last executing test programs: 21m37.964545698s ago: executing program 32 (id=36): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x1, 0x5, 0x8, 0x1, 0x4}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffffd}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4d}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x18}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4041}, 0x40d0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f00000002c0)={0x14, &(0x7f0000000240)={0x40, 0x3, 0x9, {0x9, 0xf, "420a89d41688d0"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x20, 0xe, 0x9e, "2c43fe39c631761aebb738d518e194a419cc8e114785380d8f0272a47a85be255445b03ef8ad318873c9a6c197a12de9231cf31c175b5cd98a7cc9d3b233e8cc433ca64d7737a2df846054c93f1d545daede3a8a2b057d01e1b30706dae5f2812b3c6775cbcf7fb6dffa06170eb34b2caeb96c031713ea187d161177d85871c3a52505c66226468efb6d34f721d059b1dfeb5744d744c5cceb05a8d132db"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000600)={0xc0, 0x5, 0x6, "cb7b14f34299"}, &(0x7f0000000640)={0x40, 0x5, 0x4, "70a654ee"}}) r5 = inotify_init() mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddcefd79095bf8fb6b4f859"]) socket$inet6(0xa, 0x2, 0x1) syz_usb_control_io$printer(r4, &(0x7f00000006c0)={0x14, &(0x7f0000000400)={0x20, 0x0, 0xc, {0xc, 0x6, "5916e931fa2506e18f08"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x7c4e}}}, &(0x7f0000000980)={0x34, &(0x7f0000000700)={0x20, 0x0, 0xad, "da9bb74e3f795f127b5cc5e40e20eaaaa5fcceffbbdbbd5779874949a892b73e8c505aad9512a2980c3199de36a812a12596364d04a71900a9c38c759a9988151da857cd3de4081a69103b632accc815b583d023c0f4e72e454e8525da7d8308ec14d1390d6c1609eb7313055306de26672aa55001246936c977b94deb0fe1233f46d8a93f50518b9a99fe4e37e47ebc2f5f84a35d50d7b1eb4a6e1feb4aa291fcfd9ace02e29ad90ba68a2751"}, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000840)={0x20, 0x0, 0x94, {0x92, "11c27c35a07394000900ec4126df771b935c401dd9698781923c8b0cff35a703c3d9996a6931f7503308787c8e3fb8926cde610e6a1721d770b8b1fb3646dc3ec5fc0fbfba68446430176c0de7757f0100aea5cd646fcdd60f6327e67ba3ba68ecfb2282899b05485d6d3f54a5ca48826ec42d5978089382aef4363c26fd28ef7e2d4aaeb599a8f27f2dd725fe083db49346"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0x8}}) 20m4.694657344s ago: executing program 4 (id=314): semop(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x61) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) mount_setattr(r0, &(0x7f0000000100)='./file0/file0\x00', 0x1000, &(0x7f0000000200)={0x80081, 0x100086, 0x20000, {r1}}, 0x20) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x2000000, &(0x7f00000001c0)='grpquota') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) r3 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 20m4.287612092s ago: executing program 4 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4040800) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb000034000280140001"], 0xbc}}, 0x0) 20m3.67165515s ago: executing program 4 (id=322): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) ioctl$LOOP_CONFIGURE(r0, 0x127c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) (fail_nth: 3) 20m3.32626844s ago: executing program 4 (id=323): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) ioctl$LOOP_CONFIGURE(r0, 0x127c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 20m3.078318502s ago: executing program 4 (id=324): r0 = socket(0x1e, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000180)=0x2003) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x29, 0x80002, 0x2) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newtaction={0x14, 0x30, 0x53b, 0x4}, 0x14}}, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x7, 0x800, {{0x7, 0x4, 0x2, 0x34, 0x1c, 0x64, 0x0, 0xf, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x4, 0x12, 0x3, 0x5}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf, 0xb}, {0xffff, 0xffff}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0xa) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r8, 0x890b, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x30) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r9, 0x402, 0x8000001c) fcntl$notify(r7, 0x402, 0xd) connect$x25(r8, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8085}, 0x0) 19m57.721150557s ago: executing program 4 (id=338): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x530345ab}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40850) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x890b, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(0x3) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x8, 0x1, 0x2, 0x12600}, 0x30, 0x1) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x50, r3, 0xffffc000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000100)=0xff, 0x4) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000180)={{r4}, 0x5, 0xfffffffffffffff8, 0x3}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) 19m41.600673601s ago: executing program 33 (id=338): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x530345ab}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40850) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x890b, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(0x3) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x8, 0x1, 0x2, 0x12600}, 0x30, 0x1) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x50, r3, 0xffffc000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000100)=0xff, 0x4) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000180)={{r4}, 0x5, 0xfffffffffffffff8, 0x3}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) 18m40.356753249s ago: executing program 6 (id=588): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000010000020000000001000000b553feff00000000497650000100000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) (async) sendmsg$unix(r1, &(0x7f0000001d40)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000280)="58ac430c515dacca493fdd799d3548709b8034698dea74d61e4ec8da1b5d5213fb25ed5d1a89b302e35ad87cfe02e0487d46961ea29d92f317cea72111e1366ff6d4ac5635dd23123dee753441a96ae727d1fc9d161bee77e30ceb2092855fbb21249c5e75f78f4d5eda455346ab2f3818ed34d2b38ef237b185025c64cf749aeab9f7ed5b369cd3ed51aedd41be0f271af9025a392c5d1ee5f6df56e3838a5c28d257a1da67be81063a54c716925142cd8d41b30b22e86591", 0xb9}, {&(0x7f0000000340)="bcd0eb987bc82c9d349390f40fc067bce0416ab558a7c83cc316a648bdfecc4ce155df8a6a54e69aa92fc81b00ccd63670605738c347e2b56819cf4d87c453b6ad20cbd183c4c9c96f63a8f00b7df5e0581e4fd1982f2020d134dc1208276b", 0x5f}, {&(0x7f0000000440)="a3d9c2021163bb6dc0352ffb9b4210597ea77ec8b24bfcd24f923c6ba718aef943daa312dbd83da78c3e3b69458fe999598a6e63a5478f1eef9321f89507b564b77591588673dedd61ea9eb8506f5dbfa65e2a21df9951a253c811af0bc1c241764393b03f332b10e4eef87bd0401e9ea5fee1", 0x73}, {&(0x7f0000000d00)="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", 0x1000}], 0x4}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x8}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, 0xffffffffffffffff) 18m37.507952609s ago: executing program 6 (id=596): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x701, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x10, 0x0, 0x9, 0x1, {{0xd, 0x4, 0x3, 0x1, 0x34, 0x64, 0x0, 0x6, 0x2b, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0x5, [{@rand_addr=0x64010102, 0xdd1b}, {@rand_addr=0x64010101, 0xc1d}]}, @end, @generic={0x0, 0xb, "3486a55435ae1e338e"}]}}}}}) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000240), 0x10) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001ffffe50000b74283e4a4b68fcd28c956034e00000a000000910a00000000000095000000006c0000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7f8}, 0x94) 18m36.104188641s ago: executing program 6 (id=600): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x8000040, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) (fail_nth: 3) 18m33.598448235s ago: executing program 6 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) (fail_nth: 3) 18m32.975250409s ago: executing program 6 (id=607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x801070cf, 0x0) 18m30.742185411s ago: executing program 6 (id=618): listxattr(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdir(&(0x7f0000000280)='./file0\x00', 0x82) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x108) lseek(r3, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) setrlimit(0x1, &(0x7f0000000100)={0x3, 0x8c4}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r5) r6 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000040)='oom_score\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000007c0)={r4, &(0x7f00000006c0)='\'\v\x00\x81B\x9d(', 0x40880, &(0x7f0000000700)={@_ha_fsid={[0x1000, 0x1]}, {0x7, 0x0, 0xf, 0x466}}, 0x7a9, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000b40)=0xfffffffd}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="08000000000000000000000000e82496be000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/28], 0x50) r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000880), 0x2000, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file1\x00', 0x0, 0x6008, r0}, 0x18) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r13, @ANYRESOCT=r8, @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000e8be98f0ff0000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x9, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @exit, @alu={0x4, 0x1, 0x4, 0x4, 0x3, 0x0, 0x4830f78c53f9f099}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x11, &(0x7f0000000380)=""/17, 0x40f00, 0xf2, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x8, 0x31f9, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0x1, r9, r10, r11, r12, r13, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffd}, 0x94) 18m28.481027396s ago: executing program 34 (id=618): listxattr(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdir(&(0x7f0000000280)='./file0\x00', 0x82) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x108) lseek(r3, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) setrlimit(0x1, &(0x7f0000000100)={0x3, 0x8c4}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r5) r6 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000040)='oom_score\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000007c0)={r4, &(0x7f00000006c0)='\'\v\x00\x81B\x9d(', 0x40880, &(0x7f0000000700)={@_ha_fsid={[0x1000, 0x1]}, {0x7, 0x0, 0xf, 0x466}}, 0x7a9, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000b40)=0xfffffffd}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="08000000000000000000000000e82496be000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/28], 0x50) r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000880), 0x2000, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file1\x00', 0x0, 0x6008, r0}, 0x18) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r13, @ANYRESOCT=r8, @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000e8be98f0ff0000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x9, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @exit, @alu={0x4, 0x1, 0x4, 0x4, 0x3, 0x0, 0x4830f78c53f9f099}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x11, &(0x7f0000000380)=""/17, 0x40f00, 0xf2, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x8, 0x31f9, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0x1, r9, r10, r11, r12, r13, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffd}, 0x94) 18m26.492050103s ago: executing program 3 (id=634): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr(r1, &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)=')\x00', 0x2, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r4, 0x0, 0x9, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 r'], 0x9) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c", @ANYRES8=0x0], 0x40}, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000000c0)={0x28, 0x3, r2, r3, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000040)="6eab05c1fb07b1af33e494e1bf0b077f4d68189fe0dcee79a90287d9369135b103e435b17dbdd6acda261ffdab94229fe790cacae93a4e3ce4dab6e524076f26456f977f81a52efdcb6e7298e95417239acbb4b29a7647bb0c891c81b95af740723a167becdf7815cb0b138012918e2f665a98e04a875891ebf489bc2e9b6091"}) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "c73f03a3c1afd93a29a96ef1ff5b786b"}) ioctl(r0, 0x3b92, &(0x7f0000000180)="10") 18m24.867706983s ago: executing program 3 (id=636): r0 = fsopen(&(0x7f0000000200)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 18m24.614850083s ago: executing program 3 (id=639): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt(r0, 0x7, 0xffff, 0x0, &(0x7f0000000040)) 18m22.682211516s ago: executing program 3 (id=649): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) read(r3, 0x0, 0x300) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x64580, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0xfffffffd, 0x3, 0xfffffffd, 0x0, 0xfffffffd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000ac3000/0x4000)=nil, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb02001800"], 0x0, 0x26, 0x0, 0x2}, 0x28) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002f80)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) file_setattr(r4, 0x0, &(0x7f0000000200)={0x18312, 0x1001, 0x7cd, 0xfffffffe, 0x4}, 0x18, 0x1000) setpriority(0x1, 0x0, 0x2) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="34000000070a010200000000000000000100b58ad3e4e6db6e11928a140d1fdf370001090002d5df0073797a32000000000c000640000000000000000208000a400000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xd568558cbb5cd993) sendmsg$802154_raw(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)="c70abd5c705d152ad53d46b55b926c13e7af87a3df245086cfcdc29ddbcb5f2378cc97893e480a8e04416ff6e548489a7587bce9c52349269f2dcfff382e32dba6ad2a1d7e5373f33b2ebcb886d14e9eb9540ef95435170eccb9e9a41e1703a203022f1efa5518a44d74d82e3320c4bee7b6e4e00821fd5b5517c58fc6a4e4d48f16884df74a53756383197e2cd7aef282d728387a352cad5b789e5390a2a56c6883ed348568a5f9ff933bd434f190f4d9069b5373515720da398b3bc94fdbfd65aaee979f222be7227484eef052f411c85f504c9d934ed4cfd5d15700d579e81f393e79bb2bfc51ad8eea", 0xeb}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001b1401"], 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) syz_emit_ethernet(0x6f, &(0x7f00000021c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @private=0xa010100, {[@noop, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0x2, [{@broadcast}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0xa, 0x2000, 0x0, 0x0, {[@mss={0x2, 0x4, 0x4}, @mptcp=@syn={0x1e, 0xc, 0xb, 0x1, 0x1, 0x9}, @sack={0x5, 0x12, [0x3ff, 0xb, 0x8, 0x5]}, @sack_perm={0x4, 0x2}]}}, {"66cb23d9f7"}}}}}}, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100), &(0x7f00000001c0)='.\x00', 0x2, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 18m19.78568049s ago: executing program 3 (id=656): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1, 0x132, 0x3}) (fail_nth: 3) 18m17.110218819s ago: executing program 3 (id=660): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x40) r1 = fanotify_init(0xf00, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x22100) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x40) (async) fanotify_init(0xf00, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x22100) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) 18m16.618778191s ago: executing program 35 (id=660): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x40) r1 = fanotify_init(0xf00, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x22100) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x40) (async) fanotify_init(0xf00, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x22100) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) 13m18.971617155s ago: executing program 0 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404a8d1}, 0x4000000) 13m18.683377086s ago: executing program 0 (id=1210): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e758000d"], 0x288}}, 0x20050800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000180001002cbd7000000080008020004000040005"], 0x5c}, 0x1, 0x0, 0x0, 0x4080000}, 0x4008000) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x6, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0xeef, 0x3, 0x0, 0x7], 0x41000, 0x2a82}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 13m16.583379497s ago: executing program 0 (id=1214): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) tkill(0x0, 0x3) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000180001002cbd7000000080008020004000040005"], 0x5c}, 0x1, 0x0, 0x0, 0x4080000}, 0x4008000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket(0x1a, 0x5, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x7fff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x2, 0x30000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r5, 0x4068aea3, &(0x7f0000000480)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x6000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x0, 0x5, 0x5, 0xfc, 0x89}, {0x6000, 0x1, 0x0, 0x5, 0x3, 0x7, 0x1, 0x7, 0x9b, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x4, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x5000, 0x1, 0x0, 0x2, 0xe1, 0x15, 0x7, 0x3, 0x7, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x0, 0x5, 0xcd, 0x7, 0x1, 0x92, 0x2, 0x4c, 0xb0, 0x9}, {0x8000000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x402105, 0x1000000000000, 0x1500, 0x3000, [0x9, 0x7, 0x5, 0x81]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000740)={0x28, 0x0, r7, 0x36, &(0x7f0000000600)=""/54}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRESOCT=r6, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000033d3850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000fbdbdf250000000000000000d86500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a0100140003006e657464657673696d300000000000000c0016800800018004000c8014001400776c616e3100"/60], 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) 13m14.803605556s ago: executing program 0 (id=1217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0xfe33) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x16000, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @dev}, &(0x7f0000000100)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000040)='ramfs\x00', 0x824800, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="852000000200000018d804f2f596c26300000d0000000000000001000000983b00000100000000000000004d000000485700020f000000e5d3a0855ee20df4a879ac5cb469419c4d8c37da17a61e56bc049483c530ba4ca62336d667e747d571a2780b1b252b789581d72a52922ed7f61cd40dac2cd6f65dadb3b39ea93c084e085e982646c2f27d0f1a498aa4ff2cfde89e61957c900c86"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="08010000", @ANYRES16=r6, @ANYRES32=r4, @ANYBLOB="025b8ed6be1f2f03e3f57e6ada17af25cd1bdc2ed62c390002117ef2f3212f856fb1960b509ec6a5d00c2c356ddd18e1d9e22cd13aa631e1f8533faff299cd657261bd3fb593badba1ec18192fe415507edb2f81aca6de44343c52a1039cee92dfa9e8ef715568e20e14af02fd8000b8032cc7509f21a9426ccb0a6d63ac7dd2b7ecb252e1ad8ac36e5b483eb4e67fdeac58b0e6347ee9b1135ccb7327b073886c9a0eac703066282252", @ANYRES8=r0, @ANYBLOB="fd5c7480bd9fd813518b338117b47a0ed070dc2f28d09dcea152d255d283dc36e8c43cd91e246e35a509d55140e8fe327394c1c2b18f1a89ffa68d13f0bf187deac0d69c8b08c380a09a19bcc3ddee94a40ca6a230cd5def355ed4655252368bf87ce6a98ad26b2a12b5ed989a16e5e9355a0aaf323aae9a961f4330c9c68208ab27a5d26193913aec1c76a62d15a0d3e4d56f6771e4453a2debc8cb200600355ea2ae690fa654aa8b22cc72ba21e384c5d7173caacfdf55ae2adce793486d5e0097b160d3aa7e99a449c5f1afcc00cf99dfa81cb16ff33c1a2a", @ANYRESDEC=r3], 0x108}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r7 = socket$inet(0x2, 0x802, 0x1) connect$inet(r7, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000140)=0x4, 0x4) write(r7, &(0x7f0000000000)="08001800000020a3", 0x8) read(r7, &(0x7f00000003c0)=""/14, 0xe) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r9 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x2020600) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b05c5a, 0x0) ioctl$COMEDI_CMDTEST(r2, 0x8050640a, &(0x7f00000008c0)={0x3, 0x10000, 0xffffffd9, 0xe, 0x80, 0x9, 0x100, 0x10000, 0x2, 0x4e, 0x100, 0x3, &(0x7f0000000600)=[0x3, 0x6, 0x1, 0x5, 0x0], 0x5, &(0x7f00000007c0)="472a86a108b39faf8798617a4d33aecfe5a7ab40a76ac11105d1b6ebbb0c443c67b7dc00c9024e9926a4efe91e541a71e860d98ac8659706d7d951f28018cbfc6a95ba243cef1c5e7c830f808ab91a2a5d2eb8f369e325a660da0b1243fdc1ec392b682c03f525acc7af1a01651501ac4a9181c12762f8e1a599d1c01d63663c8dbf0e881ab2c22ef3adde15bd5efafc49c3d89fcb99a2bada3c2d4622ec1668a103144ef77547f9bc6dbe7872ecdd1712937887ad6d45dc6368d45ed90373a65ad7a13dc889c9fb422a5a818d81a159", 0xd0}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000300)={0x200000, [[0x9ef8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xd], [0x10000, 0x0, 0x20000], [0x7]], '\x00', [{0x5}, {0x0, 0x5}, {}, {0x4, 0x80000000}, {0x3, 0x40000000, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {0xfffffffd}, {}, {0x0, 0x200006}, {0x0, 0xfffffffe}, {0x0, 0x2}], '\x00', 0x1000}) getsockopt$bt_BT_DEFER_SETUP(r8, 0x12, 0x7, 0x0, &(0x7f0000008780)) 13m11.756953856s ago: executing program 0 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='!