuous mode [ 225.563342][ T162] veth1_macvtap: left promiscuous mode [ 225.563415][ T162] veth0_macvtap: left promiscuous mode [ 225.563617][ T162] veth1_vlan: left promiscuous mode [ 225.563736][ T162] veth0_vlan: left promiscuous mode [ 225.700645][ T162] veth1_macvtap: left promiscuous mode [ 225.700716][ T162] veth0_macvtap: left promiscuous mode [ 225.700891][ T162] veth1_vlan: left promiscuous mode [ 226.510391][ T5604] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 227.033804][ T162] team0 (unregistering): Port device team_slave_1 removed [ 227.132632][ T162] team0 (unregistering): Port device team_slave_0 removed [ 227.632441][ T5773] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 227.792579][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 227.796599][ T5773] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.796626][ T5773] usb 1-1: config 0 has no interface number 0 [ 227.799707][ T5773] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 227.799735][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.799755][ T5773] usb 1-1: Product: syz [ 227.799765][ T5773] usb 1-1: Manufacturer: syz [ 227.799775][ T5773] usb 1-1: SerialNumber: syz [ 227.859414][ T5773] usb 1-1: config 0 descriptor?? [ 227.886754][ T5773] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 227.886774][ T5773] usb 1-1: selecting invalid altsetting 1 [ 227.886786][ T5773] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 227.962814][ T5773] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 227.963215][ T5773] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 227.963265][ T5773] usb 1-1: media controller created [ 228.047617][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.137819][ T5773] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 228.137870][ T5773] zl10353_read_register: readreg error (reg=127, ret==-71) [ 228.138250][ T5773] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 228.170750][ T162] team0 (unregistering): Port device team_slave_1 removed [ 228.236535][ T5773] usb 1-1: USB disconnect, device number 14 [ 228.245672][ T162] team0 (unregistering): Port device team_slave_0 removed [ 229.034273][ T162] team0 (unregistering): Port device team_slave_1 removed [ 229.094680][ T162] team0 (unregistering): Port device team_slave_0 removed [ 229.537576][ T6276] veth0_vlan: entered promiscuous mode [ 229.858182][ T6276] veth1_vlan: entered promiscuous mode [ 230.128678][ T6260] veth0_macvtap: entered promiscuous mode [ 230.283512][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.283533][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.368290][ T6260] veth1_macvtap: entered promiscuous mode [ 230.446612][ T6287] veth0_vlan: entered promiscuous mode [ 230.474008][ T5604] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 230.758350][ T6276] veth0_macvtap: entered promiscuous mode [ 230.839980][ T6287] veth1_vlan: entered promiscuous mode [ 230.891795][ T6276] veth1_macvtap: entered promiscuous mode [ 230.925487][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.925506][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.017915][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 231.320982][ T4914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.357377][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.381467][ T4914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.403045][ T4914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.419487][ T4914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.421330][ T4914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.550836][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.645260][ T6287] veth0_macvtap: entered promiscuous mode [ 231.752698][ T1415] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.753493][ T1415] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.754547][ T6287] veth1_macvtap: entered promiscuous mode [ 231.784145][ T1415] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.797622][ T1415] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.154126][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.392686][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.427855][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 233.496134][ T6797] FAULT_INJECTION: forcing a failure. [ 233.496134][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 233.496169][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.6.202 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.496194][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.496206][ T6797] Call Trace: [ 233.496214][ T6797] [ 233.496223][ T6797] dump_stack_lvl+0xe8/0x150 [ 233.496263][ T6797] should_fail_ex+0x46b/0x600 [ 233.496305][ T6797] should_failslab+0xa8/0x100 [ 233.496335][ T6797] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 233.496359][ T6797] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 233.496387][ T6797] ? dup_task_struct+0x52/0x840 [ 233.496420][ T6797] dup_task_struct+0x52/0x840 [ 233.496444][ T6797] ? rt_spin_unlock+0x160/0x200 [ 233.496476][ T6797] copy_process+0x89b/0x4460 [ 233.496535][ T6797] ? __pfx_copy_process+0x10/0x10 [ 233.496576][ T6797] vhost_task_create+0x1f9/0x380 [ 233.496608][ T6797] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 233.496639][ T6797] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 233.496673][ T6797] ? __pfx_vhost_task_create+0x10/0x10 [ 233.496714][ T6797] ? __pfx_vhost_task_fn+0x10/0x10 [ 233.496750][ T6797] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 233.496785][ T6797] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.496825][ T6797] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 233.496871][ T6797] ? mutex_lock_nested+0x152/0x1d0 [ 233.496898][ T6797] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 233.496935][ T6797] kvm_mmu_post_init_vm+0x147/0x2d0 [ 233.496971][ T6797] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 233.497012][ T6797] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 233.497039][ T6797] ? do_raw_spin_lock+0x12b/0x2f0 [ 233.497077][ T6797] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 233.497110][ T6797] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.497142][ T6797] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 233.497177][ T6797] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 233.497212][ T6797] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 233.497248][ T6797] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 233.497282][ T6797] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.497334][ T6797] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 233.497370][ T6797] ? rt_write_unlock+0x190/0x230 [ 233.497403][ T6797] kvm_vcpu_ioctl+0xa65/0xfe0 [ 233.497442][ T6797] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 233.497477][ T6797] ? __asan_memset+0x22/0x50 [ 233.497511][ T6797] ? smack_file_ioctl+0x331/0x360 [ 233.497541][ T6797] ? __pfx_smack_file_ioctl+0x10/0x10 [ 233.497580][ T6797] ? __fget_files+0x2a/0x420 [ 233.497614][ T6797] ? __fget_files+0x3a6/0x420 [ 233.497647][ T6797] ? __fget_files+0x2a/0x420 [ 233.497686][ T6797] ? bpf_lsm_file_ioctl+0x9/0x20 [ 233.497713][ T6797] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 233.497745][ T6797] __se_sys_ioctl+0xff/0x170 [ 233.497771][ T6797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.497797][ T6797] do_syscall_64+0x15f/0xf80 [ 233.497816][ T6797] ? trace_irq_disable+0x3b/0x140 [ 233.497843][ T6797] ? clear_bhb_loop+0x40/0x90 [ 233.497871][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.497893][ T6797] RIP: 0033:0x7f9cdfa2cdd9 [ 233.497914][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.497932][ T6797] RSP: 002b:00007f9cddc7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.497955][ T6797] RAX: ffffffffffffffda RBX: 00007f9cdfca5fa0 RCX: 00007f9cdfa2cdd9 [ 233.497971][ T6797] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 233.497984][ T6797] RBP: 00007f9cddc7e090 R08: 0000000000000000 R09: 0000000000000000 [ 233.497997][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.498009][ T6797] R13: 00007f9cdfca6038 R14: 00007f9cdfca5fa0 R15: 00007ffd684694d8 [ 233.498045][ T6797] [ 233.544494][ T4914] Bluetooth: hci1: command tx timeout [ 234.721731][ T3363] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.732044][ T3363] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.746271][ T3363] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.858455][ T3363] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.343165][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 235.619594][ T4914] Bluetooth: hci1: command tx timeout [ 237.050995][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.051017][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.722214][ T6837] IPv6: syztnl0: Disabled Multicast RS [ 239.178305][ T4914] Bluetooth: hci1: command tx timeout [ 239.411771][ T3363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.411793][ T3363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.659541][ T4914] Bluetooth: hci6: unexpected event 0x1d length: 6 > 5 [ 240.156609][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.191186][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.200341][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.224315][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.225914][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.732276][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.787485][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.802003][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.436990][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.438169][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.752330][ T4914] Bluetooth: hci1: command tx timeout [ 242.425444][ T4914] Bluetooth: hci2: command tx timeout [ 243.971230][ T4914] Bluetooth: hci4: command tx timeout [ 244.451306][ T6900] FAULT_INJECTION: forcing a failure. [ 244.451306][ T6900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.451340][ T6900] CPU: 0 UID: 0 PID: 6900 Comm: syz.6.216 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.451362][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.451381][ T6900] Call Trace: [ 244.451388][ T6900] [ 244.451396][ T6900] dump_stack_lvl+0xe8/0x150 [ 244.451427][ T6900] should_fail_ex+0x46b/0x600 [ 244.451473][ T6900] _copy_to_user+0x31/0xb0 [ 244.451501][ T6900] uart_get_rs485_config+0x2bb/0x610 [ 244.451533][ T6900] ? __pfx_uart_get_rs485_config+0x10/0x10 [ 244.451565][ T6900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.451608][ T6900] uart_ioctl+0x1378/0x1aa0 [ 244.451656][ T6900] ? __pfx_uart_ioctl+0x10/0x10 [ 244.451682][ T6900] ? __asan_memset+0x22/0x50 [ 244.451715][ T6900] ? smack_file_ioctl+0x263/0x360 [ 244.451744][ T6900] ? __pfx_smack_file_ioctl+0x10/0x10 [ 244.451781][ T6900] ? __fget_files+0x3a6/0x420 [ 244.451813][ T6900] ? __fget_files+0x2a/0x420 [ 244.451849][ T6900] tty_ioctl+0x92e/0xde0 [ 244.451875][ T6900] ? __pfx_tty_ioctl+0x10/0x10 [ 244.451900][ T6900] __se_sys_ioctl+0xff/0x170 [ 244.451926][ T6900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.451950][ T6900] do_syscall_64+0x15f/0xf80 [ 244.451969][ T6900] ? trace_irq_disable+0x3b/0x140 [ 244.451995][ T6900] ? clear_bhb_loop+0x40/0x90 [ 244.452022][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.452044][ T6900] RIP: 0033:0x7f9cdfa2cdd9 [ 244.452064][ T6900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.452081][ T6900] RSP: 