=', 0x2) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002100), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000002240)={0x0, 0xffffffffffffffa7, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r0, @ANYBLOB="0100af091ac1180c7b60af000200c5ffffffffffffff0900000000182b4a5a9d1e9af300000000b2b515a0a345f4c054f089e88c066bc4e7f759acbad9fdbe10bc9749187d841768ef6ca1296076929e1b637b702f78785d8df9868096cfaa17a13d6b9c0cc9961cde5650ccd2c1145f94951dd3e79c1b621b07c008d33a7d08217a35dea382d0bfc3ced7808c3216406be4b3d7f2"], 0x24}, 0x1, 0x0, 0x0, 0x4800c}, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) mq_notify(0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r7, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000340)=""/175, 0xaf}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3000000000001c0000060a010400000000000000000100000008000b4000000000d81b04"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRESHEX=r0, @ANYBLOB="000000002000000008001b00000000001c001a80180002801400018008001700010000000800", @ANYRESOCT=0x0], 0x44}}, 0x0) 13m9.651599413s ago: executing program 0 (id=1226): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x6) (fail_nth: 2) 13m8.302526652s ago: executing program 36 (id=1226): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x6) (fail_nth: 2) 12m30.801394117s ago: executing program 5 (id=1277): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xb) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x80) copy_file_range(r3, &(0x7f0000000080), r2, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x59}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xfffffffffffffe1f, 0x20000001ff, 0x0, 0x2}]) 12m29.423712672s ago: executing program 5 (id=1279): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x1ff, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0x10000000, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) (fail_nth: 3) 12m29.379464343s ago: executing program 5 (id=1280): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000000200, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 12m28.739536773s ago: executing program 5 (id=1282): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0x80, &(0x7f0000000600)=0x0) r1 = socket(0x1, 0x803, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000f413683db0501b8e7145ffffff090000fd", @ANYRES32=0x0], 0x18}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x103802) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x3}]) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000001d02000000000000000018000000000000000000000000e86dab77a020b7c398fe000000950000000000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000000c0)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 12m28.507525301s ago: executing program 5 (id=1283): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f0000000040)='.\x00', 0x2) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) unshare(0xa000400) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000009a60bbf2d08a1c400"/34], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000a000012bfa3000000000000b704000000000000850000003f0000009500040000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="f06cf0f36b3e652198daf8e10bd6fc2c77e96a3675b23e9fb7b3b8513c59756490f9846e217d1c34c596d140ddc5c77c7b941a49647f7708d410", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r13, &(0x7f0000000000)='3', 0x4e) ioctl$FS_IOC_FIEMAP(r13, 0xc020660b, 0x0) 12m26.461628654s ago: executing program 5 (id=1287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000002380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf250300000008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x1, 0x313}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r7 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r7, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0xe8}}}}, 0x0) r8 = semget$private(0x0, 0x4, 0x6) semtimedop(r8, &(0x7f0000000000)=[{0x0, 0xc334, 0x1000}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) io_uring_register$IORING_REGISTER_QUERY(r6, 0x23, &(0x7f0000003a80)=[{0x0, &(0x7f00000001c0)="c25a1f94489ffba54dae9087f094dcf372", 0x2, 0x11}], 0x0) lsm_set_self_attr(0x67, &(0x7f0000000240)=ANY=[@ANYBLOB="6a0000000000000001000000000000008c000000000000006c000000000000007838e290ac911c55c52927271e80254c9d0f04459c5ce112e3b71bb6178a60e28ea4d0b85d46df50f77814af5ce345e2cdf1544b9b90f3275e763bfb0ecc62fde960bb5b7cd540b503c1695d9948ea776c25e7cdfa1868149fbf4bd2dab2756cb2a754c0fe"], 0x8c, 0x0) 12m24.619017716s ago: executing program 37 (id=1287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000002380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf250300000008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x1, 0x313}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r7 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r7, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0xe8}}}}, 0x0) r8 = semget$private(0x0, 0x4, 0x6) semtimedop(r8, &(0x7f0000000000)=[{0x0, 0xc334, 0x1000}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) io_uring_register$IORING_REGISTER_QUERY(r6, 0x23, &(0x7f0000003a80)=[{0x0, &(0x7f00000001c0)="c25a1f94489ffba54dae9087f094dcf372", 0x2, 0x11}], 0x0) lsm_set_self_attr(0x67, &(0x7f0000000240)=ANY=[@ANYBLOB="6a0000000000000001000000000000008c000000000000006c000000000000007838e290ac911c55c52927271e80254c9d0f04459c5ce112e3b71bb6178a60e28ea4d0b85d46df50f77814af5ce345e2cdf1544b9b90f3275e763bfb0ecc62fde960bb5b7cd540b503c1695d9948ea776c25e7cdfa1868149fbf4bd2dab2756cb2a754c0fe"], 0x8c, 0x0) 2m41.332199052s ago: executing program 7 (id=1934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x80000}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="ed", 0x1}], 0x1}, 0x20000800) recvmmsg(r3, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/205, 0xcd}], 0x1, 0x0, 0x1800}, 0xffffffff}], 0x1, 0x2041, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}}, 0x0) sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d444819a720cf858cfa4376719f771bccf5552f6534efdf7711869e748e55c9add4841c5865ffc95b523fd6866a407c09494b30fe92e8ee550e92ed48c723a230c05994582489a37ae00bf5809be554d2f", 0x51}, {&(0x7f00000001c0)="c036c070ff907eb1c9b4250d72bab5750feb20ca5ad2d7f3df8a09a31f3591b3065b306de8da4cd16fb4a0500236ffd0298629827d71855401a602155f3d45680e462e994e7010aa76b0f9ee31f3210edb13d0e1b1ca29161358c313094f4007bb89d099d3070eecb14c985125180ca53411f424c362f3fad114ac86a6da5be27a37001f6ac5bb9909722e116aa27232ab8d164c809bd76ed2e869fe8c4c8d4550b29b788f815ac63f3ef0de6fb064531c5b2e688072ac912a679d47a6e517d5349aac66d3a69445cdc9538aa263f539020d5cdbd913aa1cb52aacfff325566f052a111a1b84eedfa8f15542a737cdae344cbc45f7", 0xf5}, {&(0x7f00000002c0)="97d63c13210f5c9592268556364477a05845a2ef0aef7e61ee3fe52bba66a31d422574a6c855e3f571c078141d49d0c6bece842bdd305305acfc5cf7109867e1adc6ef96fa1268d597ba86c6293dfa240652c22505e47e3ae5229c9aec74575981f04c5968b22120b399a9453f638e24", 0x70}], 0x3, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x93}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x60}}], 0x1, 0x14) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980903, 0x7fff, @name="36967a4dad9200fcffffffff6d0410b65b4800"}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r8 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000100)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x10e}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0xee, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x2, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000bfc000/0xb000)=nil, &(0x7f0000005000/0x3000)=nil, 0xb000, 0x3}) 2m40.325663772s ago: executing program 7 (id=1937): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x88800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8800) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x82}) 2m39.977008386s ago: executing program 7 (id=1938): socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x800, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000180), 0x260c, 0x8a42) ioctl$MEMREADOOB64(r4, 0xc0184d16, 0x0) 2m39.680174823s ago: executing program 7 (id=1939): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) ioperm(0x2, 0x3, 0x80000001) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f0000000800)=""/219, 0xdb}, {&(0x7f0000000900)=""/8, 0x8}], 0x5, &(0x7f0000000e00)=[@cred={{0x1c}}], 0x20}, 0x12060) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="4f33a26a96e5dca856d7d3e49641", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x1, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb475, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2m37.629081088s ago: executing program 7 (id=1940): mount(0x0, 0x0, 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) rt_sigqueueinfo(r0, 0x25, &(0x7f0000000280)={0x29, 0xd}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061114c000000000085000000180000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) 2m35.754659748s ago: executing program 7 (id=1942): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, 0x0, 0x3e}, 0x28) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16], 0x0, 0x20000000, 0xfffffc3e, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006311a200000000008510000002000000850000008b00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r3, 0xfeaa, 0x200}, &(0x7f00000000c0)=0x8) syz_emit_ethernet(0x30, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000040)='config/usb_gadget/g1/configs/c.1/rndis.usb0/file0\x00', &(0x7f00000003c0)='incremental-fs\x00', 0x10184c2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1f3) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') 2m20.202554176s ago: executing program 38 (id=1942): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, 0x0, 0x3e}, 0x28) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16], 0x0, 0x20000000, 0xfffffc3e, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006311a200000000008510000002000000850000008b00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r3, 0xfeaa, 0x200}, &(0x7f00000000c0)=0x8) syz_emit_ethernet(0x30, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000040)='config/usb_gadget/g1/configs/c.1/rndis.usb0/file0\x00', &(0x7f00000003c0)='incremental-fs\x00', 0x10184c2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1f3) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') 3.974323923s ago: executing program 2 (id=2115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xabs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r1, 0x15b77000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff1}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 3.751721483s ago: executing program 1 (id=2116): socket(0x2, 0x3, 0xff) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r3 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) 3.391234311s ago: executing program 2 (id=2117): timer_create(0x5, 0x0, &(0x7f0000001400)=0x0) timer_delete(r0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) lsm_set_self_attr(0x65, &(0x7f0000000080)={0x64, 0x97df, 0x792, 0x772, "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"}, 0x792, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x2000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000340)={0x20000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f00000000c0)=""/20, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="940000", @ANYRES16=r4, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4048000) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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"/472, 0x1d8, 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9e62dee4fbedd32c51f08d3c38a759f8a65d4d59e40bef7d8bc99f0c1d0b3672e298f14ff44b4b32050f5d572a477da84cfb08c692fa6595e494f3dcffca2ae0a00b07e1692b8590130e8f1ad74d646e71e3487ce1ad53e2a1cb4199799a122b873f6335979a6b08640ccd9b71eb400e0b2a675ae448ba761d3d60e67187d5035dcae31752ed654ff4e09fa658b29ed1ff4a2656cd6c612bf1a176357e855b70565fc51bfd8ae94a8217da8424d66d22af698d947dc22a6dac1851b9d1f3bb3fd19e91f238db2a24ee9b0653cfca9fde7f96e4770a4ecfe8278952ce8e27c5c0cd0f28280901f34267dba4fd4c5effdeddfaf562fae4f6868ae8aa63ddd8544ec3307b116955d1c0f6b5ee17c5a3f26f7c127fc54ae687e4e3e09da594532848839d90c4f4b87d7c5f7d012498d2895e96ce50d0484ffe7b3dc820706e1f5548c04a9efe67ac75d3eb99653f77eedc8c17ddb4de7a81b4d6739810b2df27d63cfe686f75b9ad26defcce7030b1c5e5f873c0b8002823720442f3c1434717f6fec61dd6508eaf5d5a4fa066e5bd9188fc94678edfab38454efc56033eb0bbebd36b8ca872b3c33c354dbba83673d0518ac6b0d381f20138da828f45a8d684149c6975b1b5579ba982a3efa00"/731], 0x110) syz_emit_ethernet(0x36, &(0x7f0000000840)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) pipe2(&(0x7f0000000100), 0x80) setsockopt$inet_int(r6, 0x0, 0x17, 0x0, 0x0) 3.194582892s ago: executing program 1 (id=2118): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000001540)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x84, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x40}, {[@routing={0x0, 0x2, 0x1, 0x12, 0x0, [@local]}, @dstopts={0x33}, @dstopts={0x2f, 0x5, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0xa58b, [0xfffffffffffeffff]}}, @hao={0xc9, 0x10, @mcast1}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x1004e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0xac) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e20, @local}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@empty, 0x3a, r6}) 2.976938767s ago: executing program 2 (id=2119): syz_emit_ethernet(0x22, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x1, 0x14, 0x64, 0x0, 0x5, 0x1, 0x0, @empty, @multicast1}}}}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) (async) r0 = socket$inet(0x2, 0x3, 0x30) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240)=0xffffffffffffffff, 0x12) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x5, 0x0, 0x0, 0xf, 0x1, 0x17}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x2a, 0x0, 0x9, 0xfff}, 0x28) (async, rerun: 32) write$tun(r1, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x6, 0x6, 0xff, 0x7ff}, @ipv6=@tipc_packet={0x9, 0x6, "814f11", 0xc8, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {[@fragment={0x2f, 0x0, 0x3, 0x1, 0x0, 0x19, 0x68}, @srh={0x87, 0xe, 0x4, 0x7, 0x1, 0x40, 0x9, [@mcast1, @empty, @rand_addr=' \x01\x00', @private2, @local, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x73, 0x0, 0x10, 0x0, 0x0, 0x3, 0x65}, @hopopts={0xc8, 0x1, '\x00', [@pad1, @padn, @pad1]}], @payload_mcast={{{{{{0x30, 0x0, 0x1, 0x1, 0x1, 0xb, 0x3, 0x2, 0x7, 0x0, 0x3, 0x4, 0x4, 0x1, 0x100, 0x0, 0x3, 0x4e21, 0x4e22}, 0x0, 0x3}, 0x0, 0x1}, 0x3}}, [0x0, 0x0, 0x0, 0x0]}}}}, 0xfa) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, &(0x7f00000000c0)=0xc) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000020c0)=0x2c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000028c0)={'pim6reg1\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x1, 0xd7, "e28d508f8ebadd3adfee18181f9d91821a89f2571b15a2fbb9f4d7716ebee57db4f4b09c2b5ac53192d9edf0273af57563d9acdf40e4ada6e5c820e07e97cc85dbad591e22c9805c5fc0296175f2ad86220f0a4cfb28fcc32118dd9c6fa2dfbd5949f37d4d4f6fcf3baeb5677c2ab403381c4a8467d91baabf172629853f5ae15467768406b8ec48743fcd007e3129df1611b8bf6d07990b6ab0e164b98ff868f8e437a6c05964d2049bb33634d168f33257b63fdf34e7cd444d1868fa59456dfe1e78181a6d192c72805e90515d7c53dfebb581a88584"}}) (async) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) 2.735534764s ago: executing program 2 (id=2120): r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)="debaeaa6a289a61ef873cb4ccebb8e9414e11df2f59697c650a6a7bc00d86a61cb2a2cac4a47d402373070a4750e32c0e7dd5529b7f9b94c36a72f1d31a21057fe177e1f843472665283198724ac49ef517df5f579546b35b9626605d77b5d0cb21b3c766757f474e070a74b6c61404ec04ab4099fc94d0ccef8ec4de92276b32752ec94d9571639b6631f27ae65ee9ce4a36a67e0c7a17231abef51c5e73839258d1e4196884c6476733dcbafb9", 0xae}], 0x1, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x38}}, {{&(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000840)="39b2dbcc03fd38c74086d53e9bb82696405eadb05e73", 0x16}, {&(0x7f0000000880)="7b956522cd9b6111cebac5f89202a5ee657d9c8993bcd7cc05f5da38a4fb81b4de527247b5f7f9ab387832c4e27d103f23654729661ce66536061d14a40d0a8889a1dda6a5f49a16c8c72641f73f21e5b2dc6ccc000d93bbf96e3c60f8ed84652a5785259c8526cb87227b6dc3408f1d3c2161b967dcc06fe3b266ecce13009215993ce19dbaac65a3d4ff37d5b46a9993d8cf979619c36d810922038c496625f12fa0ea8309b01a211e37037575c411d0041a9a5b88e7c6fcf33adadee0a4daa4c59d4e7ea919205423aca777b813d128fdf09e10f7370aff4feafc91fad737", 0xe0}, {&(0x7f0000000980)="bb78cd04903ebbb986cb33d454e4f7c17ffb64afb8c057c00a90994a71237107a0dbbd0f16f67dfa91b73c995c9dc6df17da4d228a051f0081d81db7fc9abcc6176c260e3134021a0b822e38adfe818723c10461df2fee603236ac", 0x5b}, {&(0x7f0000000a00)="563d4d68b973448ab7c09cc22b67df65d062", 0x12}, {&(0x7f0000000a40)="4153f99c67a610fdbf65cc235dbf9e4d30d90f79f8b9049079ef21b6852642a3a059ddb86538b4efc869869935ddb48fc5a36e78b761d4c7e840dab8351202c7ba4b59af8acef563543cf5ab292d2eb30fca1a7619d9a2e75d0cc674705a8d97140430b1d4c9556492cce2640ade35c43a2a28dbf1898b0aba6b68cb90093f02f63da9c6dda05efdd4d0a8e069e7a0563f454a0fab3d3f34620164b977bd3c5661a2392a9a67bfe000965e8e4cc87d5d45ca", 0xb2}], 0x5}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x52}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @empty}}}], 0xe0}}], 0x3, 0x800) 2.664125596s ago: executing program 2 (id=2121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x1) r2 = socket$kcm(0x2, 0xa, 0x2) (async) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="950000000000000047212000f0ffffff183a00000300000000000000000000009500000000000000185b00000b00000000004a000000000007f7c556647d2784a8451abeedf0a993bcbe9bf8986e28f08cc052f2f265d4bc3a2fcfc6a16d2515806608c620f6391d89dd2484d37d020d94bf6068f07a83dfed64547c9609ce7044aacf2129f63286cf2b4a0000ff3fce7a725cec46eed6fd92fb258da41fa0c34cea3dd0acda0e8e71595431767314efbbaae1c1c0e3c71193198bbbe435f1b6dcb04aac65dd7bf48e040ea5982e12b7178bb8d858"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x70, &(0x7f0000000240)=""/112, 0x40f00, 0x47, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r4], &(0x7f0000000440)=[{0x4, 0x4, 0x0, 0x4}, {0x2, 0x5, 0x1, 0xb}, {0x2, 0x2, 0x2, 0xd}, {0x4, 0x3, 0xc00, 0x7}]}, 0x94) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x1}, &(0x7f0000000000)=0x2, 0x0, 0x2, 0x8, 0x10001, 0x1, 0x2f, 0x8}}, @cswp={0x58, 0x114, 0x7, {{0xfffffff8, 0x5}, 0x0, 0x0, 0x7, 0x7fffffff, 0x9, 0x7, 0x12, 0x42}}], 0xb0}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'team0\x00', {}, 0x2}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) (async) ioctl$TCSETSF2(r1, 0x89f0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0xda90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000050000310827c35c18000000000000000200"/34], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfeffffff}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) eventfd2(0xe5c, 0x80000) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x6, 0x0) (async) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r14) (async) syz_ublk_setup_queues(0xffffffffffffffff, r13, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0xec, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd73f, 0x1, 0x1, 0xf8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8, 0x2, 0x24e}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x5314201d691c23b0, {}, 0x1f, r12, '\x00', {0x4, 0xffff, 0x0, 0x0}}, 0x0) 1.187692937s ago: executing program 1 (id=2122): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x2, 0x0, {0xa, 0x4e22, 0xfffffff9, @remote, 0x6}}}, 0x3a) 923.736308ms ago: executing program 1 (id=2123): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) (fail_nth: 2) 426.317229ms ago: executing program 1 (id=2124): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10001, 0x115000) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xdd) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000000c0)={0x6, 'nicvf0\x00', {0x622}, 0x93ef}) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x7130, 0xcc, 0x2, 0x7, 0x7, 0x2, 0x9a34, {0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x9, 0xff, 0x0, 0x2, 0x7}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={r3, 0xe, 0x4, 0x1}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_disconnect={0x7f}) r4 = openat$hwrng(0xffffffffffffff9c, 0xfffffffffffffffd, 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x20}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x200, '\x00', 0x0, r4, 0x3, 0x5, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x6, 0x2, 0x4, 0x100, r5, 0x7b67c8e1, '\x00', r6, r4, 0x3, 0x5, 0x3}, 0x50) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000400)={0x0, 0x5, 0xa6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'macvlan1\x00'}) recvmsg$can_j1939(r2, &(0x7f0000000680)={&(0x7f0000000440)=@rc={0x1f, @none}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/180, 0xb4}], 0x1, &(0x7f00000005c0)=""/160, 0xa0}, 0x100) r7 = accept$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) setsockopt$packet_buf(r7, 0x107, 0x5, &(0x7f0000000740)="45c6d4a56576", 0x6) r9 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r10 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)="fb0995184cc8f6cdc793ff9bb97ae4d1c764771d2c090c2250fb54b435ca973e6afdc7649d1236cc350672963a8705a807568f4c676595e66544c552460a97e08850ce4f82e3fcc4d51fd59830f5412b9b127f4ec3340558b761613b7e8dfe992895b8feaec589fb5ff0f66abee0595fd0c4f5cbc2d239f4828dab41fdfe1939fc384d419c8c5a22c04a01c7e9708736bae6888e772a566ff2", 0x99, r9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, &(0x7f0000000940)=@keyring={'key_or_keyring:', r10}) read$snddsp(r4, &(0x7f0000000980)=""/115, 0x73) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000a00)) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000b40)=@urb_type_interrupt={0x1, {0x7, 0x1}, 0x0, 0x24, &(0x7f0000000a40)="adfbce622007b3eb7b9212254887ab8b62b8d4236090944a20f2ad88949843db3d931ba62fbd5433b380577a7d8b6b805c08ae3157a50d3136992cd6f1fd3614106685d30f122db4b0fa359a61a8ee1bb17051a2dc00f3404d4b7379f4", 0x5d, 0x9, 0x4, 0x0, 0x200, 0x9, &(0x7f0000000ac0)="7c1de050b54d6f41d913beeda15e8bbdd7d9db2ba2466efc3f99711a09f5097d0a38ad53c595adbda760ab840537f6dba83a960a7da320cf2f4cd7c073beefc66d86ec2ea64d65345ea90930d28914d611e62accf455aa82bd63a02abce44b"}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000bc0)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000b80)=0x14}) getpeername$l2tp6(r2, &(0x7f0000000c00), &(0x7f0000000c40)=0x20) r11 = accept4$llc(r4, &(0x7f0000000c80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000cc0)=0x10, 0x80000) sendmsg$sock(r11, &(0x7f0000000fc0)={&(0x7f0000000d00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d80)="c360bf3687d04eac6be6aa562f3c8836021a0759e5ce2bd6c15970446c32e5523f093acbb2799fe8cbfea80f023f4df3e4f419281862a46ecb3f170625866d733f5d3e14af108c2b4d27d77cb1ab49509674ecbdb8d1240b9bdbe2c6b1c32877303e9d3e905bf6bbb2777e615608cf1d563d59ed4b03cd7672c0576ab988c6abedee2b66bc5625347f6527ed46671af0694e68169bf11f10b4f54b9b086a840667a386b376fa35645292d3169efa56b202ae3b3311348df799ae398cb77e8e4c03be7f639ac6baf8759dcb60f2b911c421ee8f8be5bb247401d7faef8a25d563d3ca0621", 0xe4}], 0x1, &(0x7f0000000ec0)=[@timestamping={{0x14, 0x1, 0x25, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xeb76}}, @txtime={{0x18, 0x1, 0x3d, 0xfc}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0xd8}, 0x40080) io_uring_enter(r2, 0x17f8, 0x4ba, 0xc, &(0x7f0000001000)={[0xbc0]}, 0x8) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000001400)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x280, r12, 0x8afb5e8ebcf59912, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3630d82f5275b1f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4}, 0x800) 307.152736ms ago: executing program 1 (id=2125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x4, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x5, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x2, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x2, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x0, 0xffffffff, 0x0, 0x2, 0x10, 0x5, 0xfffffffe, 0x1, 0x1, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) ioctl$UI_DEV_CREATE(r1, 0x5501) read$usbmon(r2, &(0x7f0000000140)=""/47, 0x2f) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ppoll(&(0x7f0000000280)=[{r3, 0x258a}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f00000016c0)=""/102400, 0x19000) epoll_create1(0x0) unshare(0x22020600) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000280)={0x6, @raw_data="62ae002a6b1c515c064871940090fc708f254bf4e4cee9421859150dcd1f2fd57df5626508ecfad3a51a4dc64dc9bc1da1b7d2e3864fe93d24bad833a56f1d50b94087c329114be230c20a23720f1a9fcbd6fec2830f093326bccbf7ab9c8f67e2255a1679e8013535f72469165178af3fdd7fa82989741e42968fa2e648a322370f6fc2f3b512a7209fa22840e977546a6de58936f7c7fcd6f9dfc42d4eaa4050a6030eff38d90eee6de51f7c780f511f5fe69fc3c3ea31ccc491db87c52e2c09e82edb786fe2d2"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x7b9, &(0x7f0000000280)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x14) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="b424", 0x2}], 0x1}}], 0x2, 0x20080058) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x6, 0xd, 0x401}]}, 0x2c}}, 0x20000000) 0s ago: executing program 2 (id=2126): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)='i\f', 0x2}], 0x1}}], 0x2, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) kernel console output (not intermixed with test programs): 393][T14312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1177.365237][T14312] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1177.418495][T14312] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1178.325945][T14642] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1793'. [ 1179.188012][T13889] Bluetooth: hci0: command tx timeout [ 1180.438120][T14296] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1180.564165][T14296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1180.567043][T14296] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1180.716083][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1798'. [ 1180.720560][T14296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.155497][T14296] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1181.161093][T13889] Bluetooth: hci0: command tx timeout [ 1181.470539][T14296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1181.492472][T14296] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1181.577021][T14296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1182.410028][T14584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.418152][T14584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.418401][T14584] bridge_slave_0: entered allmulticast mode [ 1182.422209][T14584] bridge_slave_0: entered promiscuous mode [ 1182.475549][T14584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.475735][T14584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.475949][T14584] bridge_slave_1: entered allmulticast mode [ 1182.478635][T14584] bridge_slave_1: entered promiscuous mode [ 1182.674695][T14584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.679614][T14312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.835322][T14684] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1182.961630][T14584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.015920][T14584] team0: Port device team_slave_0 added [ 1183.028307][T14584] team0: Port device team_slave_1 added [ 1183.142034][T13889] Bluetooth: hci0: command tx timeout [ 1183.213511][T14584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.213595][T14584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.213623][T14584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.288037][T14584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.288158][T14584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.288195][T14584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.301240][T14312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.444504][T14628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.444758][T14628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.610096][T14584] hsr_slave_0: entered promiscuous mode [ 1183.617577][T14584] hsr_slave_1: entered promiscuous mode [ 1183.625403][T14584] debugfs: 'hsr0' already exists in 'hsr' [ 1183.631431][T14584] Cannot create hsr debugfs directory [ 1183.677304][T14627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.679221][T14627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.294483][ T40] bridge_slave_1: left allmulticast mode [ 1185.294536][ T40] bridge_slave_1: left promiscuous mode [ 1185.294850][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.371948][ T40] bridge_slave_0: left allmulticast mode [ 1185.371987][ T40] bridge_slave_0: left promiscuous mode [ 1185.372180][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.114669][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.194268][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.230015][ T40] bond0 (unregistering): Released all slaves [ 1187.352027][ T40] hsr_slave_0: left promiscuous mode [ 1187.396020][ T40] hsr_slave_1: left promiscuous mode [ 1187.402479][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.727565][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1187.790337][T14707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1806'. [ 1187.885849][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.312509][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1188.314594][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1188.317977][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1188.332900][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1188.983121][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1189.076552][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1189.988633][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1190.033739][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1190.047018][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1190.062880][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1190.071743][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1190.408475][T14733] FAULT_INJECTION: forcing a failure. [ 1190.408475][T14733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.408601][T14733] CPU: 1 UID: 0 PID: 14733 Comm: syz.7.1808 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1190.408629][T14733] Tainted: [L]=SOFTLOCKUP [ 1190.408635][T14733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1190.408646][T14733] Call Trace: [ 1190.408655][T14733] [ 1190.408665][T14733] dump_stack_lvl+0xe8/0x150 [ 1190.408699][T14733] should_fail_ex+0x46b/0x600 [ 1190.408727][T14733] _copy_from_user+0x2d/0xb0 [ 1190.408752][T14733] ucma_resolve_ip+0xb8/0x490 [ 1190.408789][T14733] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1190.408834][T14733] ucma_write+0x257/0x2f0 [ 1190.408864][T14733] ? __pfx_ucma_write+0x10/0x10 [ 1190.408890][T14733] ? security_file_permission+0x75/0x260 [ 1190.408912][T14733] ? rw_verify_area+0x209/0x4d0 [ 1190.408946][T14733] vfs_writev+0x4c4/0x990 [ 1190.408973][T14733] ? __pfx_ucma_write+0x10/0x10 [ 1190.409003][T14733] ? __pfx_vfs_writev+0x10/0x10 [ 1190.409049][T14733] ? __fget_files+0x2a/0x420 [ 1190.409073][T14733] ? __fget_files+0x3a8/0x420 [ 1190.409091][T14733] ? __fget_files+0x2a/0x420 [ 1190.409118][T14733] do_writev+0x15a/0x2e0 [ 1190.409145][T14733] ? __pfx_do_writev+0x10/0x10 [ 1190.409182][T14733] do_syscall_64+0x166/0x520 [ 1190.409204][T14733] ? trace_irq_disable+0x3b/0x140 [ 1190.409227][T14733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.409247][T14733] ? clear_bhb_loop+0x70/0xc0 [ 1190.409271][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.409289][T14733] RIP: 0033:0x7f4b5457e159 [ 1190.409309][T14733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.409325][T14733] RSP: 002b:00007f4b527d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1190.409348][T14733] RAX: ffffffffffffffda RBX: 00007f4b54805fa0 RCX: 00007f4b5457e159 [ 1190.409362][T14733] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 1190.409375][T14733] RBP: 00007f4b527d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.409388][T14733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.409400][T14733] R13: 00007f4b54806038 R14: 00007f4b54805fa0 R15: 00007fff8df30128 [ 1190.409432][T14733] [ 1190.532752][T13889] Bluetooth: hci2: command tx timeout [ 1190.813539][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1191.107547][T14747] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1810'. [ 1192.216394][T13889] Bluetooth: hci3: command tx timeout [ 1192.530827][T13889] Bluetooth: hci2: command tx timeout [ 1194.192082][T13889] Bluetooth: hci3: command tx timeout [ 1194.354844][T14775] input: syz0 as /devices/virtual/input/input24 [ 1194.496705][T13889] Bluetooth: hci2: command tx timeout [ 1194.763432][T14775] netlink: 'syz.7.1813': attribute type 13 has an invalid length. [ 1195.191936][ T5814] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1195.213399][ T5814] dvb_usb_dibusb_mb 3-1:255.14: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1195.240038][ T5814] usb 3-1: USB disconnect, device number 42 [ 1195.246796][ T9] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1195.247044][ T9] dvb_usb_dibusb_mb 8-1:255.43: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1195.375432][ T9] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1195.397643][ T9] usb 8-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 1195.397673][ T9] usb 8-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 1195.792907][T14790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1814'. [ 1196.452849][T13889] Bluetooth: hci3: command tx timeout [ 1196.476108][ T5600] Bluetooth: hci2: command tx timeout [ 1196.891672][T14796] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1816'. [ 1197.948025][T14807] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1818'. [ 1198.385536][ T5600] Bluetooth: hci3: command tx timeout [ 1200.918593][T14840] netlink: 'syz.7.1820': attribute type 1 has an invalid length. [ 1200.926741][T14840] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1200.951792][T14840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.626117][T14855] input: syz0 as /devices/virtual/input/input25 [ 1204.652732][T14861] netlink: 'syz.2.1823': attribute type 13 has an invalid length. [ 1205.621449][T14727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.628645][T14727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.628884][T14727] bridge_slave_0: entered allmulticast mode [ 1205.660257][T14727] bridge_slave_0: entered promiscuous mode [ 1206.197494][T14727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.204976][T14727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.205210][T14727] bridge_slave_1: entered allmulticast mode [ 1206.221722][T14727] bridge_slave_1: entered promiscuous mode [ 1206.520437][T14880] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1826'. [ 1206.779963][T14584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1206.833151][T14584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1206.893812][T14727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.897048][T14584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1206.945940][T14584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1207.024584][T14892] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1827'. [ 1207.112960][T14727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.113327][T14584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1207.149399][T14584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1207.157839][T14708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.158238][T14708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.158440][T14708] bridge_slave_0: entered allmulticast mode [ 1207.186368][T14708] bridge_slave_0: entered promiscuous mode [ 1207.210430][T14584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1207.233960][T14584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1207.236282][T14708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.236385][T14708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.236513][T14708] bridge_slave_1: entered allmulticast mode [ 1207.267405][T14708] bridge_slave_1: entered promiscuous mode [ 1207.523096][T14727] team0: Port device team_slave_0 added [ 1207.707472][T14727] team0: Port device team_slave_1 added [ 1207.743048][T14708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.854925][T14708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.213567][T14727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.213669][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.213734][T14727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.361347][T14727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.369583][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.369621][T14727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.785008][T14708] team0: Port device team_slave_0 added [ 1212.302364][T14708] team0: Port device team_slave_1 added [ 1212.460164][T14918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.175390][T14922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1834'. [ 1214.512566][T14708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.512946][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.512981][T14708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.571630][T14708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.571650][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.571680][T14708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.594439][T14727] hsr_slave_0: entered promiscuous mode [ 1214.595865][T14727] hsr_slave_1: entered promiscuous mode [ 1214.596829][T14727] debugfs: 'hsr0' already exists in 'hsr' [ 1214.596855][T14727] Cannot create hsr debugfs directory [ 1215.074213][T14708] hsr_slave_0: entered promiscuous mode [ 1215.085254][T14708] hsr_slave_1: entered promiscuous mode [ 1215.086374][T14708] debugfs: 'hsr0' already exists in 'hsr' [ 1215.086403][T14708] Cannot create hsr debugfs directory [ 1217.217532][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1217.599934][T14584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.791656][T14584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.102727][T12347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.112771][T12347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.205626][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.205829][ T7263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.574518][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1219.574739][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1222.791853][ T4954] udevd[4954]: worker [12605] /devices/platform/dummy_hcd.7/usb8/8-1 timeout; kill it [ 1222.791964][ T4954] udevd[4954]: seq 27129 '/devices/platform/dummy_hcd.7/usb8/8-1' killed [ 1222.933844][ T4954] udevd[4954]: worker [12605] terminated by signal 9 (Killed) [ 1222.933905][ T4954] udevd[4954]: worker [12605] failed while handling '/devices/platform/dummy_hcd.7/usb8/8-1' [ 1223.701664][ T5249] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1224.717100][ T40] bridge_slave_1: left allmulticast mode [ 1224.717182][ T40] bridge_slave_1: left promiscuous mode [ 1224.717605][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.813359][ T40] bridge_slave_0: left allmulticast mode [ 1224.813548][ T40] bridge_slave_0: left promiscuous mode [ 1224.813858][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.002921][ T40] bridge_slave_1: left allmulticast mode [ 1225.003002][ T40] bridge_slave_1: left promiscuous mode [ 1225.003262][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.117951][ T40] bridge_slave_0: left allmulticast mode [ 1225.118031][ T40] bridge_slave_0: left promiscuous mode [ 1225.118319][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.651633][T14998] synth uevent: /bus/acpi: unknown uevent action string [ 1226.069614][T15002] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1226.215266][T15002] usb 3-1: Using ep0 maxpacket: 32 [ 1226.221065][T15002] usb 3-1: New USB device found, idVendor=0bda, idProduct=0161, bcdDevice=2b.1a [ 1226.227234][T15002] usb 3-1: config 12 has an invalid interface number: 167 but max is 3 [ 1226.227470][T15002] usb 3-1: config 12 has an invalid interface descriptor of length 4, skipping [ 1226.227513][T15002] usb 3-1: config 12 has an invalid descriptor of length 219, skipping remainder of the config [ 1226.227531][T15002] usb 3-1: config 12 has 1 interface, different from the descriptor's value: 4 [ 1226.227552][T15002] usb 3-1: config 12 has no interface number 0 [ 1226.227586][T15002] usb 3-1: too many endpoints for config 12 interface 167 altsetting 90: 88, using maximum allowed: 30 [ 1226.227623][T15002] usb 3-1: config 12 interface 167 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 88 [ 1226.227648][T15002] usb 3-1: config 12 interface 167 has no altsetting 0 [ 1226.241359][T15002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.241390][T15002] usb 3-1: Product: 鮜抝Ⳅ蛘㑴혝ᒈ䔟媠ὃ肿層齣이㚩돰뉆㚹팻룻傗ᯢ砕蚞嶬ﲮ⢐꘢﯁嵳轭除ሕ⛟孫躏땺Ⓑ􃈍Ꮲ＿鑤ㆃꜻ魬䨶ꊽ턱憾릇줸⠋㧷⡑粸뚢⻻柫휏턬빨弫슁卾쎧ﵙ⾨벡⎝憶㿓蜭ﮥ䦬횇彄睃䰩䮵送ῂଃ逫䒆껹乯 [ 1226.241417][T15002] usb 3-1: Manufacturer: ᠁ [ 1226.241431][T15002] usb 3-1: SerialNumber: 㺣⇣℣᪵㢲鼭ᯀ贇瀐蕵⨨罻ᨅ⺬寧쒌蠦꒻씝ዡ㿮쭳흟㿍䛙᚜ [ 1226.404186][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.503452][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.540460][ T40] bond0 (unregistering): Released all slaves [ 1226.564025][T15002] usb 3-1: USB disconnect, device number 43 [ 1227.531880][T15012] FAULT_INJECTION: forcing a failure. [ 1227.531880][T15012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.546384][T15012] CPU: 0 UID: 0 PID: 15012 Comm: syz.7.1849 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1227.546421][T15012] Tainted: [L]=SOFTLOCKUP [ 1227.546429][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1227.546443][T15012] Call Trace: [ 1227.546453][T15012] [ 1227.546464][T15012] dump_stack_lvl+0xe8/0x150 [ 1227.546502][T15012] should_fail_ex+0x46b/0x600 [ 1227.546533][T15012] _copy_to_user+0x31/0xb0 [ 1227.546564][T15012] simple_read_from_buffer+0xe1/0x170 [ 1227.546592][T15012] proc_fail_nth_read+0x1be/0x230 [ 1227.546624][T15012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1227.546653][T15012] ? rw_verify_area+0x250/0x4d0 [ 1227.546680][T15012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1227.546704][T15012] vfs_read+0x219/0xa90 [ 1227.546726][T15012] ? putname+0x2e/0x130 [ 1227.546763][T15012] ? path_getxattrat+0x385/0x460 [ 1227.546794][T15012] ? __pfx_vfs_read+0x10/0x10 [ 1227.546816][T15012] ? __pfx_path_getxattrat+0x10/0x10 [ 1227.546866][T15012] ksys_read+0x156/0x270 [ 1227.546892][T15012] ? __pfx_ksys_read+0x10/0x10 [ 1227.546930][T15012] do_syscall_64+0x166/0x520 [ 1227.546956][T15012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.546978][T15012] ? clear_bhb_loop+0x70/0xc0 [ 1227.547006][T15012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.547028][T15012] RIP: 0033:0x7f4b5453e98e [ 1227.547050][T15012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1227.547069][T15012] RSP: 002b:00007f4b527d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1227.547095][T15012] RAX: ffffffffffffffda RBX: 00007f4b527d66c0 RCX: 00007f4b5453e98e [ 1227.547111][T15012] RDX: 000000000000000f RSI: 00007f4b527d60a0 RDI: 0000000000000005 [ 1227.547126][T15012] RBP: 00007f4b527d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.547140][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.547154][T15012] R13: 00007f4b54806038 R14: 00007f4b54805fa0 R15: 00007fff8df30128 [ 1227.547188][T15012] [ 1228.394414][T15018] input: syz0 as /devices/virtual/input/input26 [ 1228.451546][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.166606][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.399999][ T40] bond0 (unregistering): Released all slaves [ 1229.465262][T15022] netlink: 'syz.2.1851': attribute type 13 has an invalid length. [ 1229.995681][T15029] input: syz1 as /devices/virtual/input/input27 [ 1230.528710][T14584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.655074][T15036] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 1230.687661][T15036] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 1230.919590][ T40] hsr_slave_0: left promiscuous mode [ 1230.966795][ T40] hsr_slave_1: left promiscuous mode [ 1230.968021][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.100996][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.555535][ T40] hsr_slave_0: left promiscuous mode [ 1232.574991][ T40] hsr_slave_1: left promiscuous mode [ 1232.576362][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.598667][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.046219][T15068] input: syz0 as /devices/virtual/input/input28 [ 1233.881087][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1234.111234][T13889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1234.228782][T13889] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1234.251574][T13889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1234.274649][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1234.337291][T13889] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1234.338234][T13889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1235.130269][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1235.399950][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1236.325347][T15068] netlink: 'syz.7.1860': attribute type 13 has an invalid length. [ 1236.435907][ T5249] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1236.708697][ T5600] Bluetooth: hci5: command tx timeout [ 1237.210370][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 1238.691284][ T5600] Bluetooth: hci5: command tx timeout [ 1238.975289][T15118] FAULT_INJECTION: forcing a failure. [ 1238.975289][T15118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.984982][T15118] CPU: 1 UID: 0 PID: 15118 Comm: syz.7.1868 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1238.985022][T15118] Tainted: [L]=SOFTLOCKUP [ 1238.985031][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1238.985044][T15118] Call Trace: [ 1238.985055][T15118] [ 1238.985065][T15118] dump_stack_lvl+0xe8/0x150 [ 1238.985106][T15118] should_fail_ex+0x46b/0x600 [ 1238.985147][T15118] _copy_to_user+0x31/0xb0 [ 1238.985178][T15118] simple_read_from_buffer+0xe1/0x170 [ 1238.985207][T15118] proc_fail_nth_read+0x1be/0x230 [ 1238.985239][T15118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1238.985269][T15118] ? rw_verify_area+0x250/0x4d0 [ 1238.985295][T15118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1238.985320][T15118] vfs_read+0x219/0xa90 [ 1238.985354][T15118] ? __pfx_vfs_read+0x10/0x10 [ 1238.985386][T15118] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1238.985418][T15118] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1238.985443][T15118] ? mutex_lock_nested+0x152/0x1d0 [ 1238.985474][T15118] ? fdget_pos+0x252/0x320 [ 1238.985507][T15118] ksys_read+0x156/0x270 [ 1238.985534][T15118] ? __pfx_ksys_read+0x10/0x10 [ 1238.985573][T15118] do_syscall_64+0x166/0x520 [ 1238.985598][T15118] ? trace_irq_disable+0x3b/0x140 [ 1238.985626][T15118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.985648][T15118] ? clear_bhb_loop+0x70/0xc0 [ 1238.985675][T15118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.985697][T15118] RIP: 0033:0x7f4b5453e98e [ 1238.985719][T15118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1238.985737][T15118] RSP: 002b:00007f4b527b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1238.985762][T15118] RAX: ffffffffffffffda RBX: 00007f4b527b56c0 RCX: 00007f4b5453e98e [ 1238.985778][T15118] RDX: 000000000000000f RSI: 00007f4b527b50a0 RDI: 0000000000000005 [ 1238.985792][T15118] RBP: 00007f4b527b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.985806][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.985820][T15118] R13: 00007f4b54806128 R14: 00007f4b54806090 R15: 00007fff8df30128 [ 1238.985855][T15118] [ 1240.682434][ T5600] Bluetooth: hci5: command tx timeout [ 1241.535392][T15142] input: syz0 as /devices/virtual/input/input29 [ 1241.690990][T15144] netlink: 'syz.2.1871': attribute type 13 has an invalid length. [ 1242.652239][ T5600] Bluetooth: hci5: command tx timeout [ 1244.503696][T15075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.513862][T15075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.514105][T15075] bridge_slave_0: entered allmulticast mode [ 1244.539965][T15075] bridge_slave_0: entered promiscuous mode [ 1244.557021][T15075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.564434][T15075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.564685][T15075] bridge_slave_1: entered allmulticast mode [ 1244.590429][T15075] bridge_slave_1: entered promiscuous mode [ 1244.743776][T15075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.780249][T15075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.939572][T15075] team0: Port device team_slave_0 added [ 1244.990872][T15075] team0: Port device team_slave_1 added [ 1246.141523][T13889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1246.196473][T13889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1246.208088][T13889] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1246.235038][T13889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1246.251958][T13889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1247.159248][T15075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.160932][T15075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.160963][T15075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.441608][T15075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.441685][T15075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.441713][T15075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.525600][ T5600] Bluetooth: hci0: command tx timeout [ 1249.068804][T13889] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1249.177806][T13889] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1249.186129][T13889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1249.195681][T13889] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1249.196448][T13889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1250.264806][T15075] hsr_slave_0: entered promiscuous mode [ 1250.291256][T15075] hsr_slave_1: entered promiscuous mode [ 1250.296126][T15075] debugfs: 'hsr0' already exists in 'hsr' [ 1250.296157][T15075] Cannot create hsr debugfs directory [ 1250.500348][ T5600] Bluetooth: hci0: command tx timeout [ 1251.285051][ T5600] Bluetooth: hci6: command tx timeout [ 1252.761680][ T5600] Bluetooth: hci0: command tx timeout [ 1253.319328][T13889] Bluetooth: hci6: command tx timeout [ 1253.490565][T15254] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11701] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15254] [ 1253.714551][ T9] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1253.734204][ T9] dvb_usb_dibusb_mb 8-1:255.14: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1253.758754][ T9] usb 8-1: USB disconnect, device number 21 [ 1254.274318][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 1254.691405][T13889] Bluetooth: hci0: command tx timeout [ 1255.300383][T13889] Bluetooth: hci6: command tx timeout [ 1256.752213][T15286] CacheFiles: No cache directory specified [ 1257.281560][T13889] Bluetooth: hci6: command tx timeout [ 1259.948865][ T40] bridge_slave_1: left allmulticast mode [ 1259.954688][ T40] bridge_slave_1: left promiscuous mode [ 1259.954901][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.172966][ T40] bridge_slave_0: left allmulticast mode [ 1260.179952][ T40] bridge_slave_0: left promiscuous mode [ 1260.185301][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.481448][T15313] Bluetooth: MGMT ver 1.23 [ 1261.031185][T15319] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1900'. [ 1261.459776][T15323] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1901'. [ 1262.206416][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.263800][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.303317][ T40] bond0 (unregistering): Released all slaves [ 1262.427279][T15315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1899'. [ 1263.083237][T15335] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1902'. [ 1264.085552][T15346] input: syz0 as /devices/virtual/input/input31 [ 1264.179355][T15183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.187351][T15183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.187566][T15183] bridge_slave_0: entered allmulticast mode [ 1264.193070][T15183] bridge_slave_0: entered promiscuous mode [ 1264.314521][ T6053] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1265.026291][ T6053] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1265.050601][ T6053] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 1265.050635][ T6053] usb 8-1: config 0 has no interface number 0 [ 1265.050669][ T6053] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1265.050703][ T6053] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1265.050720][ T6053] usb 8-1: config 0 interface 255 has no altsetting 0 [ 1265.050742][ T6053] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.159216][ T6053] usb 8-1: config 0 descriptor?? [ 1265.176423][ T6053] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1265.358673][ T40] hsr_slave_0: left promiscuous mode [ 1265.358678][ T6053] gp8psk: usb in 128 operation failed. [ 1265.396517][ T40] hsr_slave_1: left promiscuous mode [ 1265.403214][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.416460][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.571153][ T6053] gp8psk: usb in 146 operation failed. [ 1265.586722][ T6053] gp8psk: failed to get FW version [ 1265.593741][ T6053] gp8psk: FPGA Version = 133 [ 1265.872801][T15343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.874820][ T6053] gp8psk: usb in 138 operation failed. [ 1265.874846][ T6053] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1265.874885][ T6053] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1266.009999][ T6053] usb 8-1: USB disconnect, device number 22 [ 1266.113714][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1266.168957][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1266.355298][T15183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.355551][T15183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.355869][T15183] bridge_slave_1: entered allmulticast mode [ 1266.362895][T15183] bridge_slave_1: entered promiscuous mode [ 1266.369763][T15348] netlink: 'syz.2.1905': attribute type 13 has an invalid length. [ 1266.613503][T15356] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1908'. [ 1266.675641][T15183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.714308][T15183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.781085][T15360] kvm: emulating exchange as write [ 1268.310008][T15210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.320898][T15210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.321144][T15210] bridge_slave_0: entered allmulticast mode [ 1268.324241][T15210] bridge_slave_0: entered promiscuous mode [ 1268.331360][T15183] team0: Port device team_slave_0 added [ 1268.672665][T15370] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1910'. [ 1269.558930][T15210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.566632][T15210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.566893][T15210] bridge_slave_1: entered allmulticast mode [ 1269.571755][T15210] bridge_slave_1: entered promiscuous mode [ 1269.626835][T15183] team0: Port device team_slave_1 added [ 1269.827399][T15374] input: syz1 as /devices/virtual/input/input32 [ 1271.636396][T15381] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1912'. [ 1272.954416][T15210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.972204][T15183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.979342][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.015516][T15183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.036338][T15210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.054082][T15183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.054103][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.054134][T15183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.188355][T15210] team0: Port device team_slave_0 added [ 1273.257738][T15210] team0: Port device team_slave_1 added [ 1273.337898][T15183] hsr_slave_0: entered promiscuous mode [ 1273.345683][T15183] hsr_slave_1: entered promiscuous mode [ 1273.346892][T15183] debugfs: 'hsr0' already exists in 'hsr' [ 1273.346922][T15183] Cannot create hsr debugfs directory [ 1273.578660][T15384] input: syz0 as /devices/virtual/input/input33 [ 1274.451825][T15210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.451922][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.451947][T15210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.545543][T15389] netlink: 'syz.2.1914': attribute type 13 has an invalid length. [ 1274.626291][T15210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.635555][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.635593][T15210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.333970][T15210] hsr_slave_0: entered promiscuous mode [ 1275.351321][T15210] hsr_slave_1: entered promiscuous mode [ 1275.353352][T15210] debugfs: 'hsr0' already exists in 'hsr' [ 1275.353402][T15210] Cannot create hsr debugfs directory [ 1275.497070][T15401] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1916'. [ 1276.493503][T11778] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1276.645936][T11778] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1276.656556][T11778] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1276.656589][T11778] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1276.659593][T11778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.659621][T11778] usb 3-1: Product: syz [ 1276.659637][T11778] usb 3-1: Manufacturer: syz [ 1276.659654][T11778] usb 3-1: SerialNumber: syz [ 1276.837567][T11778] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1276.858806][T11778] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1276.858806][T11778] Please send a copy of this message to and [ 1277.950241][T11778] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 1277.985462][T11778] usb 3-1: USB disconnect, device number 44 [ 1278.115729][T15423] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1919'. [ 1278.899631][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1278.906227][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1280.144005][T15446] input: syz0 as /devices/virtual/input/input34 [ 1280.456518][T15451] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1920'. [ 1281.871253][T15454] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1924'. [ 1281.890735][T15448] netlink: 'syz.7.1923': attribute type 13 has an invalid length. [ 1282.628129][T15470] 9pnet_fd: Insufficient options for proto=fd [ 1283.919745][T15486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1928'. [ 