002b:00007f9cddc7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.452104][ T6900] RAX: ffffffffffffffda RBX: 00007f9cdfca5fa0 RCX: 00007f9cdfa2cdd9 [ 244.452120][ T6900] RDX: 0000200000000040 RSI: 000000000000542e RDI: 0000000000000003 [ 244.452133][ T6900] RBP: 00007f9cddc7e090 R08: 0000000000000000 R09: 0000000000000000 [ 244.452146][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.452158][ T6900] R13: 00007f9cdfca6038 R14: 00007f9cdfca5fa0 R15: 00007ffd684694d8 [ 244.452192][ T6900] [ 244.506030][ T4914] Bluetooth: hci2: command tx timeout [ 244.904000][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 246.026981][ T4914] Bluetooth: hci4: command tx timeout [ 246.542040][ T162] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.587038][ T4914] Bluetooth: hci2: command tx timeout [ 246.868227][ T6918] orangefs_mount: mount request failed with -4 [ 246.961195][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.961412][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.961612][ T6784] bridge_slave_0: entered allmulticast mode [ 246.964353][ T6784] bridge_slave_0: entered promiscuous mode [ 247.097052][ T6947] comedi comedi1: board detection failed [ 247.164470][ T4914] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 247.316243][ T162] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.655659][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.665098][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.665299][ T6784] bridge_slave_1: entered allmulticast mode [ 247.682551][ T6784] bridge_slave_1: entered promiscuous mode [ 248.179547][ T4914] Bluetooth: hci4: command tx timeout [ 248.678342][ T4914] Bluetooth: hci2: command tx timeout [ 249.986390][ T162] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.186636][ T6784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.189760][ T4914] Bluetooth: hci4: command tx timeout [ 250.287339][ T6784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.080406][ T162] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.420638][ T6220] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 251.738341][ T6784] team0: Port device team_slave_0 added [ 251.810183][ T6220] usb 1-1: Using ep0 maxpacket: 16 [ 251.816995][ T6220] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 251.817024][ T6220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.817044][ T6220] usb 1-1: Product: syz [ 251.817058][ T6220] usb 1-1: Manufacturer: syz [ 251.817073][ T6220] usb 1-1: SerialNumber: syz [ 251.878809][ T6784] team0: Port device team_slave_1 added [ 252.073767][ T6220] r8152-cfgselector 1-1: Unknown version 0x0000 [ 252.073794][ T6220] r8152-cfgselector 1-1: config 0 descriptor?? [ 252.165544][ T4914] Bluetooth: hci6: unexpected event 0x1d length: 6 > 5 [ 252.396617][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.396636][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.396665][ T6784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.470271][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.470289][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.470318][ T6784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.564822][ T6784] hsr_slave_0: entered promiscuous mode [ 254.566248][ T6784] hsr_slave_1: entered promiscuous mode [ 254.567364][ T6784] debugfs: 'hsr0' already exists in 'hsr' [ 254.567390][ T6784] Cannot create hsr debugfs directory [ 256.082952][ T9] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 256.390477][ T7028] FAULT_INJECTION: forcing a failure. [ 256.390477][ T7028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.390520][ T7028] CPU: 0 UID: 0 PID: 7028 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 256.390545][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.390558][ T7028] Call Trace: [ 256.390566][ T7028] [ 256.390575][ T7028] dump_stack_lvl+0xe8/0x150 [ 256.390607][ T7028] should_fail_ex+0x46b/0x600 [ 256.390650][ T7028] prepare_alloc_pages+0x22a/0x6b0 [ 256.390690][ T7028] __alloc_frozen_pages_noprof+0x12f/0x380 [ 256.390726][ T7028] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.390762][ T7028] ? __pfx_policy_nodemask+0x10/0x10 [ 256.390787][ T7028] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.390826][ T7028] alloc_pages_mpol+0xd1/0x380 [ 256.390859][ T7028] alloc_pages_noprof+0xd2/0x2f0 [ 256.390891][ T7028] pte_alloc_one+0x22/0x380 [ 256.390924][ T7028] __pte_alloc+0x25/0x1a0 [ 256.390959][ T7028] do_pte_missing+0x1c13/0x2950 [ 256.390998][ T7028] ? __pmd_alloc+0x41b/0x5e0 [ 256.391029][ T7028] handle_mm_fault+0xd0a/0x13c0 [ 256.391061][ T7028] ? handle_mm_fault+0xe7/0x13c0 [ 256.391090][ T7028] ? __pfx_handle_mm_fault+0x10/0x10 [ 256.391138][ T7028] ? lock_mm_and_find_vma+0xa7/0x340 [ 256.391171][ T7028] do_user_addr_fault+0x75b/0x1340 [ 256.391215][ T7028] exc_page_fault+0x6a/0xc0 [ 256.391252][ T7028] asm_exc_page_fault+0x26/0x30 [ 256.391274][ T7028] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 256.391302][ T7028] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 256.391320][ T7028] RSP: 0018:ffffc90003eefc68 EFLAGS: 00050202 [ 256.391340][ T7028] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 256.391355][ T7028] RDX: 0000000000000000 RSI: ffffc90003eefce0 RDI: 0000200000000000 [ 256.391370][ T7028] RBP: ffffc90003eefd90 R08: ffffc90003eefd07 R09: 1ffff920007ddfa0 [ 256.391385][ T7028] R10: dffffc0000000000 R11: fffff520007ddfa1 R12: 0000200000000028 [ 256.391401][ T7028] R13: 00007ffffffff000 R14: ffffc90003eefce0 R15: 0000200000000000 [ 256.391435][ T7028] _copy_to_user+0x8a/0xb0 [ 256.391463][ T7028] semctl_info+0x2fe/0x4e0 [ 256.391539][ T7028] ? __pfx_semctl_info+0x10/0x10 [ 256.391575][ T7028] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 256.391616][ T7028] ? lockdep_hardirqs_on+0x7a/0x110 [ 256.391661][ T7028] __se_sys_semctl+0x2ce/0x3e0 [ 256.391693][ T7028] ? __pfx___se_sys_semctl+0x10/0x10 [ 256.391734][ T7028] ? __pfx_ksys_write+0x10/0x10 [ 256.391771][ T7028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.391795][ T7028] do_syscall_64+0x15f/0xf80 [ 256.391815][ T7028] ? trace_irq_disable+0x3b/0x140 [ 256.391843][ T7028] ? clear_bhb_loop+0x40/0x90 [ 256.391872][ T7028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.391894][ T7028] RIP: 0033:0x7fd09a0acdd9 [ 256.391914][ T7028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.391932][ T7028] RSP: 002b:00007fd0982fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 256.391954][ T7028] RAX: ffffffffffffffda RBX: 00007fd09a325fa0 RCX: 00007fd09a0acdd9 [ 256.391970][ T7028] RDX: 0000000000000013 RSI: 0000000000000001 RDI: 0000000000000000 [ 256.391983][ T7028] RBP: 00007fd0982fe090 R08: 0000000000000000 R09: 0000000000000000 [ 256.391996][ T7028] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.392010][ T7028] R13: 00007fd09a326038 R14: 00007fd09a325fa0 R15: 00007ffcb97fcfc8 [ 256.392047][ T7028] [ 256.623086][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.623176][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.652182][ T162] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.671236][ T7105] FAULT_INJECTION: forcing a failure. [ 262.671236][ T7105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.671322][ T7105] CPU: 0 UID: 0 PID: 7105 Comm: syz.6.265 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.671391][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.671426][ T7105] Call Trace: [ 262.671449][ T7105] [ 262.671480][ T7105] dump_stack_lvl+0xe8/0x150 [ 262.671573][ T7105] should_fail_ex+0x46b/0x600 [ 262.671676][ T7105] _copy_to_user+0x31/0xb0 [ 262.671753][ T7105] copy_siginfo_to_user+0x22/0xc0 [ 262.671821][ T7105] x64_setup_rt_frame+0x77c/0xcb0 [ 262.671939][ T7105] ? rt_spin_unlock+0x14f/0x200 [ 262.672095][ T7105] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 262.672209][ T7105] arch_do_signal_or_restart+0x429/0x830 [ 262.672314][ T7105] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 262.672426][ T7105] ? ksys_write+0x202/0x270 [ 262.672516][ T7105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.672582][ T7105] exit_to_user_mode_loop+0x86/0x480 [ 262.672644][ T7105] ? rcu_is_watching+0x15/0xb0 [ 262.672701][ T7105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.672756][ T7105] do_syscall_64+0x33e/0xf80 [ 262.672811][ T7105] ? trace_irq_disable+0x3b/0x140 [ 262.672877][ T7105] ? clear_bhb_loop+0x40/0x90 [ 262.672946][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.673011][ T7105] RIP: 0033:0x7f9cdf9ed60e [ 262.673068][ T7105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.673116][ T7105] RSP: 002b:00007f9cddc7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.673180][ T7105] RAX: 0000000000000001 RBX: 00007f9cddc7e6c0 RCX: 00007f9cdf9ed60e [ 262.673223][ T7105] RDX: 0000000000000001 RSI: 00007f9cddc7e090 RDI: 0000000000000004 [ 262.673271][ T7105] RBP: 00007f9cddc7e090 R08: 0000000000000000 R09: 0000000000000000 [ 262.673307][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.673355][ T7105] R13: 00007f9cdfca6038 R14: 00007f9cdfca5fa0 R15: 00007ffd684694d8 [ 262.673454][ T7105] [ 263.734879][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 263.927108][ T5773] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 263.953437][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.953562][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.953741][ T6857] bridge_slave_0: entered allmulticast mode [ 263.956420][ T6857] bridge_slave_0: entered promiscuous mode [ 263.988431][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.988565][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.988782][ T6852] bridge_slave_0: entered allmulticast mode [ 264.121923][ T5773] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 19, changing to 7 [ 264.126804][ T5773] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.126833][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.126852][ T5773] usb 1-1: Product: syz [ 264.126865][ T5773] usb 1-1: Manufacturer: syz [ 264.126878][ T5773] usb 1-1: SerialNumber: syz [ 264.183478][ T6852] bridge_slave_0: entered promiscuous mode [ 264.490601][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.493463][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.569766][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.569907][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.570527][ T6857] bridge_slave_1: entered allmulticast mode [ 264.613673][ T6857] bridge_slave_1: entered promiscuous mode [ 264.625661][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.625762][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.625949][ T6852] bridge_slave_1: entered allmulticast mode [ 264.653970][ T6852] bridge_slave_1: entered promiscuous mode [ 264.669070][ T5773] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 264.669103][ T5773] usb 1-1: 1:1 : unsupported sample bitwidth 2 in 6 bytes [ 264.724355][ T5773] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 265.607328][ T5773] usb 1-1: USB disconnect, device number 16 [ 266.700679][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.313966][ T7157] FAULT_INJECTION: forcing a failure. [ 269.313966][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 269.314004][ T7157] CPU: 0 UID: 0 PID: 7157 Comm: syz.6.282 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 269.314030][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.314044][ T7157] Call Trace: [ 269.314053][ T7157] [ 269.314062][ T7157] dump_stack_lvl+0xe8/0x150 [ 269.314095][ T7157] should_fail_ex+0x46b/0x600 [ 269.314137][ T7157] should_failslab+0xa8/0x100 [ 269.314167][ T7157] __kmalloc_noprof+0xdf/0x7b0 [ 269.314192][ T7157] ? kfree+0x4d/0x6c0 [ 269.314212][ T7157] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 269.314254][ T7157] tomoyo_realpath_from_path+0xe3/0x5d0 [ 269.314291][ T7157] ? tomoyo_domain+0xd8/0x130 [ 269.314319][ T7157] ? tomoyo_path_number_perm+0x219/0x630 [ 269.314350][ T7157] tomoyo_path_number_perm+0x246/0x630 [ 269.314388][ T7157] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 269.314415][ T7157] ? __lock_acquire+0x6b5/0x2cf0 [ 269.314450][ T7157] ? do_raw_spin_lock+0x12b/0x2f0 [ 269.314512][ T7157] ? __fget_files+0x2a/0x420 [ 269.314558][ T7157] ? __fget_files+0x2a/0x420 [ 269.314628][ T7157] ? __fget_files+0x3a6/0x420 [ 269.314662][ T7157] ? __fget_files+0x2a/0x420 [ 269.314702][ T7157] security_file_ioctl+0xc3/0x2a0 [ 269.314735][ T7157] __se_sys_ioctl+0x47/0x170 [ 269.314763][ T7157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.314788][ T7157] do_syscall_64+0x15f/0xf80 [ 269.314810][ T7157] ? trace_irq_disable+0x3b/0x140 [ 269.314837][ T7157] ? clear_bhb_loop+0x40/0x90 [ 269.314865][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.314889][ T7157] RIP: 0033:0x7f9cdfa2cdd9 [ 269.314910][ T7157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.314929][ T7157] RSP: 002b:00007f9cddc7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.314954][ T7157] RAX: ffffffffffffffda RBX: 00007f9cdfca5fa0 RCX: 00007f9cdfa2cdd9 [ 269.314971][ T7157] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 269.314986][ T7157] RBP: 00007f9cddc7e090 R08: 0000000000000000 R09: 0000000000000000 [ 269.315000][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.315012][ T7157] R13: 00007f9cdfca6038 R14: 00007f9cdfca5fa0 R15: 00007ffd684694d8 [ 269.315048][ T7157] [ 269.315091][ T7157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.315158][ T7157] comedi comedi2: 8255: I/O base address or length out of range [ 270.054617][ T7161] FAULT_INJECTION: forcing a failure. [ 270.054617][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 270.054655][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.6.283 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 270.054681][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.054695][ T7161] Call Trace: [ 270.054704][ T7161] [ 270.054713][ T7161] dump_stack_lvl+0xe8/0x150 [ 270.054753][ T7161] should_fail_ex+0x46b/0x600 [ 270.054796][ T7161] should_failslab+0xa8/0x100 [ 270.054827][ T7161] __kmalloc_cache_noprof+0x84/0x690 [ 270.054855][ T7161] ? xfrm_policy_alloc+0x78/0x310 [ 270.054893][ T7161] xfrm_policy_alloc+0x78/0x310 [ 270.054925][ T7161] xfrm_policy_construct+0x39/0x6b0 [ 270.054961][ T7161] xfrm_add_policy+0x286/0x820 [ 270.055002][ T7161] ? __pfx_xfrm_add_policy+0x10/0x10 [ 270.055043][ T7161] ? __nla_parse+0x40/0x60 [ 270.055074][ T7161] xfrm_user_rcv_msg+0x7ae/0xc40 [ 270.055114][ T7161] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 270.055189][ T7161] ? __lock_acquire+0x6b5/0x2cf0 [ 270.055230][ T7161] ? __pfx_ref_tracker_free+0x10/0x10 [ 270.055252][ T7161] ? __asan_memcpy+0x40/0x70 [ 270.055294][ T7161] netlink_rcv_skb+0x232/0x4b0 [ 270.055320][ T7161] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 270.055358][ T7161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.055394][ T7161] ? lockdep_hardirqs_on+0x7a/0x110 [ 270.055433][ T7161] ? mutex_lock_nested+0x152/0x1d0 [ 270.055462][ T7161] ? xfrm_netlink_rcv+0x6a/0x90 [ 270.055498][ T7161] xfrm_netlink_rcv+0x79/0x90 [ 270.055534][ T7161] netlink_unicast+0x780/0x920 [ 270.055581][ T7161] netlink_sendmsg+0x813/0xb40 [ 270.055617][ T7161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.055645][ T7161] ? unwind_get_return_address+0x4d/0x90 [ 270.055680][ T7161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.055709][ T7161] ____sys_sendmsg+0x94c/0x9c0 [ 270.055742][ T7161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.055787][ T7161] ? import_iovec+0x73/0xa0 [ 270.055816][ T7161] ___sys_sendmsg+0x2a5/0x360 [ 270.055853][ T7161] ? __lock_acquire+0x6b5/0x2cf0 [ 270.055886][ T7161] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.055951][ T7161] ? __fget_files+0x2a/0x420 [ 270.055984][ T7161] ? __fget_files+0x3a6/0x420 [ 270.056029][ T7161] __x64_sys_sendmsg+0x1c3/0x2a0 [ 270.056059][ T7161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.056096][ T7161] ? __pfx_ksys_write+0x10/0x10 [ 270.056131][ T7161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.056156][ T7161] do_syscall_64+0x15f/0xf80 [ 270.056178][ T7161] ? clear_bhb_loop+0x40/0x90 [ 270.056206][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.056228][ T7161] RIP: 0033:0x7f9cdfa2cdd9 [ 270.056248][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.056266][ T7161] RSP: 002b:00007f9cddc3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.056288][ T7161] RAX: ffffffffffffffda RBX: 00007f9cdfca6180 RCX: 00007f9cdfa2cdd9 [ 270.056303][ T7161] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000b [ 270.056317][ T7161] RBP: 00007f9cddc3c090 R08: 0000000000000000 R09: 0000000000000000 [ 270.056330][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.056343][ T7161] R13: 00007f9cdfca6218 R14: 00007f9cdfca6180 R15: 00007ffd684694d8 [ 270.056378][ T7161] [ 270.757580][ T162] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.654417][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.724066][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.791028][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.654125][ T6857] team0: Port device team_slave_0 added [ 277.044657][ T5603] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 277.204352][ T5603] usb 7-1: Using ep0 maxpacket: 32 [ 277.212249][ T5603] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 277.212279][ T5603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.212300][ T5603] usb 7-1: Product: syz [ 277.212314][ T5603] usb 7-1: Manufacturer: syz [ 277.212329][ T5603] usb 7-1: SerialNumber: syz [ 277.274299][ T5603] usb 7-1: config 0 descriptor?? [ 277.366018][ T162] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.522432][ T5603] airspy 7-1:0.0: usb_control_msg() failed -71 request 09 [ 277.522461][ T5603] airspy 7-1:0.0: Could not detect board [ 277.522576][ T5603] airspy 7-1:0.0: probe with driver airspy failed with error -71 [ 277.605898][ T5603] usb 7-1: USB disconnect, device number 2 [ 278.311914][ T6857] team0: Port device team_slave_1 added [ 278.332302][ T6852] team0: Port device team_slave_0 added [ 278.502623][ T6852] team0: Port device team_slave_1 added [ 278.623736][ T7236] netlink: 14 bytes leftover after parsing attributes in process `syz.0.314'. [ 280.483224][ T7266] FAULT_INJECTION: forcing a failure. [ 280.483224][ T7266] name failslab, interval 1, probability 0, space 0, times 0 [ 280.483261][ T7266] CPU: 0 UID: 0 PID: 7266 Comm: syz.6.327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 280.483287][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.483300][ T7266] Call Trace: [ 280.483308][ T7266] [ 280.483318][ T7266] dump_stack_lvl+0xe8/0x150 [ 280.483350][ T7266] should_fail_ex+0x46b/0x600 [ 280.483392][ T7266] should_failslab+0xa8/0x100 [ 280.483423][ T7266] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 280.483448][ T7266] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 280.483477][ T7266] ? dup_task_struct+0x52/0x840 [ 280.483515][ T7266] dup_task_struct+0x52/0x840 [ 280.483539][ T7266] ? rt_spin_unlock+0x160/0x200 [ 280.483572][ T7266] copy_process+0x89b/0x4460 [ 280.483631][ T7266] ? __pfx_copy_process+0x10/0x10 [ 280.483672][ T7266] vhost_task_create+0x1f9/0x380 [ 280.483712][ T7266] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 280.483744][ T7266] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 280.483778][ T7266] ? __pfx_vhost_task_create+0x10/0x10 [ 280.483819][ T7266] ? __pfx_vhost_task_fn+0x10/0x10 [ 280.483856][ T7266] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.483891][ T7266] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.483926][ T7266] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.483963][ T7266] ? mutex_lock_nested+0x152/0x1d0 [ 280.483998][ T7266] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 280.484039][ T7266] kvm_mmu_post_init_vm+0x147/0x2d0 [ 280.484079][ T7266] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 280.484121][ T7266] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 280.484150][ T7266] ? do_raw_spin_lock+0x12b/0x2f0 [ 280.484191][ T7266] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.484227][ T7266] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.484261][ T7266] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.484298][ T7266] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 280.484335][ T7266] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 280.484367][ T7266] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.484402][ T7266] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.484437][ T7266] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.484473][ T7266] ? rt_write_unlock+0x190/0x230 [ 280.484507][ T7266] kvm_vcpu_ioctl+0xa65/0xfe0 [ 280.484547][ T7266] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 280.484585][ T7266] ? __asan_memset+0x22/0x50 [ 280.484620][ T7266] ? smack_file_ioctl+0x331/0x360 [ 280.484650][ T7266] ? __pfx_smack_file_ioctl+0x10/0x10 [ 280.484690][ T7266] ? __fget_files+0x2a/0x420 [ 280.484725][ T7266] ? __fget_files+0x3a6/0x420 [ 280.484759][ T7266] ? __fget_files+0x2a/0x420 [ 280.484798][ T7266] ? bpf_lsm_file_ioctl+0x9/0x20 [ 280.484825][ T7266] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 280.484859][ T7266] __se_sys_ioctl+0xff/0x170 [ 280.484886][ T7266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.484912][ T7266] do_syscall_64+0x15f/0xf80 [ 280.484933][ T7266] ? trace_irq_disable+0x3b/0x140 [ 280.484959][ T7266] ? clear_bhb_loop+0x40/0x90 [ 280.484995][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.485018][ T7266] RIP: 0033:0x7f9cdfa2cdd9 [ 280.485039][ T7266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.485058][ T7266] RSP: 002b:00007f9cddc5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.485081][ T7266] RAX: ffffffffffffffda RBX: 00007f9cdfca6090 RCX: 00007f9cdfa2cdd9 [ 280.485097][ T7266] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 280.485111][ T7266] RBP: 00007f9cddc5d090 R08: 0000000000000000 R09: 0000000000000000 [ 280.485126][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.485139][ T7266] R13: 00007f9cdfca6128 R14: 00007f9cdfca6090 R15: 00007ffd684694d8 [ 280.485175][ T7266] [ 281.263462][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.044687][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.644373][ T7236] bond0 (unregistering): Released all slaves [ 283.106916][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.106934][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.106965][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.611701][ T162] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.685261][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.685280][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.685312][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.971442][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.971460][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.971518][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.117910][ T7235] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 284.117951][ T7235] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 284.117993][ T7235] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 284.182454][ T7235] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 284.234074][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.234094][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.234125][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.324382][ T7235] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 285.287223][ T6857] hsr_slave_0: entered promiscuous mode [ 285.298921][ T6857] hsr_slave_1: entered promiscuous mode [ 285.314790][ T6857] debugfs: 'hsr0' already exists in 'hsr' [ 285.314817][ T6857] Cannot create hsr debugfs directory [ 285.512335][ T6852] hsr_slave_0: entered promiscuous mode [ 285.516866][ T6852] hsr_slave_1: entered promiscuous mode [ 285.532697][ T6852] debugfs: 'hsr0' already exists in 'hsr' [ 285.532723][ T6852] Cannot create hsr debugfs directory [ 287.200492][ T2339] smbdirect: ib_dev[syz1] removed [ 287.248414][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 292.144484][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.190529][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.206417][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.208631][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.209409][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.813692][ T162] bridge_slave_1: left allmulticast mode [ 293.813728][ T162] bridge_slave_1: left promiscuous mode [ 293.821769][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.052737][ T5774] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 294.078320][ T162] bridge_slave_0: left allmulticast mode [ 294.078355][ T162] bridge_slave_0: left promiscuous mode [ 294.078594][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.202790][ T5774] usb 7-1: Using ep0 maxpacket: 32 [ 294.206637][ T5774] usb 7-1: unable to get BOS descriptor or descriptor too short [ 294.208566][ T5774] usb 7-1: config 0 has an invalid interface number: 18 but max is 0 [ 294.208591][ T5774] usb 7-1: config 0 has no interface number 0 [ 294.208623][ T5774] usb 7-1: config 0 interface 18 has no altsetting 0 [ 294.212430][ T5774] usb 7-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=58.21 [ 294.212457][ T5774] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.212479][ T5774] usb 7-1: Product: syz [ 294.212580][ T5774] usb 7-1: Manufacturer: syz [ 294.212597][ T5774] usb 7-1: SerialNumber: syz [ 294.292908][ T4914] Bluetooth: hci0: command tx timeout [ 294.311685][ T5774] usb 7-1: config 0 descriptor?? [ 294.542453][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.560657][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.616666][ T5774] asix 7-1:0.18: probe with driver asix failed with error -22 [ 294.638903][ T5774] usb 7-1: USB disconnect, device number 3 [ 295.298783][ T162] bridge_slave_1: left allmulticast mode [ 295.298820][ T162] bridge_slave_1: left promiscuous mode [ 295.299071][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.487812][ T162] bridge_slave_0: left allmulticast mode [ 295.487849][ T162] bridge_slave_0: left promiscuous mode [ 295.489773][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.941665][ T162] bridge_slave_1: left allmulticast mode [ 295.941700][ T162] bridge_slave_1: left promiscuous mode [ 295.942848][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.167220][ T162] bridge_slave_0: left allmulticast mode [ 296.167256][ T162] bridge_slave_0: left promiscuous mode [ 296.167500][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.373989][ T4914] Bluetooth: hci0: command tx timeout [ 298.455309][ T4914] Bluetooth: hci0: command tx timeout [ 300.124098][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.184381][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.186634][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.208366][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.210397][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.501724][ T4914] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.535102][ T4914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.536080][ T5601] Bluetooth: hci0: command tx timeout [ 300.555813][ T4914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.558112][ T4914] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.558947][ T4914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.297097][ T5604] Bluetooth: hci5: command tx timeout [ 302.697525][ T5604] Bluetooth: hci7: command tx timeout [ 303.935989][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.351246][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.378138][ T5604] Bluetooth: hci5: command tx timeout [ 304.428688][ T162] bond0 (unregistering): Released all slaves [ 304.778262][ T5604] Bluetooth: hci7: command tx timeout [ 304.859303][ T5604] Bluetooth: hci6: command 0x0406 tx timeout [ 306.459155][ T4914] Bluetooth: hci5: command tx timeout [ 306.859233][ T4914] Bluetooth: hci7: command tx timeout [ 308.540225][ T4914] Bluetooth: hci5: command tx timeout [ 308.754969][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.940387][ T4914] Bluetooth: hci7: command tx timeout [ 309.299696][ T5604] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 309.369745][ T5604] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 309.381697][ T5604] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 309.390044][ T5604] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 309.406096][ T5604] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 309.656155][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.762949][ T162] bond0 (unregistering): Released all slaves [ 311.502547][ T5604] Bluetooth: hci8: command tx timeout [ 313.584070][ T5604] Bluetooth: hci8: command tx timeout [ 315.138611][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.363187][ T4914] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 315.411677][ T4914] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 315.437230][ T4914] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 315.458381][ T4914] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 315.459154][ T4914] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 315.601498][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.664230][ T4914] Bluetooth: hci8: command tx timeout [ 315.686652][ T162] bond0 (unregistering): Released all slaves [ 315.781908][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 317.584567][ T4914] Bluetooth: hci9: command tx timeout [ 317.744689][ T4914] Bluetooth: hci8: command tx timeout [ 318.077610][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.077681][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.675681][ T4914] Bluetooth: hci9: command tx timeout [ 319.807050][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 321.747087][ T4914] Bluetooth: hci9: command tx timeout [ 322.037302][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 323.829271][ T4914] Bluetooth: hci9: command tx timeout [ 325.232255][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.232386][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.232609][ T7478] bridge_slave_0: entered allmulticast mode [ 325.266558][ T7478] bridge_slave_0: entered promiscuous mode [ 325.392774][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.393242][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.393474][ T7478] bridge_slave_1: entered allmulticast mode [ 325.396404][ T7478] bridge_slave_1: entered promiscuous mode [ 325.774132][ T7475] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.774351][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.774563][ T7475] bridge_slave_0: entered allmulticast mode [ 325.804037][ T7475] bridge_slave_0: entered promiscuous mode [ 325.893110][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.893581][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.893772][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.894326][ T7376] bridge_slave_0: entered allmulticast mode [ 325.934115][ T7376] bridge_slave_0: entered promiscuous mode [ 325.945488][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.945641][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.945854][ T7475] bridge_slave_1: entered allmulticast mode [ 325.970730][ T7475] bridge_slave_1: entered promiscuous mode [ 326.036631][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.036996][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.037134][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.037335][ T7376] bridge_slave_1: entered allmulticast mode [ 326.079207][ T7376] bridge_slave_1: entered promiscuous mode [ 326.130903][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.131034][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.131226][ T7485] bridge_slave_0: entered allmulticast mode [ 326.134436][ T7485] bridge_slave_0: entered promiscuous mode [ 326.187868][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.187998][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.188546][ T7492] bridge_slave_0: entered allmulticast mode [ 326.212549][ T7492] bridge_slave_0: entered promiscuous mode [ 326.384878][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.385010][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.385572][ T7485] bridge_slave_1: entered allmulticast mode [ 326.388738][ T7485] bridge_slave_1: entered promiscuous mode [ 326.453620][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.453747][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.453957][ T7492] bridge_slave_1: entered allmulticast mode [ 326.458044][ T7492] bridge_slave_1: entered promiscuous mode [ 326.511324][ T7475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.756478][ T7478] team0: Port device team_slave_0 added [ 326.815752][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.506846][ T7475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.521381][ T7478] team0: Port device team_slave_1 added [ 327.551988][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.579699][ T5259] 8021q: adding VLAN 0 to HW filter on device eth17 [ 327.676954][ T7485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.715843][ T7492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.788201][ T7485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.825202][ T7492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.828387][ T7475] team0: Port device team_slave_0 added [ 327.868082][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.868101][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.868130][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.007901][ T7376] team0: Port device team_slave_0 added [ 328.039076][ T7475] team0: Port device team_slave_1 added [ 328.074392][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.074410][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.074441][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.137758][ T7376] team0: Port device team_slave_1 added [ 328.188480][ T7485] team0: Port device team_slave_0 added [ 328.233160][ T7492] team0: Port device team_slave_0 added [ 328.265511][ T7485] team0: Port device team_slave_1 added [ 328.297276][ T7492] team0: Port device team_slave_1 added [ 328.298175][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.298197][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.298226][ T7475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.376484][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.376519][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.376549][ T7376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.445947][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.445965][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.445996][ T7475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.545156][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.545175][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.545205][ T7376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.677459][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.677478][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.677508][ T7485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.744500][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.744518][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.744549][ T7492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.815184][ T7478] hsr_slave_0: entered promiscuous mode [ 328.819077][ T7478] hsr_slave_1: entered promiscuous mode [ 328.831746][ T7478] debugfs: 'hsr0' already exists in 'hsr' [ 328.831775][ T7478] Cannot create hsr debugfs directory [ 328.833553][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.833567][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.833597][ T7485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.835960][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.835974][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.836003][ T7492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.277477][ T7475] hsr_slave_0: entered promiscuous mode [ 329.279905][ T7475] hsr_slave_1: entered promiscuous mode [ 329.297941][ T7475] debugfs: 'hsr0' already exists in 'hsr' [ 329.297967][ T7475] Cannot create hsr debugfs directory [ 329.377434][ T7376] hsr_slave_0: entered promiscuous mode [ 329.378802][ T7376] hsr_slave_1: entered promiscuous mode [ 329.379868][ T7376] debugfs: 'hsr0' already exists in 'hsr' [ 329.379893][ T7376] Cannot create hsr debugfs directory [ 329.491330][ T7485] hsr_slave_0: entered promiscuous mode [ 329.492871][ T7485] hsr_slave_1: entered promiscuous mode [ 329.493866][ T7485] debugfs: 'hsr0' already exists in 'hsr' [ 329.493892][ T7485] Cannot create hsr debugfs directory [ 329.540202][ T7492] hsr_slave_0: entered promiscuous mode [ 329.546782][ T7492] hsr_slave_1: entered promiscuous mode [ 329.547790][ T7492] debugfs: 'hsr0' already exists in 'hsr' [ 329.547815][ T7492] Cannot create hsr debugfs directory [ 332.693342][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 334.670269][ T5259] 8021q: adding VLAN 0 to HW filter on device eth19 [ 335.623868][ T5259] 8021q: adding VLAN 0 to HW filter on device eth20 [ 336.787910][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21 [ 338.652425][ T5259] 8021q: adding VLAN 0 to HW filter on device eth22 [ 351.590346][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.648385][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.676330][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.691348][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.703931][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.772881][ T4914] Bluetooth: hci3: command tx timeout [ 354.057180][ T7810] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.057422][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.057641][ T7810] bridge_slave_0: entered allmulticast mode [ 354.060524][ T7810] bridge_slave_0: entered promiscuous mode [ 354.096576][ T7810] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.096813][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.097043][ T7810] bridge_slave_1: entered allmulticast mode [ 354.100065][ T7810] bridge_slave_1: entered promiscuous mode [ 354.207483][ T7810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.212338][ T7810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.356929][ T7810] team0: Port device team_slave_0 added [ 354.374027][ T7810] team0: Port device team_slave_1 added [ 354.666275][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.666295][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.666326][ T7810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.672184][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.672200][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.672232][ T7810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.929872][ T7810] hsr_slave_0: entered promiscuous mode [ 354.931406][ T7810] hsr_slave_1: entered promiscuous mode [ 354.932516][ T7810] debugfs: 'hsr0' already exists in 'hsr' [ 354.932544][ T7810] Cannot create hsr debugfs directory [ 355.844067][ T5604] Bluetooth: hci3: command tx timeout [ 356.008849][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 357.924837][ T4914] Bluetooth: hci3: command tx timeout [ 360.006061][ T4914] Bluetooth: hci3: command tx timeout [ 360.420259][ T5604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.495435][ T5604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.540918][ T5604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.561909][ T5604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.565327][ T5604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.908485][ T5604] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 360.954067][ T5604] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 360.955292][ T5604] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 360.973189][ T5604] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 360.985899][ T5604] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 362.727186][ T5604] Bluetooth: hci6: command tx timeout [ 363.127537][ T5604] Bluetooth: hci10: command tx timeout [ 364.535369][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.535599][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.535850][ T7950] bridge_slave_0: entered allmulticast mode [ 364.580199][ T7950] bridge_slave_0: entered promiscuous mode [ 364.756648][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.756781][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.757066][ T7950] bridge_slave_1: entered allmulticast mode [ 364.786539][ T7950] bridge_slave_1: entered promiscuous mode [ 364.808677][ T4914] Bluetooth: hci6: command tx timeout [ 365.176373][ T7950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.208455][ T4914] Bluetooth: hci10: command tx timeout [ 365.236450][ T7950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.657980][ T7950] team0: Port device team_slave_0 added [ 365.667834][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.667965][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.668248][ T7943] bridge_slave_0: entered allmulticast mode [ 365.727593][ T7943] bridge_slave_0: entered promiscuous mode [ 365.749434][ T7950] team0: Port device team_slave_1 added [ 365.752586][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.752716][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.753291][ T7943] bridge_slave_1: entered allmulticast mode [ 365.800010][ T7943] bridge_slave_1: entered promiscuous mode [ 366.136371][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.136388][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.136419][ T7950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.243718][ T7943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.245855][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.245871][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.245902][ T7950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.250543][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 366.262918][ T4914] Bluetooth: hci2: command 0x0406 tx timeout [ 366.558160][ T7943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.889132][ T5601] Bluetooth: hci6: command tx timeout [ 367.047350][ T7943] team0: Port device team_slave_0 added [ 367.079716][ T7943] team0: Port device team_slave_1 added [ 367.091832][ T7950] hsr_slave_0: entered promiscuous mode [ 367.096107][ T7950] hsr_slave_1: entered promiscuous mode [ 367.099020][ T7950] debugfs: 'hsr0' already exists in 'hsr' [ 367.099087][ T7950] Cannot create hsr debugfs directory [ 367.165409][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.165424][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.165447][ T7943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.217132][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.217151][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.217182][ T7943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.293571][ T5601] Bluetooth: hci10: command tx timeout [ 367.558588][ T7943] hsr_slave_0: entered promiscuous mode [ 367.568369][ T7943] hsr_slave_1: entered promiscuous mode [ 367.573637][ T7943] debugfs: 'hsr0' already exists in 'hsr' [ 367.573714][ T7943] Cannot create hsr debugfs directory [ 368.970461][ T5601] Bluetooth: hci6: command tx timeout [ 369.370522][ T5601] Bluetooth: hci10: command tx timeout [ 370.716154][ T5610] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 371.053858][ T5610] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 371.074620][ T5610] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 371.077904][ T5610] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 371.097947][ T5610] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 373.190779][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.191649][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.191878][ T8074] bridge_slave_0: entered allmulticast mode [ 373.222500][ T8074] bridge_slave_0: entered promiscuous mode [ 373.242083][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.250469][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.261476][ T8074] bridge_slave_1: entered allmulticast mode [ 373.279371][ T8074] bridge_slave_1: entered promiscuous mode [ 373.292677][ T5610] Bluetooth: hci11: command tx timeout [ 373.447306][ T8074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.460750][ T8074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.631620][ T8074] team0: Port device team_slave_0 added [ 374.039066][ T8074] team0: Port device team_slave_1 added [ 374.122000][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.122018][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.122048][ T8074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.184769][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.184788][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.184819][ T8074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.301908][ T8074] hsr_slave_0: entered promiscuous mode [ 374.309428][ T8074] hsr_slave_1: entered promiscuous mode [ 374.310551][ T8074] debugfs: 'hsr0' already exists in 'hsr' [ 374.310577][ T8074] Cannot create hsr debugfs directory [ 375.373551][ T5610] Bluetooth: hci11: command tx timeout [ 376.534774][ T5601] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 376.590730][ T5601] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 376.617650][ T5601] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 376.619268][ T5601] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 376.620210][ T5601] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 377.456240][ T5601] Bluetooth: hci11: command tx timeout [ 377.905971][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.906186][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.906431][ T8113] bridge_slave_0: entered allmulticast mode [ 377.909353][ T8113] bridge_slave_0: entered promiscuous mode [ 377.913077][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.913311][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.913532][ T8113] bridge_slave_1: entered allmulticast mode [ 377.966595][ T8113] bridge_slave_1: entered promiscuous mode [ 378.022221][ T8113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.038439][ T8113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.094172][ T8113] team0: Port device team_slave_0 added [ 378.112718][ T8113] team0: Port device team_slave_1 added [ 378.178364][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.178383][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.178413][ T8113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.180879][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.180895][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.180925][ T8113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.336104][ T8113] hsr_slave_0: entered promiscuous mode [ 378.337528][ T8113] hsr_slave_1: entered promiscuous mode [ 378.338575][ T8113] debugfs: 'hsr0' already exists in 'hsr' [ 378.338600][ T8113] Cannot create hsr debugfs directory [ 378.815689][ T5601] Bluetooth: hci12: command tx timeout [ 379.539069][ T5601] Bluetooth: hci11: command tx timeout [ 379.555248][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.555321][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.896342][ T5601] Bluetooth: hci12: command tx timeout [ 382.977432][ T5601] Bluetooth: hci12: command tx timeout [ 385.058408][ T5601] Bluetooth: hci12: command tx timeout [ 412.279458][ T5610] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 412.345636][ T5610] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 412.349718][ T5610] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 412.370273][ T5610] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 412.381105][ T5610] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 413.599000][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.599257][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.599491][ T8194] bridge_slave_0: entered allmulticast mode [ 413.632088][ T8194] bridge_slave_0: entered promiscuous mode [ 413.678082][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.678268][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.678842][ T8194] bridge_slave_1: entered allmulticast mode [ 413.681954][ T8194] bridge_slave_1: entered promiscuous mode [ 413.758715][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.776183][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.831778][ T8194] team0: Port device team_slave_0 added [ 413.841891][ T8194] team0: Port device team_slave_1 added [ 413.936412][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.936430][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.936460][ T8194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.939022][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.939038][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.939069][ T8194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.195830][ T8194] hsr_slave_0: entered promiscuous mode [ 414.197506][ T8194] hsr_slave_1: entered promiscuous mode [ 414.198694][ T8194] debugfs: 'hsr0' already exists in 'hsr' [ 414.198721][ T8194] Cannot create hsr debugfs directory [ 414.513033][ T5601] Bluetooth: hci13: command tx timeout [ 416.604141][ T5610] Bluetooth: hci13: command tx timeout [ 417.474551][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 418.675598][ T5601] Bluetooth: hci13: command tx timeout [ 420.756605][ T5601] Bluetooth: hci13: command tx timeout [ 421.420275][ T5604] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 421.498954][ T5604] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 421.500245][ T5604] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 421.501463][ T5604] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 421.503476][ T5604] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 421.865203][ T5604] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 421.897917][ T5604] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 421.927843][ T5604] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 421.932265][ T5604] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 421.933058][ T5604] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 422.612470][ T5601] Bluetooth: hci5: command 0x0406 tx timeout [ 422.991896][ T162] hsr_slave_0: left promiscuous mode [ 423.106044][ T162] hsr_slave_1: left promiscuous mode [ 423.115019][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.115048][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.312818][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.312850][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.735319][ T162] hsr_slave_0: left promiscuous mode [ 423.797795][ T5610] Bluetooth: hci14: command tx timeout [ 423.805386][ T162] hsr_slave_1: left promiscuous mode [ 423.806647][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.806672][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.869771][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.869801][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.037839][ T5610] Bluetooth: hci15: command tx timeout [ 424.106291][ T162] hsr_slave_0: left promiscuous mode [ 424.180043][ T162] hsr_slave_1: left promiscuous mode [ 424.182600][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.313567][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.510962][ T162] veth1_macvtap: left promiscuous mode [ 424.511074][ T162] veth0_macvtap: left promiscuous mode [ 424.511346][ T162] veth1_vlan: left promiscuous mode [ 424.511530][ T162] veth0_vlan: left promiscuous mode [ 424.772508][ T162] veth1_macvtap: left promiscuous mode [ 424.772614][ T162] veth0_macvtap: left promiscuous mode [ 424.804525][ T162] veth1_vlan: left promiscuous mode [ 424.804728][ T162] veth0_vlan: left promiscuous mode [ 425.206687][ T162] veth1_macvtap: left promiscuous mode [ 425.206798][ T162] veth0_macvtap: left promiscuous mode [ 425.207045][ T162] veth1_vlan: left promiscuous mode [ 425.207230][ T162] veth0_vlan: left promiscuous mode [ 425.882012][ T5610] Bluetooth: hci14: command tx timeout [ 426.118845][ T5610] Bluetooth: hci15: command tx timeout [ 427.276104][ T162] team0 (unregistering): Port device team_slave_1 removed [ 427.342841][ T162] team0 (unregistering): Port device team_slave_0 removed [ 427.722539][ T5610] Bluetooth: hci7: command 0x0406 tx timeout [ 427.960194][ T5601] Bluetooth: hci14: command tx timeout [ 428.209831][ T5601] Bluetooth: hci15: command tx timeout [ 429.156873][ T162] team0 (unregistering): Port device team_slave_1 removed [ 429.228798][ T162] team0 (unregistering): Port device team_slave_0 removed [ 430.040845][ T5601] Bluetooth: hci14: command tx timeout [ 430.281021][ T5601] Bluetooth: hci15: command tx timeout [ 430.898879][ T5604] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 430.918684][ T5604] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 430.919818][ T5604] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 430.921017][ T5604] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 430.983048][ T5604] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 431.660492][ T162] team0 (unregistering): Port device team_slave_1 removed [ 431.733397][ T162] team0 (unregistering): Port device team_slave_0 removed [ 432.842230][ T5601] Bluetooth: hci8: command 0x0406 tx timeout [ 433.092266][ T5601] Bluetooth: hci16: command tx timeout [ 434.105963][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.106190][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.106424][ T8214] bridge_slave_0: entered allmulticast mode [ 434.141400][ T8214] bridge_slave_0: entered promiscuous mode [ 434.197672][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.197874][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.198196][ T8214] bridge_slave_1: entered allmulticast mode [ 434.224161][ T8214] bridge_slave_1: entered promiscuous mode [ 434.403969][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.476856][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.663172][ T8214] team0: Port device team_slave_0 added [ 434.690439][ T8214] team0: Port device team_slave_1 added [ 434.840757][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.840884][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.841159][ T8219] bridge_slave_0: entered allmulticast mode [ 434.869244][ T8219] bridge_slave_0: entered promiscuous mode [ 434.901428][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.901445][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.901475][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.971835][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.971852][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.971879][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.972634][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.972833][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.973019][ T8219] bridge_slave_1: entered allmulticast mode [ 435.048587][ T8219] bridge_slave_1: entered promiscuous mode [ 435.173370][ T5610] Bluetooth: hci16: command tx timeout [ 435.201000][ T8219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.266603][ T8219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.266841][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.267286][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.267523][ T8235] bridge_slave_0: entered allmulticast mode [ 435.270295][ T8235] bridge_slave_0: entered promiscuous mode [ 435.322277][ T8214] hsr_slave_0: entered promiscuous mode [ 435.331246][ T8214] hsr_slave_1: entered promiscuous mode [ 435.332341][ T8214] debugfs: 'hsr0' already exists in 'hsr' [ 435.332365][ T8214] Cannot create hsr debugfs directory [ 435.370227][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.370619][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.370850][ T8235] bridge_slave_1: entered allmulticast mode [ 435.382064][ T8235] bridge_slave_1: entered promiscuous mode [ 436.048775][ T8219] team0: Port device team_slave_0 added [ 436.127541][ T8219] team0: Port device team_slave_1 added [ 436.149506][ T8235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.218330][ T8235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.325849][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.325868][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.325899][ T8219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.431731][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.431749][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.431779][ T8219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.925653][ T5604] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 436.963518][ T5604] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 436.969253][ T5604] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 437.045608][ T5604] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 437.046515][ T5604] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 437.254407][ T5610] Bluetooth: hci16: command tx timeout [ 437.341702][ T8235] team0: Port device team_slave_0 added [ 437.418193][ T8235] team0: Port device team_slave_1 added [ 437.570586][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.570605][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.570634][ T8235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.670670][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.670688][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.670719][ T8235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.732011][ T8219] hsr_slave_0: entered promiscuous mode [ 437.742933][ T8219] hsr_slave_1: entered promiscuous mode [ 437.752407][ T8219] debugfs: 'hsr0' already exists in 'hsr' [ 437.752435][ T8219] Cannot create hsr debugfs directory [ 437.964856][ T5610] Bluetooth: hci9: command 0x0406 tx timeout [ 438.020923][ T8235] hsr_slave_0: entered promiscuous mode [ 438.023037][ T8235] hsr_slave_1: entered promiscuous mode [ 438.024298][ T8235] debugfs: 'hsr0' already exists in 'hsr' [ 438.024325][ T8235] Cannot create hsr debugfs directory [ 439.245684][ T5601] Bluetooth: hci17: command tx timeout [ 439.328151][ T5601] Bluetooth: hci16: command tx timeout [ 440.039332][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.039554][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.040151][ T8271] bridge_slave_0: entered allmulticast mode [ 440.043124][ T8271] bridge_slave_0: entered promiscuous mode [ 440.086681][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.086837][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.087176][ T8271] bridge_slave_1: entered allmulticast mode [ 440.139173][ T8271] bridge_slave_1: entered promiscuous mode [ 440.217236][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.222535][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.292625][ T8271] team0: Port device team_slave_0 added [ 440.303105][ T8271] team0: Port device team_slave_1 added [ 440.381757][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.381776][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.381823][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.432508][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.432526][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.432557][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.018969][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.019044][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.188494][ T8271] hsr_slave_0: entered promiscuous mode [ 441.190307][ T8271] hsr_slave_1: entered promiscuous mode [ 441.191476][ T8271] debugfs: 'hsr0' already exists in 'hsr' [ 441.191501][ T8271] Cannot create hsr debugfs directory [ 441.326681][ T5601] Bluetooth: hci17: command tx timeout [ 443.408006][ T5601] Bluetooth: hci17: command tx timeout [ 444.850173][ T38] INFO: task syz-executor:6784 blocked for more than 143 seconds. [ 444.850200][ T38] Not tainted syzkaller #0 [ 444.850212][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.850222][ T38] task:syz-executor state:D stack:22792 pid:6784 tgid:6784 ppid:1 task_flags:0x400140 flags:0x00080002 [ 444.850297][ T38] Call Trace: [ 444.850306][ T38] [ 444.850320][ T38] __schedule+0x1681/0x54c0 [ 444.850358][ T38] ? unwind_next_frame+0xa6/0x2550 [ 444.850421][ T38] ? __pfx___schedule+0x10/0x10 [ 444.850469][ T38] rt_mutex_schedule+0x76/0xf0 [ 444.850492][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 444.850540][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 444.850573][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 444.850603][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 444.850654][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 444.850694][ T38] ? new_device_store+0x13c/0x710 [ 444.850694][ T38] ? new_device_store+0x13c/0x710 [ 444.850726][ T38] mutex_lock_nested+0x168/0x1d0 [ 444.850755][ T38] ? new_device_store+0x13c/0x710 [ 444.850791][ T38] new_device_store+0x13c/0x710 [ 444.850828][ T38] ? __pfx_new_device_store+0x10/0x10 [ 444.850865][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 444.850898][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 444.850930][ T38] ? sysfs_kf_write+0x166/0x260 [ 444.850964][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 444.850994][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 444.851030][ T38] vfs_write+0x629/0xba0 [ 444.851065][ T38] ? __pfx_vfs_write+0x10/0x10 [ 444.851094][ T38] ? do_sys_openat2+0x14c/0x200 [ 444.851124][ T38] ? kmem_cache_free+0x187/0x6c0 [ 444.851169][ T38] ksys_write+0x156/0x270 [ 444.851198][ T38] ? __pfx_ksys_write+0x10/0x10 [ 444.851233][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.851259][ T38] do_syscall_64+0x15f/0xf80 [ 444.851280][ T38] ? trace_irq_disable+0x3b/0x140 [ 444.851307][ T38] ? clear_bhb_loop+0x40/0x90 [ 444.851335][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.851366][ T38] RIP: 0033:0x7f2ef8d0d60e [ 444.851386][ T38] RSP: 002b:00007ffee71ce378 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.851409][ T38] RAX: ffffffffffffffda RBX: 000055557026d500 RCX: 00007f2ef8d0d60e [ 444.851426][ T38] RDX: 0000000000000003 RSI: 00007ffee71ce400 RDI: 0000000000000005 [ 444.859788][ T38] RBP: 00007f2ef8de3610 R08: 0000000000000000 R09: 0000000000000000 [ 444.859845][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 444.859899][ T38] R13: 00007ffee71ce400 R14: 00007f2ef9af4620 R15: 0000000000000003 [ 444.860001][ T38] [ 444.860040][ T38] INFO: task syz-executor:6852 blocked for more than 143 seconds. [ 444.860084][ T38] Not tainted syzkaller #0 [ 444.860109][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.860139][ T38] task:syz-executor state:D stack:22056 pid:6852 tgid:6852 ppid:1 task_flags:0x400140 flags:0x00080002 [ 444.860298][ T38] Call Trace: [ 444.860320][ T38] [ 444.860352][ T38] __schedule+0x1681/0x54c0 [ 444.860536][ T38] ? __pfx___schedule+0x10/0x10 [ 444.860641][ T38] rt_mutex_schedule+0x76/0xf0 [ 444.860713][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 444.860832][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 444.860917][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 444.861002][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 444.861175][ T38] ? del_device_store+0xd7/0x370 [ 444.871413][ T38] ? del_device_store+0xd7/0x370 [ 444.871545][ T38] ? del_device_store+0xd7/0x370 [ 444.871634][ T38] mutex_lock_nested+0x168/0x1d0 [ 444.871736][ T38] del_device_store+0xd7/0x370 [ 444.871828][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 444.871915][ T38] ? __pfx_del_device_store+0x10/0x10 [ 444.872003][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 444.872083][ T38] ? sysfs_kf_write+0x166/0x260 [ 444.872175][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 444.872252][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 444.872351][ T38] vfs_write+0x629/0xba0 [ 444.872461][ T38] ? __pfx_vfs_write+0x10/0x10 [ 444.872557][ T38] ? do_sys_openat2+0x14c/0x200 [ 444.872655][ T38] ? kmem_cache_free+0x187/0x6c0 [ 444.872778][ T38] ksys_write+0x156/0x270 [ 444.879906][ T38] ? __pfx_ksys_write+0x10/0x10 [ 444.880023][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.880092][ T38] do_syscall_64+0x15f/0xf80 [ 444.880158][ T38] ? clear_bhb_loop+0x40/0x90 [ 444.880236][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.880303][ T38] RIP: 0033:0x7f7f67a4d60e [ 444.880359][ T38] RSP: 002b:00007ffe0b92e908 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.880425][ T38] RAX: ffffffffffffffda RBX: 00005555681c2500 RCX: 00007f7f67a4d60e [ 444.880470][ T38] RDX: 0000000000000001 RSI: 00007ffe0b92e990 RDI: 0000000000000005 [ 444.880492][ T38] RBP: 00007f7f67b235ec R08: 0000000000000000 R09: 0000000000000000 [ 444.880507][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.880529][ T38] R13: 00007ffe0b92e990 R14: 00007f7f68834620 R15: 0000000000000003 [ 444.880625][ T38] [ 444.880881][ T38] [ 444.880881][ T38] Showing all locks held in the system: [ 444.880914][ T38] 3 locks held by kworker/u8:0/12: [ 444.880959][ T38] 4 locks held by pr/legacy/17: [ 444.880995][ T38] 5 locks held by rcuc/1/28: [ 444.881030][ T38] 1 lock held by khungtaskd/38: [ 444.881063][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 444.881294][ T38] 4 locks held by kworker/u8:7/162: [ 444.886696][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 444.886895][ T38] #1: ffffc900038bfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 444.887044][ T38] #2: ffffffff8f3471c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 444.887188][ T38] #3: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 444.887447][ T38] 2 locks held by klogd/4953: [ 444.887482][ T38] 2 locks held by getty/5355: [ 444.887516][ T38] #0: ffff8880372930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 444.887665][ T38] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 444.887837][ T38] 3 locks held by kworker/0:7/5774: [ 444.887911][ T38] 4 locks held by syz-executor/6784: [ 444.887943][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.893592][ T38] #1: ffff88802503a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.893750][ T38] #2: ffff8880291cd1e8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.893893][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 444.894079][ T38] 4 locks held by syz-executor/6852: [ 444.894099][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.894209][ T38] #1: ffff88803b9f4c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.894367][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.894544][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.894715][ T38] 7 locks held by syz-executor/6857: [ 444.894749][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.894907][ T38] #1: ffff888032b3f478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.900662][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.900728][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.900794][ T38] #4: ffff8880651b0160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 444.900866][ T38] #5: ffff88803bc52310 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 444.900928][ T38] #6: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 444.900985][ T38] 4 locks held by syz-executor/7376: [ 444.900999][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.901059][ T38] #1: ffff88803c314878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.901117][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.901179][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.901244][ T38] 4 locks held by syz-executor/7475: [ 444.901257][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.901317][ T38] #1: ffff88804cc29478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.901375][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.901454][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.901521][ T38] 4 locks held by syz-executor/7478: [ 444.901534][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.901593][ T38] #1: ffff88803bfef078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.901652][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.901716][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.901781][ T38] 4 locks held by syz-executor/7485: [ 444.901794][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.901928][ T38] #1: ffff88804cc3e078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.902058][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.907318][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.907475][ T38] 4 locks held by syz-executor/7492: [ 444.907523][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.907681][ T38] #1: ffff88802b342078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.907831][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.913025][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.913241][ T38] 4 locks held by syz-executor/7810: [ 444.913282][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.913442][ T38] #1: ffff88804178d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.920819][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.921004][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.921183][ T38] 4 locks held by syz-executor/7943: [ 444.921218][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.921384][ T38] #1: ffff888060fcf878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.921534][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.921726][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.921912][ T38] 4 locks held by syz-executor/7950: [ 444.921946][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.922113][ T38] #1: ffff888020f98878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.933528][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.933717][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.933922][ T38] 4 locks held by syz-executor/8074: [ 444.933957][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.934114][ T38] #1: ffff88805c6dd078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.934299][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.934482][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.934599][ T38] 4 locks held by syz-executor/8113: [ 444.934627][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.934776][ T38] #1: ffff88803a806478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.934944][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.943322][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.943453][ T38] 4 locks held by syz-executor/8194: [ 444.943484][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.943685][ T38] #1: ffff88803b9e7c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.943837][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.944022][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.944201][ T38] 4 locks held by syz-executor/8214: [ 444.944228][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.944388][ T38] #1: ffff888044ddcc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.944548][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.951324][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.951434][ T38] 4 locks held by syz-executor/8219: [ 444.951448][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.951521][ T38] #1: ffff888058206878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.951592][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.951654][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.951752][ T38] 4 locks held by syz-executor/8235: [ 444.951765][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.951837][ T38] #1: ffff88803c77ec78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.951919][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.952014][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.952100][ T38] 4 locks held by syz-executor/8271: [ 444.952113][ T38] #0: ffff888037474480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 444.952190][ T38] #1: ffff88804cc27078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 444.952249][ T38] #2: ffff8880291cd0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 444.952324][ T38] #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 444.952391][ T38] [ 444.952397][ T38] ============================================= [ 444.952397][ T38] [ 444.952419][ T38] NMI backtrace for cpu 0 [ 444.952447][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.952493][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.952516][ T38] Call Trace: [ 444.952531][ T38] [ 444.952545][ T38] dump_stack_lvl+0xe8/0x150 [ 444.952595][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 444.952626][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 444.952654][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 444.952686][ T38] sys_info+0x135/0x170 [ 444.952711][ T38] watchdog+0xfd3/0x1030 [ 444.952745][ T38] ? watchdog+0x1c9/0x1030 [ 444.952777][ T38] kthread+0x388/0x470 [ 444.952812][ T38] ? __pfx_watchdog+0x10/0x10 [ 444.952835][ T38] ? __pfx_kthread+0x10/0x10 [ 444.952874][ T38] ret_from_fork+0x514/0xb70 [ 444.952903][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 444.952929][ T38] ? __switch_to+0xc79/0x1410 [ 444.952965][ T38] ? __pfx_kthread+0x10/0x10 [ 444.952998][ T38] ret_from_fork_asm+0x1a/0x30 [ 444.953049][ T38] [ 444.953074][ T38] Sending NMI from CPU 0 to CPUs 1: [ 444.953107][ C1] NMI backtrace for cpu 1 [ 444.953121][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.953142][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.953153][ C1] RIP: 0010:match_held_lock+0x78/0xb0 [ 444.953185][ C1] Code: 00 00 48 c7 c2 30 e3 12 93 48 29 d0 48 c1 f8 03 48 ba 29 5c 8f c2 f5 28 5c 8f 48 0f af d0 bb 01 00 00 00 48 39 ca 74 02 31 db <89> d8 5b 41 5e e9 fe be 03 00 cc 90 e8 b7 e2 81 f9 85 c0 74 1c 83 [ 444.953201][ C1] RSP: 0018:ffffc90000a2e918 EFLAGS: 00000046 [ 444.953217][ C1] RAX: 0000000000000004 RBX: 0000000000000001 RCX: 0000000000000046 [ 444.953229][ C1] RDX: ffffc90000a2ea01 RSI: ffffffff8dfc8140 RDI: ffff88801daa68b0 [ 444.953244][ C1] RBP: ffff88801daa68b0 R08: ffffc90000a2efd0 R09: 0000000000000000 [ 444.953257][ C1] R10: ffffc90000a2eab8 R11: fffff52000145d59 R12: 0000000000000003 [ 444.953270][ C1] R13: 0000000000000003 R14: ffffffff8dfc8140 R15: ffff88801daa5c40 [ 444.953283][ C1] FS: 0000000000000000(0000) GS:ffff88812627d000(0000) knlGS:0000000000000000 [ 444.953297][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.953309][ C1] CR2: 00007fe9410a3878 CR3: 0000000037eda000 CR4: 00000000003526f0 [ 444.953325][ C1] Call Trace: [ 444.953332][ C1] [ 444.953339][ C1] lock_release+0x10c/0x3c0 [ 444.953365][ C1] ? unwind_next_frame+0xa6/0x2550 [ 444.953390][ C1] ? unwind_next_frame+0xa6/0x2550 [ 444.953412][ C1] unwind_next_frame+0x1bba/0x2550 [ 444.953438][ C1] ? unwind_next_frame+0xa6/0x2550 [ 444.953461][ C1] ? synproxy_send_client_synack+0x172/0xe30 [ 444.953487][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 444.953509][ C1] arch_stack_walk+0x11b/0x150 [ 444.953535][ C1] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 444.953559][ C1] ? __alloc_skb+0x27d/0x7d0 [ 444.953577][ C1] stack_trace_save+0xa9/0x100 [ 444.953597][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 444.953625][ C1] ? stack_depot_save_flags+0x33/0x810 [ 444.953655][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 444.953673][ C1] kasan_save_track+0x3e/0x80 [ 444.953690][ C1] ? kasan_save_track+0x3e/0x80 [ 444.953706][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 444.953724][ C1] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 444.953744][ C1] ? __alloc_skb+0x27d/0x7d0 [ 444.953760][ C1] ? synproxy_send_client_synack+0x172/0xe30 [ 444.953811][ C1] __kasan_slab_alloc+0x6c/0x80 [ 444.953831][ C1] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 444.953851][ C1] ? __alloc_skb+0x27d/0x7d0 [ 444.953871][ C1] __alloc_skb+0x27d/0x7d0 [ 444.953890][ C1] synproxy_send_client_synack+0x172/0xe30 [ 444.953919][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 444.953942][ C1] ? nft_tunnel_opts_dump+0x80/0xde0 [ 444.953959][ C1] ? synproxy_pernet+0x45/0x270 [ 444.953985][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 444.954011][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 444.954035][ C1] ? nf_ip_checksum+0x13c/0x510 [ 444.954063][ C1] nft_synproxy_do_eval+0x305/0x580 [ 444.954085][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 444.954106][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 444.954132][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 444.954154][ C1] nft_do_chain+0x467/0x19f0 [ 444.954186][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 444.954221][ C1] ? ip_vs_in_hook+0xc50/0x1bf0 [ 444.954243][ C1] ? ip_vs_in_hook+0xc84/0x1bf0 [ 444.954271][ C1] nft_do_chain_inet+0x360/0x4b0 [ 444.954297][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 444.954325][ C1] ? NF_HOOK+0x9e/0x3c0 [ 444.954349][ C1] ? NF_HOOK+0x9e/0x3c0 [ 444.954373][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 444.954397][ C1] nf_hook_slow+0xc5/0x220 [ 444.954420][ C1] NF_HOOK+0x21f/0x3c0 [ 444.954444][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 444.954469][ C1] ? NF_HOOK+0x9e/0x3c0 [ 444.954492][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 444.954514][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 444.954540][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 444.954568][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 444.954594][ C1] NF_HOOK+0x336/0x3c0 [ 444.954621][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 444.954652][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 444.954675][ C1] ? NF_HOOK+0x9e/0x3c0 [ 444.954697][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 444.954721][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 444.954748][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 444.954770][ C1] ? process_backlog+0x271/0xc60 [ 444.954797][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 444.954820][ C1] process_backlog+0x569/0xc60 [ 444.954848][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 444.954876][ C1] __napi_poll+0xab/0x550 [ 444.954903][ C1] net_rx_action+0x696/0xe00 [ 444.954937][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 444.954963][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 444.954994][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 444.955030][ C1] handle_softirqs+0x1de/0x6d0 [ 444.955055][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 444.955074][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 444.955099][ C1] rcu_cpu_kthread+0x9e8/0x1470 [ 444.955127][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 444.955156][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 444.955181][ C1] ? schedule+0x90/0x360 [ 444.955210][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 444.955231][ C1] smpboot_thread_fn+0x541/0xa50 [ 444.955253][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 444.955279][ C1] kthread+0x388/0x470 [ 444.955302][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 444.955324][ C1] ? __pfx_kthread+0x10/0x10 [ 444.955348][ C1] ret_from_fork+0x514/0xb70 [ 444.955368][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 444.955388][ C1] ? __switch_to+0xc79/0x1410 [ 444.955416][ C1] ? __pfx_kthread+0x10/0x10 [ 444.955440][ C1] ret_from_fork_asm+0x1a/0x30 [ 444.955471][ C1] [ 444.984604][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 444.984628][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.984655][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.984668][ T38] Call Trace: [ 444.984678][ T38] [ 444.984687][ T38] vpanic+0x56c/0xa60 [ 444.984720][ T38] ? __pfx___schedule+0x10/0x10 [ 444.984756][ T38] ? __pfx_vpanic+0x10/0x10 [ 444.984795][ T38] panic+0xc5/0xd0 [ 444.984822][ T38] ? __pfx_panic+0x10/0x10 [ 444.984859][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 444.984901][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 444.984935][ T38] watchdog+0x102c/0x1030 [ 444.984970][ T38] ? watchdog+0x1c9/0x1030 [ 444.985003][ T38] kthread+0x388/0x470 [ 444.985034][ T38] ? __pfx_watchdog+0x10/0x10 [ 444.985058][ T38] ? __pfx_kthread+0x10/0x10 [ 444.985090][ T38] ret_from_fork+0x514/0xb70 [ 444.985119][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 444.985146][ T38] ? __switch_to+0xc79/0x1410 [ 444.985184][ T38] ? __pfx_kthread+0x10/0x10 [ 444.985217][ T38] ret_from_fork_asm+0x1a/0x30 [ 444.985263][ T38] [ 444.985869][ T38] Kernel Offset: disabled