1284.486958][T15075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1284.642581][T15075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1284.869169][T15075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1284.907782][T15075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1284.928212][T15075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1284.963987][T15075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1284.979942][T15075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1285.017929][ T6053] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1285.030221][T15075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1285.161660][ T6053] usb 8-1: Using ep0 maxpacket: 16 [ 1285.164513][ T6053] usb 8-1: New USB device found, idVendor=10b8, idProduct=0bb8, bcdDevice=68.5c [ 1285.318521][ T6053] usb 8-1: config 255 has an invalid interface number: 168 but max is 2 [ 1285.318605][ T6053] usb 8-1: config 255 has an invalid interface number: 126 but max is 2 [ 1285.318627][ T6053] usb 8-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 1285.318645][ T6053] usb 8-1: config 255 has an invalid interface number: 43 but max is 2 [ 1285.318663][ T6053] usb 8-1: config 255 has an invalid interface number: 14 but max is 2 [ 1285.318681][ T6053] usb 8-1: config 255 has 4 interfaces, different from the descriptor's value: 3 [ 1285.318701][ T6053] usb 8-1: config 255 has no interface number 0 [ 1285.318717][ T6053] usb 8-1: config 255 has no interface number 1 [ 1285.318733][ T6053] usb 8-1: config 255 has no interface number 2 [ 1285.318749][ T6053] usb 8-1: config 255 has no interface number 3 [ 1285.318833][ T6053] usb 8-1: config 255 interface 168 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 1285.318855][ T6053] usb 8-1: config 255 interface 168 altsetting 155 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1285.318881][ T6053] usb 8-1: config 255 interface 168 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 1285.318910][ T6053] usb 8-1: config 255 interface 168 altsetting 155 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1285.318936][ T6053] usb 8-1: too many endpoints for config 255 interface 126 altsetting 222: 210, using maximum allowed: 30 [ 1285.318972][ T6053] usb 8-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x4, skipping [ 1285.318995][ T6053] usb 8-1: config 255 interface 126 altsetting 222 has an endpoint descriptor with address 0x53, changing to 0x3 [ 1285.319018][ T6053] usb 8-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x3, skipping [ 1285.319039][ T6053] usb 8-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x3, skipping [ 1285.319060][ T6053] usb 8-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x9, skipping [ 1285.319080][ T6053] usb 8-1: config 255 interface 126 altsetting 222 has 6 endpoint descriptors, different from the interface descriptor's value: 210 [ 1285.319118][ T6053] usb 8-1: config 255 interface 14 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 1285.319139][ T6053] usb 8-1: config 255 interface 14 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1285.319158][ T6053] usb 8-1: config 255 interface 168 has no altsetting 0 [ 1285.319176][ T6053] usb 8-1: config 255 interface 126 has no altsetting 0 [ 1285.319194][ T6053] usb 8-1: config 255 interface 43 has no altsetting 0 [ 1285.319211][ T6053] usb 8-1: config 255 interface 14 has no altsetting 0 [ 1285.375749][ T6053] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.375779][ T6053] usb 8-1: Product: syz [ 1285.375793][ T6053] usb 8-1: Manufacturer: ᐇ [ 1285.375807][ T6053] usb 8-1: SerialNumber: syz [ 1286.643485][T15490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.672362][T15490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.430561][ T6053] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1287.520756][ T6053] usb 8-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 1287.520856][ T6053] usb 8-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 1287.710543][T15075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.781455][T15075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.802006][T14631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.802813][T14631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.839172][T14636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.839445][T14636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.213968][T15520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1291.272128][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1293.494189][T11778] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1293.646781][T11778] usb 3-1: Using ep0 maxpacket: 16 [ 1293.654524][T11778] usb 3-1: New USB device found, idVendor=10b8, idProduct=0bb8, bcdDevice=68.5c [ 1293.667243][T11778] usb 3-1: config 255 has an invalid interface number: 168 but max is 2 [ 1293.675703][T11778] usb 3-1: config 255 has an invalid interface number: 126 but max is 2 [ 1293.675734][T11778] usb 3-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 1293.675757][T11778] usb 3-1: config 255 has an invalid interface number: 43 but max is 2 [ 1293.675779][T11778] usb 3-1: config 255 has an invalid interface number: 14 but max is 2 [ 1293.675801][T11778] usb 3-1: config 255 has 4 interfaces, different from the descriptor's value: 3 [ 1293.675825][T11778] usb 3-1: config 255 has no interface number 0 [ 1293.675844][T11778] usb 3-1: config 255 has no interface number 1 [ 1293.675871][T11778] usb 3-1: config 255 has no interface number 2 [ 1293.675889][T11778] usb 3-1: config 255 has no interface number 3 [ 1293.676003][T11778] usb 3-1: config 255 interface 168 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 1293.676028][T11778] usb 3-1: config 255 interface 168 altsetting 155 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1293.676059][T11778] usb 3-1: config 255 interface 168 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 1293.676084][T11778] usb 3-1: config 255 interface 168 altsetting 155 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1293.676115][T11778] usb 3-1: too many endpoints for config 255 interface 126 altsetting 222: 210, using maximum allowed: 30 [ 1293.676170][T11778] usb 3-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x4, skipping [ 1293.676197][T11778] usb 3-1: config 255 interface 126 altsetting 222 has an endpoint descriptor with address 0x53, changing to 0x3 [ 1293.676225][T11778] usb 3-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x3, skipping [ 1293.676250][T11778] usb 3-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x3, skipping [ 1293.676274][T11778] usb 3-1: config 255 interface 126 altsetting 222 has a duplicate endpoint with address 0x9, skipping [ 1293.676299][T11778] usb 3-1: config 255 interface 126 altsetting 222 has 6 endpoint descriptors, different from the interface descriptor's value: 210 [ 1293.676345][T11778] usb 3-1: config 255 interface 14 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 1293.676369][T11778] usb 3-1: config 255 interface 14 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1293.676392][T11778] usb 3-1: config 255 interface 168 has no altsetting 0 [ 1293.676412][T11778] usb 3-1: config 255 interface 126 has no altsetting 0 [ 1293.676432][T11778] usb 3-1: config 255 interface 43 has no altsetting 0 [ 1293.676544][T11778] usb 3-1: config 255 interface 14 has no altsetting 0 [ 1293.725004][T11778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.725036][T11778] usb 3-1: Product: syz [ 1293.725053][T11778] usb 3-1: Manufacturer: ᐇ [ 1293.725069][T11778] usb 3-1: SerialNumber: syz [ 1293.852224][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1293.919269][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1293.927541][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1293.955555][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1293.959525][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1294.555883][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.556659][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.080916][T11778] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1296.076269][ T5600] Bluetooth: hci2: command tx timeout [ 1298.047845][ T5600] Bluetooth: hci2: command tx timeout [ 1300.371625][ T5600] Bluetooth: hci2: command tx timeout [ 1302.336584][ T5600] Bluetooth: hci2: command tx timeout [ 1303.575231][ T40] bridge_slave_1: left allmulticast mode [ 1303.575317][ T40] bridge_slave_1: left promiscuous mode [ 1303.575583][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.743372][ T40] bridge_slave_0: left allmulticast mode [ 1303.743466][ T40] bridge_slave_0: left promiscuous mode [ 1303.743772][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.021824][ T40] bridge_slave_1: left allmulticast mode [ 1304.021938][ T40] bridge_slave_1: left promiscuous mode [ 1304.022190][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.186605][ T40] bridge_slave_0: left allmulticast mode [ 1304.186722][ T40] bridge_slave_0: left promiscuous mode [ 1304.186974][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.588508][T13889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1304.636170][T13889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1304.669682][T13889] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1304.676442][T13889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1304.699693][T13889] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1305.528767][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.639445][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.699114][ T40] bond0 (unregistering): Released all slaves [ 1306.115290][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.181827][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.242343][ T40] bond0 (unregistering): Released all slaves [ 1307.080917][ T5600] Bluetooth: hci3: command tx timeout [ 1309.098738][ T5600] Bluetooth: hci3: command tx timeout [ 1309.177302][ T40] hsr_slave_0: left promiscuous mode [ 1309.206617][ T40] hsr_slave_1: left promiscuous mode [ 1309.207965][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.240919][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.444053][T13889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1309.538286][T13889] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1309.561977][T13889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1309.570836][T13889] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1309.609214][T13889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1309.718610][ T40] hsr_slave_0: left promiscuous mode [ 1309.969117][ T40] hsr_slave_1: left promiscuous mode [ 1309.982511][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.068292][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.258263][T13889] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1310.298549][T13889] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1310.310387][T13889] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1310.313920][T13889] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1310.316120][T13889] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1311.025164][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1311.078613][ T5600] Bluetooth: hci3: command tx timeout [ 1311.095391][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1311.582287][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1311.630178][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1311.811686][T15560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.811923][T15560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.812143][T15560] bridge_slave_0: entered allmulticast mode [ 1311.815156][T15560] bridge_slave_0: entered promiscuous mode [ 1311.856683][T15560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.860274][T15560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.860484][T15560] bridge_slave_1: entered allmulticast mode [ 1311.875996][T15560] bridge_slave_1: entered promiscuous mode [ 1312.005961][ T5600] Bluetooth: hci5: command tx timeout [ 1312.398973][T15560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.424910][T15560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.533615][ T5600] Bluetooth: hci8: command tx timeout [ 1312.747782][T15560] team0: Port device team_slave_0 added [ 1312.785510][T15560] team0: Port device team_slave_1 added [ 1313.059421][ T5600] Bluetooth: hci3: command tx timeout [ 1313.606697][T15560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.606771][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.606800][T15560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.716544][T15560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.716596][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.716624][T15560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.973424][ T5600] Bluetooth: hci5: command tx timeout [ 1314.515614][ T5600] Bluetooth: hci8: command tx timeout [ 1314.687844][T15560] hsr_slave_0: entered promiscuous mode [ 1314.700254][T15560] hsr_slave_1: entered promiscuous mode [ 1314.701276][T15560] debugfs: 'hsr0' already exists in 'hsr' [ 1314.701304][T15560] Cannot create hsr debugfs directory [ 1315.123122][T14630] IPVS: starting estimator thread 0... [ 1315.211167][T15703] IPVS: using max 7 ests per chain, 16800 per kthread [ 1315.425259][T15707] FAULT_INJECTION: forcing a failure. [ 1315.425259][T15707] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.425350][T15707] CPU: 0 UID: 0 PID: 15707 Comm: syz.2.1955 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1315.425381][T15707] Tainted: [L]=SOFTLOCKUP [ 1315.425389][T15707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1315.425401][T15707] Call Trace: [ 1315.425412][T15707] [ 1315.425422][T15707] dump_stack_lvl+0xe8/0x150 [ 1315.425461][T15707] should_fail_ex+0x46b/0x600 [ 1315.425495][T15707] should_failslab+0xa8/0x100 [ 1315.425530][T15707] __kmalloc_noprof+0xfb/0x790 [ 1315.425556][T15707] ? tomoyo_encode+0x2ad/0x570 [ 1315.425582][T15707] ? tomoyo_encode+0x2ad/0x570 [ 1315.425616][T15707] tomoyo_encode+0x2ad/0x570 [ 1315.425647][T15707] tomoyo_realpath_from_path+0x5fa/0x640 [ 1315.425685][T15707] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1315.425709][T15707] tomoyo_path_number_perm+0x246/0x5f0 [ 1315.425734][T15707] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1315.425756][T15707] ? __lock_acquire+0x6df/0x2e40 [ 1315.425799][T15707] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1315.425826][T15707] ? hook_file_ioctl+0x1f5/0x610 [ 1315.425877][T15707] ? __fget_files+0x2a/0x420 [ 1315.425904][T15707] ? __fget_files+0x2a/0x420 [ 1315.425922][T15707] ? __fget_files+0x3a8/0x420 [ 1315.425940][T15707] ? __fget_files+0x2a/0x420 [ 1315.425966][T15707] security_file_ioctl+0xc3/0x2a0 [ 1315.425996][T15707] __se_sys_ioctl+0x47/0x170 [ 1315.426027][T15707] do_syscall_64+0x166/0x520 [ 1315.426052][T15707] ? trace_irq_disable+0x3b/0x140 [ 1315.426078][T15707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.426101][T15707] ? clear_bhb_loop+0x70/0xc0 [ 1315.426128][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.426149][T15707] RIP: 0033:0x7f7cc95ce159 [ 1315.426170][T15707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.426196][T15707] RSP: 002b:00007f7cc7826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1315.426222][T15707] RAX: ffffffffffffffda RBX: 00007f7cc9855fa0 RCX: 00007f7cc95ce159 [ 1315.426239][T15707] RDX: 0000000000000000 RSI: 00000000c018aa3f RDI: 0000000000000003 [ 1315.426252][T15707] RBP: 00007f7cc7826090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.426266][T15707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.426280][T15707] R13: 00007f7cc9856038 R14: 00007f7cc9855fa0 R15: 00007ffe408d68f8 [ 1315.426315][T15707] [ 1315.426366][T15707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1316.053307][T15711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1956'. [ 1316.491151][ T5600] Bluetooth: hci5: command tx timeout [ 1316.618160][ T5600] Bluetooth: hci8: command tx timeout [ 1318.496447][ T5600] Bluetooth: hci5: command tx timeout [ 1318.544153][ T5600] Bluetooth: hci8: command tx timeout [ 1319.869667][T15726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1958'. [ 1321.133890][T15734] input: syz0 as /devices/virtual/input/input35 [ 1322.078340][T15735] netlink: 'syz.2.1961': attribute type 13 has an invalid length. [ 1322.432631][T15741] input: syz0 as /devices/virtual/input/input36 [ 1323.285864][T15744] netlink: 'syz.2.1962': attribute type 13 has an invalid length. [ 1323.729263][T15749] input: syz0 as /devices/virtual/input/input37 [ 1324.525821][T15749] netlink: 'syz.2.1963': attribute type 13 has an invalid length. [ 1324.742693][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 1324.757813][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 1325.138372][T15648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.138713][T15648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.138900][T15648] bridge_slave_0: entered allmulticast mode [ 1325.143371][T15648] bridge_slave_0: entered promiscuous mode [ 1325.468680][T15648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.470174][T15648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.470411][T15648] bridge_slave_1: entered allmulticast mode [ 1325.474539][T15648] bridge_slave_1: entered promiscuous mode [ 1325.636207][T15770] input: syz0 as /devices/virtual/input/input38 [ 1326.285493][T15669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.285668][T15669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.285853][T15669] bridge_slave_0: entered allmulticast mode [ 1326.290410][T15669] bridge_slave_0: entered promiscuous mode [ 1326.299623][T15771] netlink: 'syz.2.1968': attribute type 13 has an invalid length. [ 1326.356844][T15648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.358366][T15669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.358702][T15669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.358913][T15669] bridge_slave_1: entered allmulticast mode [ 1326.366596][T15669] bridge_slave_1: entered promiscuous mode [ 1326.368566][T15673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.368712][T15673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.369338][T15673] bridge_slave_0: entered allmulticast mode [ 1326.372378][T15673] bridge_slave_0: entered promiscuous mode [ 1326.457492][T15648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.524192][T15673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.524502][T15673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.524692][T15673] bridge_slave_1: entered allmulticast mode [ 1326.554013][T15673] bridge_slave_1: entered promiscuous mode [ 1326.799924][T15669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.865622][T15648] team0: Port device team_slave_0 added [ 1326.902966][T15669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.928232][T15673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.945255][T15648] team0: Port device team_slave_1 added [ 1327.060753][T15673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.188225][T15669] team0: Port device team_slave_0 added [ 1327.348320][T15776] FAULT_INJECTION: forcing a failure. [ 1327.348320][T15776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.365135][T15648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.372488][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.372510][T15648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.379855][T15669] team0: Port device team_slave_1 added [ 1327.418466][T15776] CPU: 0 UID: 0 PID: 15776 Comm: syz.2.1970 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1327.418490][T15776] Tainted: [L]=SOFTLOCKUP [ 1327.418495][T15776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1327.418503][T15776] Call Trace: [ 1327.418509][T15776] [ 1327.418515][T15776] dump_stack_lvl+0xe8/0x150 [ 1327.418539][T15776] should_fail_ex+0x46b/0x600 [ 1327.418564][T15776] _copy_from_iter+0x1d3/0x1660 [ 1327.418595][T15776] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1327.418625][T15776] ? __pfx__copy_from_iter+0x10/0x10 [ 1327.418646][T15776] ? __alloc_skb+0x27a/0x7a0 [ 1327.418674][T15776] ? __alloc_skb+0x27a/0x7a0 [ 1327.418740][T15776] ? netlink_sendmsg+0x650/0xb40 [ 1327.418761][T15776] ? skb_put+0x112/0x210 [ 1327.418783][T15776] netlink_sendmsg+0x6c0/0xb40 [ 1327.418795][T15776] ? _parse_integer_limit+0x18f/0x1e0 [ 1327.418816][T15776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1327.418828][T15776] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1327.418849][T15776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1327.418860][T15776] sock_sendmsg_nosec+0x13a/0x180 [ 1327.418877][T15776] sock_write_iter+0x2e4/0x3f0 [ 1327.418890][T15776] ? __pfx_sock_write_iter+0x10/0x10 [ 1327.418907][T15776] ? bpf_lsm_file_permission+0x9/0x20 [ 1327.418921][T15776] ? security_file_permission+0x75/0x260 [ 1327.418939][T15776] vfs_write+0x61e/0xbb0 [ 1327.418957][T15776] ? __pfx_vfs_write+0x10/0x10 [ 1327.418979][T15776] ? __fget_files+0x2a/0x420 [ 1327.418999][T15776] ksys_write+0x156/0x270 [ 1327.419014][T15776] ? __pfx_ksys_write+0x10/0x10 [ 1327.419039][T15776] do_syscall_64+0x166/0x520 [ 1327.419053][T15776] ? trace_irq_disable+0x3b/0x140 [ 1327.419068][T15776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.419080][T15776] ? clear_bhb_loop+0x70/0xc0 [ 1327.419095][T15776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.419107][T15776] RIP: 0033:0x7f7cc95ce159 [ 1327.419121][T15776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.419132][T15776] RSP: 002b:00007f7cc7826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1327.419148][T15776] RAX: ffffffffffffffda RBX: 00007f7cc9855fa0 RCX: 00007f7cc95ce159 [ 1327.419157][T15776] RDX: 000000000000007c RSI: 0000200000000080 RDI: 0000000000000003 [ 1327.419165][T15776] RBP: 00007f7cc7826090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.419173][T15776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.419185][T15776] R13: 00007f7cc9856038 R14: 00007f7cc9855fa0 R15: 00007ffe408d68f8 [ 1327.419203][T15776] [ 1327.621454][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1971'. [ 1327.919028][T15673] team0: Port device team_slave_0 added [ 1327.947823][T15780] FAULT_INJECTION: forcing a failure. [ 1327.947823][T15780] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.948179][T15780] CPU: 1 UID: 0 PID: 15780 Comm: syz.2.1972 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1327.948213][T15780] Tainted: [L]=SOFTLOCKUP [ 1327.948221][T15780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1327.948235][T15780] Call Trace: [ 1327.948244][T15780] [ 1327.948254][T15780] dump_stack_lvl+0xe8/0x150 [ 1327.948292][T15780] should_fail_ex+0x46b/0x600 [ 1327.948321][T15780] should_failslab+0xa8/0x100 [ 1327.948354][T15780] __kmalloc_cache_noprof+0xa1/0x680 [ 1327.948382][T15780] ? snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 1327.948405][T15780] ? snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 1327.948433][T15780] snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 1327.948456][T15780] ? __lock_acquire+0x6df/0x2e40 [ 1327.948487][T15780] ? __lock_acquire+0x6df/0x2e40 [ 1327.948520][T15780] ? do_raw_spin_lock+0x12b/0x2f0 [ 1327.948550][T15780] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1327.948586][T15780] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1327.948624][T15780] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1327.948647][T15780] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 1327.948676][T15780] ? snd_pcm_oss_get_active_substream+0x136/0x280 [ 1327.948700][T15780] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 1327.948726][T15780] snd_pcm_oss_set_rate+0x1bc/0x4f0 [ 1327.948752][T15780] snd_pcm_oss_ioctl+0xc31/0xe00 [ 1327.948772][T15780] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1327.948792][T15780] __se_sys_ioctl+0xff/0x170 [ 1327.948820][T15780] do_syscall_64+0x166/0x520 [ 1327.948841][T15780] ? trace_irq_disable+0x3b/0x140 [ 1327.948864][T15780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.948884][T15780] ? clear_bhb_loop+0x70/0xc0 [ 1327.948907][T15780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.948927][T15780] RIP: 0033:0x7f7cc95ce159 [ 1327.948946][T15780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.948962][T15780] RSP: 002b:00007f7cc7826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1327.948984][T15780] RAX: ffffffffffffffda RBX: 00007f7cc9855fa0 RCX: 00007f7cc95ce159 [ 1327.948998][T15780] RDX: 0000200000000140 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1327.949012][T15780] RBP: 00007f7cc7826090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.949024][T15780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.949036][T15780] R13: 00007f7cc9856038 R14: 00007f7cc9855fa0 R15: 00007ffe408d68f8 [ 1327.949068][T15780] [ 1328.333688][T15648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.637324][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.637427][T15648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.029409][T15673] team0: Port device team_slave_1 added [ 1329.257790][T15669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.265590][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.265635][T15669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.362536][T15669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.371000][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.371037][T15669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.574527][T15673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.581734][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.581769][T15673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.643820][T15673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.650951][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.650987][T15673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.829271][T15648] hsr_slave_0: entered promiscuous mode [ 1329.833038][T15648] hsr_slave_1: entered promiscuous mode [ 1329.860385][T15648] debugfs: 'hsr0' already exists in 'hsr' [ 1329.860469][T15648] Cannot create hsr debugfs directory [ 1330.022043][ T40] bridge_slave_1: left allmulticast mode [ 1330.027944][ T40] bridge_slave_1: left promiscuous mode [ 1330.028157][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.129559][ T40] bridge_slave_0: left allmulticast mode [ 1330.130452][ T40] bridge_slave_0: left promiscuous mode [ 1330.130754][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.317138][ T40] bridge_slave_1: left allmulticast mode [ 1330.317211][ T40] bridge_slave_1: left promiscuous mode [ 1330.317483][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.413341][ T40] bridge_slave_0: left allmulticast mode [ 1330.413429][ T40] bridge_slave_0: left promiscuous mode [ 1330.413701][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.913802][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.985167][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.032571][ T40] bond0 (unregistering): Released all slaves [ 1331.641947][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.717610][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.740247][ T40] bond0 (unregistering): Released all slaves [ 1331.819752][T15669] hsr_slave_0: entered promiscuous mode [ 1331.821122][T15669] hsr_slave_1: entered promiscuous mode [ 1331.823768][T15669] debugfs: 'hsr0' already exists in 'hsr' [ 1331.823796][T15669] Cannot create hsr debugfs directory [ 1332.828801][T15673] hsr_slave_0: entered promiscuous mode [ 1332.836514][T15673] hsr_slave_1: entered promiscuous mode [ 1332.844343][T15673] debugfs: 'hsr0' already exists in 'hsr' [ 1332.844377][T15673] Cannot create hsr debugfs directory [ 1333.074944][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 1333.374319][ T40] hsr_slave_0: left promiscuous mode [ 1333.396020][ T40] hsr_slave_1: left promiscuous mode [ 1333.398399][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.441715][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.613677][ T40] hsr_slave_0: left promiscuous mode [ 1333.631274][ T40] hsr_slave_1: left promiscuous mode [ 1333.633705][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.675717][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.518978][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1334.625711][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1335.127730][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1335.186740][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1336.664241][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1336.664407][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1337.987205][T15807] syzkaller0: entered promiscuous mode [ 1337.992883][T15807] syzkaller0: entered allmulticast mode [ 1338.358814][T15809] FAULT_INJECTION: forcing a failure. [ 1338.358814][T15809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.364055][T15809] CPU: 0 UID: 0 PID: 15809 Comm: syz.2.1983 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1338.364089][T15809] Tainted: [L]=SOFTLOCKUP [ 1338.364098][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1338.364110][T15809] Call Trace: [ 1338.364122][T15809] [ 1338.364132][T15809] dump_stack_lvl+0xe8/0x150 [ 1338.364167][T15809] should_fail_ex+0x46b/0x600 [ 1338.364195][T15809] _copy_from_user+0x2d/0xb0 [ 1338.364220][T15809] ____sys_sendmsg+0x31b/0x870 [ 1338.364256][T15809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1338.364291][T15809] ? import_iovec+0x73/0xa0 [ 1338.364318][T15809] ___sys_sendmsg+0x2a5/0x360 [ 1338.364343][T15809] ? __lock_acquire+0x6df/0x2e40 [ 1338.364370][T15809] ? __pfx____sys_sendmsg+0x10/0x10 [ 1338.364404][T15809] ? kstrtouint+0x6e/0xe0 [ 1338.364462][T15809] ? __fget_files+0x2a/0x420 [ 1338.364484][T15809] ? __fget_files+0x3a8/0x420 [ 1338.364513][T15809] __sys_sendmmsg+0x279/0x4d0 [ 1338.364545][T15809] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1338.364579][T15809] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1338.364620][T15809] ? ksys_write+0x248/0x270 [ 1338.364644][T15809] ? __pfx_ksys_write+0x10/0x10 [ 1338.364671][T15809] __x64_sys_sendmmsg+0xa0/0xc0 [ 1338.364699][T15809] do_syscall_64+0x166/0x520 [ 1338.364721][T15809] ? trace_irq_disable+0x3b/0x140 [ 1338.364743][T15809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.364768][T15809] ? clear_bhb_loop+0x70/0xc0 [ 1338.364793][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.364813][T15809] RIP: 0033:0x7f7cc95ce159 [ 1338.364833][T15809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.364851][T15809] RSP: 002b:00007f7cc7826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1338.364875][T15809] RAX: ffffffffffffffda RBX: 00007f7cc9855fa0 RCX: 00007f7cc95ce159 [ 1338.364891][T15809] RDX: 0000000000000001 RSI: 000020000000b480 RDI: 0000000000000003 [ 1338.364904][T15809] RBP: 00007f7cc7826090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.364918][T15809] R10: 000000000000affd R11: 0000000000000246 R12: 0000000000000001 [ 1338.364931][T15809] R13: 00007f7cc9856038 R14: 00007f7cc9855fa0 R15: 00007ffe408d68f8 [ 1338.364963][T15809] [ 1339.070351][ T40] bridge_slave_1: left allmulticast mode [ 1339.070437][ T40] bridge_slave_1: left promiscuous mode [ 1339.070747][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.150505][ T5600] Bluetooth: hci4: Unable to find connection for big 0x6f [ 1339.167765][ T40] bridge_slave_0: left allmulticast mode [ 1339.168435][ T40] bridge_slave_0: left promiscuous mode [ 1339.168749][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.556362][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.654641][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.709692][ T40] bond0 (unregistering): Released all slaves [ 1339.940538][T15819] netlink: 'syz.2.1986': attribute type 15 has an invalid length. [ 1341.254931][ T40] hsr_slave_0: left promiscuous mode [ 1341.297959][ T40] hsr_slave_1: left promiscuous mode [ 1341.306220][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.331190][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.919677][T15838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1988'. [ 1342.009830][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1342.051637][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1346.378950][T11778] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1346.380928][T11778] dvb_usb_dibusb_mb 3-1:255.168: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1346.387651][ T6053] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1346.388341][ T6053] dvb_usb_dibusb_mb 8-1:255.168: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1346.512155][ T6053] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1346.516698][ T6053] usb 8-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 1346.516731][ T6053] usb 8-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 1348.882071][T11778] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1350.803911][T15901] FAULT_INJECTION: forcing a failure. [ 1350.803911][T15901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.804017][T15901] CPU: 0 UID: 0 PID: 15901 Comm: syz.2.1992 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1350.804062][T15901] Tainted: [L]=SOFTLOCKUP [ 1350.804071][T15901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.804083][T15901] Call Trace: [ 1350.804093][T15901] [ 1350.804103][T15901] dump_stack_lvl+0xe8/0x150 [ 1350.804139][T15901] should_fail_ex+0x46b/0x600 [ 1350.804170][T15901] _copy_to_user+0x31/0xb0 [ 1350.804194][T15901] simple_read_from_buffer+0xe1/0x170 [ 1350.804220][T15901] proc_fail_nth_read+0x1be/0x230 [ 1350.804248][T15901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1350.804274][T15901] ? rw_verify_area+0x250/0x4d0 [ 1350.804297][T15901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1350.804319][T15901] vfs_read+0x219/0xa90 [ 1350.804348][T15901] ? __pfx_vfs_read+0x10/0x10 [ 1350.804372][T15901] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1350.804397][T15901] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1350.804419][T15901] ? mutex_lock_nested+0x152/0x1d0 [ 1350.804444][T15901] ? fdget_pos+0x252/0x320 [ 1350.804472][T15901] ksys_read+0x156/0x270 [ 1350.804496][T15901] ? __pfx_ksys_read+0x10/0x10 [ 1350.804514][T15901] ? fput+0xa0/0xd0 [ 1350.804549][T15901] do_syscall_64+0x166/0x520 [ 1350.804571][T15901] ? trace_irq_disable+0x3b/0x140 [ 1350.804594][T15901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.804615][T15901] ? clear_bhb_loop+0x70/0xc0 [ 1350.804641][T15901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.804664][T15901] RIP: 0033:0x7f7cc958e98e [ 1350.804685][T15901] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1350.804703][T15901] RSP: 002b:00007f7cc7825fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1350.804726][T15901] RAX: ffffffffffffffda RBX: 00007f7cc78266c0 RCX: 00007f7cc958e98e [ 1350.804740][T15901] RDX: 000000000000000f RSI: 00007f7cc78260a0 RDI: 0000000000000005 [ 1350.804753][T15901] RBP: 00007f7cc7826090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.804765][T15901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.804777][T15901] R13: 00007f7cc9856038 R14: 00007f7cc9855fa0 R15: 00007ffe408d68f8 [ 1350.804809][T15901] [ 1351.239289][T13889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1351.322675][T13889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1351.325880][T13889] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1351.336341][T13889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1351.375417][T13889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1353.595042][ T5600] Bluetooth: hci0: command tx timeout [ 1354.517210][T15669] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1354.589084][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1354.612266][T15669] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1354.658613][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1354.712766][T15669] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1354.751054][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1354.890395][T15669] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1354.937470][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1355.796277][T15955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1996'. [ 1355.830905][ T5600] Bluetooth: hci0: command tx timeout [ 1357.785928][ T5600] Bluetooth: hci0: command tx timeout [ 1358.847416][T15648] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1359.642352][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1359.767076][ T5600] Bluetooth: hci0: command tx timeout [ 1359.908786][T15648] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1359.946239][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1360.053643][T15648] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1360.191082][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1360.671167][T15648] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1360.718292][T15648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1362.317245][T15673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1362.365899][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1362.371416][T15903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.371601][T15903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.371924][T15903] bridge_slave_0: entered allmulticast mode [ 1362.387237][T15903] bridge_slave_0: entered promiscuous mode [ 1362.401199][T15673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1362.566552][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1362.569874][T15903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.570013][T15903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.570220][T15903] bridge_slave_1: entered allmulticast mode [ 1362.579458][T15903] bridge_slave_1: entered promiscuous mode [ 1362.853302][T15673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1363.002104][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1363.592533][T13889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1363.707569][T13889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1363.778311][T13889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1363.793857][T13889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1363.794747][T13889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1364.478808][T15673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1364.524596][T15673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1364.904567][T15903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.073201][T15903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.485342][T15903] team0: Port device team_slave_0 added [ 1365.525035][T15903] team0: Port device team_slave_1 added [ 1365.786671][ T5600] Bluetooth: hci2: command tx timeout [ 1366.055259][T14627] bridge_slave_1: left allmulticast mode [ 1366.061171][T14627] bridge_slave_1: left promiscuous mode [ 1366.061594][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.264627][T14627] bridge_slave_0: left allmulticast mode [ 1366.270548][T14627] bridge_slave_0: left promiscuous mode [ 1366.270984][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.761457][T13889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1366.818853][T13889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1366.849944][T13889] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1366.855419][T13889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1366.860692][T13889] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1367.231835][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1367.280613][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1367.285402][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1367.307046][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1367.321090][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1367.767755][ T5600] Bluetooth: hci2: command tx timeout [ 1367.789234][T14627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.883898][T14627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.973425][T14627] bond0 (unregistering): Released all slaves [ 1368.008429][T15903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.010741][T15903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.010773][T15903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.663461][T16104] input: syz0 as /devices/virtual/input/input39 [ 1368.958957][T15903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.970829][T15903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.970910][T15903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.276227][T13889] Bluetooth: hci3: command tx timeout [ 1369.443945][T13889] Bluetooth: hci5: command tx timeout [ 1369.618076][T14627] hsr_slave_0: left promiscuous mode [ 1369.644297][T14627] hsr_slave_1: left promiscuous mode [ 1369.645657][T14627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.721855][T14627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.791217][T13889] Bluetooth: hci2: command tx timeout [ 1370.132278][T14627] team0 (unregistering): Port device team_slave_1 removed [ 1370.161678][T14627] team0 (unregistering): Port device team_slave_0 removed [ 1370.320773][T16104] netlink: 'syz.2.2004': attribute type 13 has an invalid length. [ 1371.543716][ T5600] Bluetooth: hci5: command tx timeout [ 1371.543875][T13889] Bluetooth: hci3: command tx timeout [ 1371.730031][T13889] Bluetooth: hci2: command tx timeout [ 1371.886697][T15903] hsr_slave_0: entered promiscuous mode [ 1371.930551][T15903] hsr_slave_1: entered promiscuous mode [ 1371.939580][T15903] debugfs: 'hsr0' already exists in 'hsr' [ 1371.945459][T15903] Cannot create hsr debugfs directory [ 1373.234432][T16134] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 1373.242543][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'. [ 1373.491297][ T5600] Bluetooth: hci5: command tx timeout [ 1373.491471][T13889] Bluetooth: hci3: command tx timeout [ 1374.899218][T16144] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1375.074825][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1375.192216][T16154] FAULT_INJECTION: forcing a failure. [ 1375.192216][T16154] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.192300][T16154] CPU: 0 UID: 0 PID: 16154 Comm: syz.2.2011 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1375.192331][T16154] Tainted: [L]=SOFTLOCKUP [ 1375.192339][T16154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1375.192348][T16154] Call Trace: [ 1375.192356][T16154] [ 1375.192365][T16154] dump_stack_lvl+0xe8/0x150 [ 1375.192400][T16154] should_fail_ex+0x46b/0x600 [ 1375.192429][T16154] should_failslab+0xa8/0x100 [ 1375.192457][T16154] ? do_getname+0x2e/0x250 [ 1375.192485][T16154] kmem_cache_alloc_noprof+0x9e/0x690 [ 1375.192510][T16154] ? do_getname+0x2e/0x250 [ 1375.192543][T16154] do_getname+0x2e/0x250 [ 1375.192569][T16154] ? user_path_at+0x1e/0x160 [ 1375.192594][T16154] user_path_at+0x2a/0x160 [ 1375.192621][T16154] __se_sys_mount+0x2dc/0x420 [ 1375.192651][T16154] ? __pfx___se_sys_mount+0x10/0x10 [ 1375.192695][T16154] ? __x64_sys_mount+0x20/0xc0 [ 1375.192718][T16154] do_syscall_64+0x166/0x520 [ 1375.192741][T16154] ? trace_irq_disable+0x3b/0x140 [ 1375.192765][T16154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.192785][T16154] ? clear_bhb_loop+0x70/0xc0 [ 1375.192807][T16154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.192827][T16154] RIP: 0033:0x7f7cc95ce159 [ 1375.192846][T16154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.192863][T16154] RSP: 002b:00007f7cc7826028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1375.192886][T16154] RAX: ffffffffffffffda RBX: 00007f7cc9855fa0 RCX: 00007f7cc95ce159 [ 1375.192902][T16154] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 1375.192916][T16154] RBP: 00007f7cc9665024 R08: 0000200000000080 R09: 0000000000000000 [ 1375.192929][T16154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.192941][T16154] R13: 00007f7cc9856038 R14: 00007f7cc9855fa0 R15: 00007ffe408d68f8 [ 1375.192974][T16154] [ 1375.215452][T16154] devpts: Bad value for 'max' [ 1375.464039][T13889] Bluetooth: hci3: command tx timeout [ 1375.464078][T13889] Bluetooth: hci5: command tx timeout [ 1377.378006][T16170] i2c i2c-0: delete_device: Extra parameters [ 1377.390403][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 1377.905723][T16179] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1377.927896][T16179] overlayfs: overlapping lowerdir path [ 1378.917880][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.918072][T16044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.918301][T16044] bridge_slave_0: entered allmulticast mode [ 1378.941625][T16044] bridge_slave_0: entered promiscuous mode [ 1379.331664][T16044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.331927][T16044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.332713][T16044] bridge_slave_1: entered allmulticast mode [ 1379.336366][T16044] bridge_slave_1: entered promiscuous mode [ 1379.492899][T16092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.500578][T16092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.500827][T16092] bridge_slave_0: entered allmulticast mode [ 1379.520134][T16092] bridge_slave_0: entered promiscuous mode [ 1379.539814][T16044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.591446][T16092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.598992][T16092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.599695][T16092] bridge_slave_1: entered allmulticast mode [ 1379.603331][T16092] bridge_slave_1: entered promiscuous mode [ 1379.668624][T16044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.789274][T16089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.799976][T16089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.800222][T16089] bridge_slave_0: entered allmulticast mode [ 1379.803042][T16089] bridge_slave_0: entered promiscuous mode [ 1379.934442][T16089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.941916][T16089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.942149][T16089] bridge_slave_1: entered allmulticast mode [ 1379.964131][T16089] bridge_slave_1: entered promiscuous mode [ 1380.125082][T16044] team0: Port device team_slave_0 added [ 1380.193123][T16092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.219758][T16044] team0: Port device team_slave_1 added [ 1380.306902][T16092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.371893][T16089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.495237][T16089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.572453][T16044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.572608][T16044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.574199][T16044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1380.689374][T16092] team0: Port device team_slave_0 added [ 1380.691780][T16044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1380.691806][T16044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.691832][T16044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.263631][T16092] team0: Port device team_slave_1 added [ 1382.268074][T16089] team0: Port device team_slave_0 added [ 1382.450012][T16089] team0: Port device team_slave_1 added [ 1382.708821][T16092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.708898][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.708927][T16092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.810773][T16092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.818211][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.818250][T16092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.905875][T16089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.907439][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.907467][T16089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.058809][T16089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.060382][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1383.060413][T16089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.082213][T16044] hsr_slave_0: entered promiscuous mode [ 1383.087090][T16044] hsr_slave_1: entered promiscuous mode [ 1383.089641][T16044] debugfs: 'hsr0' already exists in 'hsr' [ 1383.089669][T16044] Cannot create hsr debugfs directory [ 1383.775823][T16092] hsr_slave_0: entered promiscuous mode [ 1383.789971][T16092] hsr_slave_1: entered promiscuous mode [ 1383.791023][T16092] debugfs: 'hsr0' already exists in 'hsr' [ 1383.791051][T16092] Cannot create hsr debugfs directory [ 1385.023200][T16089] hsr_slave_0: entered promiscuous mode [ 1385.024861][T16089] hsr_slave_1: entered promiscuous mode [ 1385.026008][T16089] debugfs: 'hsr0' already exists in 'hsr' [ 1385.026038][T16089] Cannot create hsr debugfs directory [ 1385.042659][T15903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1385.219000][T15903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1385.264068][T15903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1385.349311][T15903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1385.440295][T15903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1385.612447][T15903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1386.073660][T15903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1386.145101][T15903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1389.540577][ T4954] udevd[4954]: worker [12642] /devices/platform/dummy_hcd.7/usb8/8-1 is taking a long time [ 1389.540711][ T4954] udevd[4954]: worker [12847] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 1390.158528][ T5249] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1391.644123][T15903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.118496][ T5249] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1392.149884][T15903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.202455][T14631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.202705][T14631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.274379][T14629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.275112][T14629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.982585][T14627] bridge_slave_1: left allmulticast mode [ 1392.982701][T14627] bridge_slave_1: left promiscuous mode [ 1392.982982][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.067194][T14627] bridge_slave_0: left allmulticast mode [ 1393.067306][T14627] bridge_slave_0: left promiscuous mode [ 1393.067593][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.302022][T14627] bridge_slave_1: left allmulticast mode [ 1393.309792][T14627] bridge_slave_1: left promiscuous mode [ 1393.310074][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.463526][T14627] bridge_slave_0: left allmulticast mode [ 1393.469594][T14627] bridge_slave_0: left promiscuous mode [ 1393.469883][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.781316][T14627] bridge_slave_1: left allmulticast mode [ 1393.781420][T14627] bridge_slave_1: left promiscuous mode [ 1393.781666][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.085903][T14627] bridge_slave_0: left allmulticast mode [ 1394.085956][T14627] bridge_slave_0: left promiscuous mode [ 1394.086226][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.713676][T14627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.771119][T14627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.810479][T14627] bond0 (unregistering): Released all slaves [ 1395.127956][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1395.128112][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1395.266278][T14627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.323072][T14627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.362471][T14627] bond0 (unregistering): Released all slaves [ 1395.571236][T14627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.648489][T14627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.705259][T14627] bond0 (unregistering): Released all slaves [ 1396.234754][T16322] FAULT_INJECTION: forcing a failure. [ 1396.234754][T16322] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.234831][T16322] CPU: 1 UID: 0 PID: 16322 Comm: syz.2.2037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1396.234860][T16322] Tainted: [L]=SOFTLOCKUP [ 1396.234869][T16322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1396.234880][T16322] Call Trace: [ 1396.234887][T16322] [ 1396.234895][T16322] dump_stack_lvl+0xe8/0x150 [ 1396.234933][T16322] should_fail_ex+0x46b/0x600 [ 1396.234964][T16322] should_failslab+0xa8/0x100 [ 1396.234995][T16322] __kmalloc_cache_noprof+0xa1/0x680 [ 1396.235021][T16322] ? snd_pcm_oss_change_params_locked+0x1e4/0x3c80 [ 1396.235046][T16322] ? snd_pcm_oss_change_params_locked+0x1e4/0x3c80 [ 1396.235073][T16322] snd_pcm_oss_change_params_locked+0x1e4/0x3c80 [ 1396.235095][T16322] ? __lock_acquire+0x6df/0x2e40 [ 1396.235130][T16322] ? __kernel_text_address+0xd/0x30 [ 1396.235152][T16322] ? unwind_get_return_address+0x4d/0x90 [ 1396.235175][T16322] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1396.235210][T16322] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1396.235229][T16322] ? do_raw_spin_lock+0x12b/0x2f0 [ 1396.235261][T16322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1396.235291][T16322] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 1396.235318][T16322] ? snd_pcm_oss_write+0x207/0xb40 [ 1396.235341][T16322] snd_pcm_oss_write+0x274/0xb40 [ 1396.235377][T16322] vfs_writev+0x4c4/0x990 [ 1396.235406][T16322] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1396.235434][T16322] ? __pfx_vfs_writev+0x10/0x10 [ 1396.235474][T16322] ? __fget_files+0x2a/0x420 [ 1396.235498][T16322] ? __fget_files+0x3a8/0x420 [ 1396.235516][T16322] ? __fget_files+0x2a/0x420 [ 1396.235543][T16322] do_writev+0x15a/0x2e0 [ 1396.235571][T16322] ? __pfx_do_writev+0x10/0x10 [ 1396.235607][T16322] do_syscall_64+0x166/0x520 [ 1396.235629][T16322] ? trace_irq_disable+0x3b/0x140 [ 1396.235652][T16322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.235681][T16322] ? clear_bhb_loop+0x70/0xc0 [ 1396.235705][T16322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.235724][T16322] RIP: 0033:0x7f7cc95ce159 [ 1396.235743][T16322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.235761][T16322] RSP: 002b:00007f7cc7826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1396.235783][T16322] RAX: ffffffffffffffda RBX: 00007f7cc9855fa0 RCX: 00007f7cc95ce159 [ 1396.235797][T16322] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 1396.235810][T16322] RBP: 00007f7cc7826090 R08: 0000000000000000 R09: 0000000000000000 [ 1396.235822][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1396.235834][T16322] R13: 00007f7cc9856038 R14: 00007f7cc9855fa0 R15: 00007ffe408d68f8 [ 1396.235865][T16322] [ 1396.529150][ T5719] kernel read not supported for file /i2c-0 (pid: 5719 comm: kworker/1:4) [ 1397.901299][T14627] hsr_slave_0: left promiscuous mode [ 1397.932593][T14627] hsr_slave_1: left promiscuous mode [ 1397.934105][T14627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.979411][T14627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.313399][T14627] hsr_slave_0: left promiscuous mode [ 1398.351452][T14627] hsr_slave_1: left promiscuous mode [ 1398.352421][T14627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.371299][T14627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.465668][T14627] hsr_slave_0: left promiscuous mode [ 1398.484769][T14627] hsr_slave_1: left promiscuous mode [ 1398.486234][T14627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.514462][T14627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.841719][T14627] team0 (unregistering): Port device team_slave_1 removed [ 1398.866363][T14627] team0 (unregistering): Port device team_slave_0 removed [ 1399.256979][T14627] team0 (unregistering): Port device team_slave_1 removed [ 1399.305752][T14627] team0 (unregistering): Port device team_slave_0 removed [ 1399.694922][T14627] team0 (unregistering): Port device team_slave_1 removed [ 1399.723616][T14627] team0 (unregistering): Port device team_slave_0 removed [ 1400.426857][T16341] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2043'. [ 1401.279345][T15903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.102193][T15903] veth0_vlan: entered promiscuous mode [ 1402.199428][T15903] veth1_vlan: entered promiscuous mode [ 1402.270598][T15903] veth0_macvtap: entered promiscuous mode [ 1402.285301][T15903] veth1_macvtap: entered promiscuous mode [ 1402.332352][T15903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.355881][T15903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1404.306804][T14634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.323944][T14634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.368794][T14630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.932939][T11778] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1404.933845][T11778] dvb_usb_dibusb_mb 3-1:255.126: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1405.074958][T11778] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1405.075233][T11778] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1405.075546][T11778] dvb_usb_dibusb_mb 3-1:255.43: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1405.141673][ T6053] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1405.166716][ T6053] dvb_usb_dibusb_mb 8-1:255.126: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1405.194220][ T6053] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1405.205641][T11778] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in cold state, will try to load a firmware [ 1405.210326][T11778] usb 3-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 1405.210354][T11778] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 1405.445517][T16376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2046'. [ 1405.563428][ T7263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.563503][ T7263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.658893][T14634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.669614][T14636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.697948][T14630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.166662][T16382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2047'. [ 1407.977597][T16401] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2050'. [ 1409.771665][T16044] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1409.986150][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1409.995149][T16044] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1410.156068][ T37] kauditd_printk_skb: 200 callbacks suppressed [ 1410.156171][ T37] audit: type=1107 audit(1788684305.450:8591): pid=16427 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1410.337589][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1410.508992][T16428] batman_adv: batadv0: Adding interface: gretap1 [ 1410.521288][T16428] batman_adv: batadv0: The MTU of interface gretap1 is too small (1410) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.521332][T16428] batman_adv: batadv0: Interface activated: gretap1 [ 1410.591653][T16044] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1410.763360][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1410.799568][T16044] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1410.908123][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1410.911647][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 1410.911681][T16432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2055'. [ 1412.903781][T16092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1412.964848][T16092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1412.969527][T16092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1413.035002][T16092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1413.043065][T16092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1413.183323][T16092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1413.224386][T16092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1413.363975][T16092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1413.585419][T16044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.748493][T16044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.861058][T14637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.861277][T14637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.932727][T14637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.935521][T14637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.965075][T16482] VFS: file-max limit 0 reached [ 1414.097874][ T5699] kernel read not supported for file /i2c-0 (pid: 5699 comm: kworker/0:4) [ 1415.617516][T16092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.690769][T16089] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1415.728515][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1415.741669][T16089] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1415.793980][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1415.807277][T16092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.807697][T16089] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1415.897591][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1415.929748][T16089] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1415.970223][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1415.986950][T14626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.987202][T14626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.090563][T14626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.091985][T14626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.579618][T16517] FAULT_INJECTION: forcing a failure. [ 1416.579618][T16517] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.602331][T16517] CPU: 1 UID: 0 PID: 16517 Comm: syz.1.2070 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1416.602363][T16517] Tainted: [L]=SOFTLOCKUP [ 1416.602369][T16517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1416.602380][T16517] Call Trace: [ 1416.602388][T16517] [ 1416.602397][T16517] dump_stack_lvl+0xe8/0x150 [ 1416.602429][T16517] should_fail_ex+0x46b/0x600 [ 1416.602453][T16517] should_failslab+0xa8/0x100 [ 1416.602479][T16517] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1416.602500][T16517] ? __alloc_skb+0x1db/0x7a0 [ 1416.602521][T16517] ? __alloc_skb+0x1db/0x7a0 [ 1416.602546][T16517] __alloc_skb+0x1db/0x7a0 [ 1416.602569][T16517] x25_write_internal+0x1c0/0xe60 [ 1416.602600][T16517] ? __pfx_x25_write_internal+0x10/0x10 [ 1416.602625][T16517] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1416.602648][T16517] ? lockdep_hardirqs_on+0x7b/0x110 [ 1416.602668][T16517] ? x25_find_socket+0x1f/0x1c0 [ 1416.602689][T16517] ? x25_connect+0x4c2/0x920 [ 1416.602711][T16517] x25_connect+0x521/0x920 [ 1416.602736][T16517] __sys_connect+0x32d/0x470 [ 1416.602761][T16517] ? __pfx___sys_connect+0x10/0x10 [ 1416.602791][T16517] ? __pfx_ksys_write+0x10/0x10 [ 1416.602816][T16517] __x64_sys_connect+0x7a/0x90 [ 1416.602838][T16517] do_syscall_64+0x166/0x520 [ 1416.602856][T16517] ? trace_irq_disable+0x3b/0x140 [ 1416.602876][T16517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.602893][T16517] ? clear_bhb_loop+0x70/0xc0 [ 1416.602921][T16517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.602938][T16517] RIP: 0033:0x7f88b2f5e159 [ 1416.602956][T16517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.602970][T16517] RSP: 002b:00007f88b11b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1416.602990][T16517] RAX: ffffffffffffffda RBX: 00007f88b31e5fa0 RCX: 00007f88b2f5e159 [ 1416.603002][T16517] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000004 [ 1416.603013][T16517] RBP: 00007f88b11b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.603028][T16517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.603039][T16517] R13: 00007f88b31e6038 R14: 00007f88b31e5fa0 R15: 00007ffe024e43c8 [ 1416.603066][T16517] [ 1417.093090][T16089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.128172][T16044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.155112][T16089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.186255][T14627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.194293][T14627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.238442][T14627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.248486][T14627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.658105][T16092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.954532][T16044] veth0_vlan: entered promiscuous mode [ 1419.072310][T16044] veth1_vlan: entered promiscuous mode [ 1419.712220][T16044] veth0_macvtap: entered promiscuous mode [ 1419.754008][T16044] veth1_macvtap: entered promiscuous mode [ 1419.906032][T16044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.937611][T16044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.015256][T14627] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.015387][T14627] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.015424][T14627] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.015458][T14627] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.020696][T16089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.265882][T16092] veth0_vlan: entered promiscuous mode [ 1421.398507][T16092] veth1_vlan: entered promiscuous mode [ 1421.892013][T16092] veth0_macvtap: entered promiscuous mode [ 1422.019949][T16092] veth1_macvtap: entered promiscuous mode [ 1423.795477][T16092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.904414][T13889] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1424.004424][T13889] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1424.020445][T13889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1424.038328][T13889] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1424.044836][T13889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1424.172111][T16092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.468552][T14626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.469130][T14626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.469577][T14626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.470096][T14626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.450020][ T5600] Bluetooth: hci6: command tx timeout [ 1427.233667][T13889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1427.313122][T13889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1427.340998][T13889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1427.349060][T13889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1427.391544][T13889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1428.082077][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1428.178843][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1428.196086][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1428.229744][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1428.281417][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1428.421849][ T5600] Bluetooth: hci6: command tx timeout [ 1429.802167][T13889] Bluetooth: hci2: command tx timeout [ 1430.325612][ T1120] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.412229][T13889] Bluetooth: hci6: command tx timeout [ 1430.641354][T13889] Bluetooth: hci3: command tx timeout [ 1431.133162][T16627] netlink: zone id is out of range [ 1431.133524][T16627] netlink: zone id is out of range [ 1431.134057][T16627] netlink: zone id is out of range [ 1431.136984][T16627] netlink: zone id is out of range [ 1431.137581][T16627] netlink: zone id is out of range [ 1431.137892][T16627] netlink: zone id is out of range [ 1431.137950][T16627] netlink: zone id is out of range [ 1431.144478][T16627] netlink: zone id is out of range [ 1431.144652][T16627] netlink: zone id is out of range [ 1431.162297][T16627] netlink: zone id is out of range [ 1431.648374][ T1120] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.850752][T13889] Bluetooth: hci2: command tx timeout [ 1432.306993][T16654] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 1432.306993][T16654] program syz.2.2092 not setting count and/or reply_len properly [ 1432.383164][T13889] Bluetooth: hci6: command tx timeout [ 1432.587988][ T1120] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.611817][T13889] Bluetooth: hci3: command tx timeout [ 1433.004926][T16662] ip6_vti0: left promiscuous mode [ 1433.006587][T16662] sit0: left promiscuous mode [ 1433.200933][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.201607][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.836572][T13889] Bluetooth: hci2: command tx timeout [ 1434.092369][T16662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1434.112736][T16662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1434.594427][T13889] Bluetooth: hci3: command tx timeout [ 1435.821503][T13889] Bluetooth: hci2: command tx timeout [ 1436.576751][T13889] Bluetooth: hci3: command tx timeout [ 1436.794845][T16662] geneve2: left promiscuous mode [ 1436.799859][T16662] batman_adv: batadv0: Interface deactivated: gretap1 [ 1437.844544][ T1120] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.776128][T16722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.035966][T16722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.289512][T16722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.408745][T16722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.640386][T16731] mmap: syz.2.2109 (16731): VmData 37593088 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 1443.373387][T16741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.374209][T16741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.708741][T16768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.723729][T16768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.804856][T16583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.805078][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.805296][T16583] bridge_slave_0: entered allmulticast mode [ 1444.824995][T16583] bridge_slave_0: entered promiscuous mode [ 1444.922662][T16583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.923106][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.923728][T16583] bridge_slave_1: entered allmulticast mode [ 1444.934514][T16583] bridge_slave_1: entered promiscuous mode [ 1445.397538][T16780] kernel read not supported for file / 7âW)s!Qfsr)rO2:"T+͟v|ղDvc֠6xc: (pid: 16780 comm: syz.2.2115) [ 1445.422013][ T37] audit: type=1800 audit(1788684342.469:8592): pid=16780 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2115" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=70549 res=0 errno=0 [ 1445.755179][T16583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.872994][T16583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.311068][T16801] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 1446.311068][T16801] program syz.1.2118 not setting count and/or reply_len properly [ 1446.703273][ T1120] bridge_slave_1: left allmulticast mode [ 1446.703383][ T1120] bridge_slave_1: left promiscuous mode [ 1446.703664][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.814668][ T1120] bridge_slave_0: left allmulticast mode [ 1446.814756][ T1120] bridge_slave_0: left promiscuous mode [ 1446.815063][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.711271][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.766302][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.806109][ T1120] bond0 (unregistering): Released all slaves [ 1447.851976][T16601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.852157][T16601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.852390][T16601] bridge_slave_0: entered allmulticast mode [ 1447.855191][T16601] bridge_slave_0: entered promiscuous mode [ 1447.879337][T16808] kthread_run failed with err -4 [ 1448.044244][T16595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.045273][T16595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.045501][T16595] bridge_slave_0: entered allmulticast mode [ 1448.069718][T16595] bridge_slave_0: entered promiscuous mode [ 1448.139566][T16583] team0: Port device team_slave_0 added [ 1448.398350][T16601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.405851][T16601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.406103][T16601] bridge_slave_1: entered allmulticast mode [ 1448.418570][T16601] bridge_slave_1: entered promiscuous mode [ 1448.433723][T16595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.445727][T16595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.445987][T16595] bridge_slave_1: entered allmulticast mode [ 1448.464481][T16595] bridge_slave_1: entered promiscuous mode [ 1448.496199][T16583] team0: Port device team_slave_1 added [ 1448.536751][T16825] FAULT_INJECTION: forcing a failure. [ 1448.536751][T16825] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.536787][T16825] CPU: 0 UID: 0 PID: 16825 Comm: syz.1.2123 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1448.536816][T16825] Tainted: [L]=SOFTLOCKUP [ 1448.536823][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1448.536833][T16825] Call Trace: [ 1448.536842][T16825] [ 1448.536850][T16825] dump_stack_lvl+0xe8/0x150 [ 1448.536882][T16825] should_fail_ex+0x46b/0x600 [ 1448.536908][T16825] should_failslab+0xa8/0x100 [ 1448.536932][T16825] ? do_getname+0x2e/0x250 [ 1448.536957][T16825] kmem_cache_alloc_noprof+0x9e/0x690 [ 1448.536979][T16825] ? do_getname+0x2e/0x250 [ 1448.537008][T16825] do_getname+0x2e/0x250 [ 1448.537030][T16825] ? getname_flags+0x11/0x20 [ 1448.537055][T16825] path_setxattrat+0x351/0x450 [ 1448.537088][T16825] ? __pfx_path_setxattrat+0x10/0x10 [ 1448.537136][T16825] ? ksys_write+0x248/0x270 [ 1448.537158][T16825] ? __pfx_ksys_write+0x10/0x10 [ 1448.537183][T16825] __x64_sys_lsetxattr+0xbf/0xe0 [ 1448.537207][T16825] do_syscall_64+0x166/0x520 [ 1448.537227][T16825] ? trace_irq_disable+0x3b/0x140 [ 1448.537248][T16825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.537266][T16825] ? clear_bhb_loop+0x70/0xc0 [ 1448.537287][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.537304][T16825] RIP: 0033:0x7f88b2f5e159 [ 1448.537322][T16825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.537338][T16825] RSP: 002b:00007f88b11b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1448.537359][T16825] RAX: ffffffffffffffda RBX: 00007f88b31e5fa0 RCX: 00007f88b2f5e159 [ 1448.537372][T16825] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000040 [ 1448.537384][T16825] RBP: 00007f88b11b6090 R08: 0000000000000001 R09: 0000000000000000 [ 1448.537395][T16825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.537405][T16825] R13: 00007f88b31e6038 R14: 00007f88b31e5fa0 R15: 00007ffe024e43c8 [ 1448.537434][T16825] [ 1449.054647][T16829] input: syz0 as /devices/virtual/input/input40 [ 1449.232243][ T1120] hsr_slave_0: left promiscuous mode [ 1449.251490][ T1120] hsr_slave_1: left promiscuous mode [ 1449.259225][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1449.259301][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.313402][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1449.315232][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.385192][ T38] INFO: task syz.7.1942:15584 blocked for more than 143 sec ** replaying previous printk message ** [ 1449.385192][ T38] INFO: task syz.7.1942:15584 blocked for more than 143 seconds. [ 1449.385258][ T38] Tainted: G L syzkaller #0 [ 1449.385273][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1449.385283][ T38] task:syz.7.1942 state:D stack:27448 pid:15584 tgid:15580 ppid:11701 task_flags:0x400140 flags:0x00080002 [ 1449.385339][ T38] Call Trace: [ 1449.385347][ T38] [ 1449.385360][ T38] __schedule+0x16d9/0x5700 [ 1449.385419][ T38] ? __pfx___schedule+0x10/0x10 [ 1449.385455][ T38] rt_mutex_schedule+0x76/0xf0 [ 1449.385480][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1449.385517][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1449.385547][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1449.385576][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1449.385604][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1449.385649][ T38] ? usbdev_open+0x151/0x790 [ 1449.385774][ T38] ? usbdev_open+0x151/0x790 [ 1449.385791][ T38] mutex_lock_nested+0x168/0x1d0 [ 1449.385823][ T38] usbdev_open+0x151/0x790 [ 1449.385849][ T38] ? __pfx_usbdev_open+0x10/0x10 [ 1449.385866][ T38] ? rt_spin_unlock+0x159/0x200 [ 1449.385897][ T38] ? rt_spin_unlock+0x165/0x200 [ 1449.385927][ T38] chrdev_open+0x4dc/0x600 [ 1449.385956][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 1449.385982][ T38] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1449.386014][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 1449.386037][ T38] do_dentry_open+0x849/0x1420 [ 1449.386075][ T38] vfs_open+0x3b/0x350 [ 1449.386187][ T38] ? path_openat+0x142d/0x1d60 [ 1449.386215][ T38] path_openat+0x1448/0x1d60 [ 1449.386258][ T38] do_file_open+0x23e/0x4a0 [ 1449.386286][ T38] ? __pfx_do_file_open+0x10/0x10 [ 1449.386334][ T38] ? alloc_fd+0x654/0x6d0 [ 1449.386373][ T38] do_sys_openat2+0x115/0x200 [ 1449.386398][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1449.386423][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1449.386464][ T38] __x64_sys_openat+0x138/0x170 [ 1449.386496][ T38] do_syscall_64+0x166/0x520 [ 1449.386517][ T38] ? trace_irq_disable+0x3b/0x140 [ 1449.386540][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.386559][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1449.386608][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.386627][ T38] RIP: 0033:0x7f4b5453e98e [ 1449.386646][ T38] RSP: 002b:00007f4b527b4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1449.386668][ T38] RAX: ffffffffffffffda RBX: 00007f4b527b56c0 RCX: 00007f4b5453e98e [ 1449.386682][ T38] RDX: 0000000000020182 RSI: 00007f4b527b4c00 RDI: ffffffffffffff9c [ 1449.386697][ T38] RBP: 00007f4b527b4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1449.386718][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1449.386732][ T38] R13: 00007f4b54806128 R14: 00007f4b54806090 R15: 00007fff8df30128 [ 1449.386764][ T38] [ 1449.386821][ T38] [ 1449.386821][ T38] Showing all locks held in the system: [ 1449.386870][ T38] locks held by pr/ttyS0/17: 3, last CPU#0: [ 1449.386907][ T38] #0: ffffffff8e09d578 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1449.387089][ T38] #1: ffffffff99e991f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 1449.387143][ T38] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1449.387198][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 1449.387213][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1449.387273][ T38] locks held by kworker/u8:8/1110: 3, on CPU#1: [ 1449.387286][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.387338][ T38] #1: ffffc9000627fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.387388][ T38] #2: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1449.387470][ T38] locks held by kworker/u8:9/1120: 8, last CPU#1: [ 1449.387483][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.387534][ T38] #1: ffffc9000626fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.387584][ T38] #2: ffffffff8f5c3380 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1449.387656][ T38] #3: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760 [ 1449.387731][ T38] #4: ffff88803bb11060 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2130 [ 1449.387784][ T38] #5: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1449.387834][ T38] #6: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1449.387884][ T38] #7: ffff8880639812f0 (&net->ipv6.addrconf_hash_lock){+...}-{3:3}, at: addrconf_ifdown+0x3b7/0x1a00 [ 1449.387972][ T38] locks held by acpid/4939: 2, on CPU#1: [ 1449.388077][ T38] #0: ffff888035716148 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x6fb/0x7f0 [ 1449.388153][ T38] #1: ffff88803b3242f0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x4c/0x290 [ 1449.388214][ T38] locks held by dhcpcd/5249: 2, on CPU#0: [ 1449.388227][ T38] #0: ffff888029f1a928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 1449.388301][ T38] #1: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 1449.388352][ T38] locks held by getty/5344: 2, on CPU#1: [ 1449.388365][ T38] #0: ffff888032fd00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1449.388438][ T38] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1449.388494][ T38] locks held by kworker/0:7/6053: 5, on CPU#0: [ 1449.388508][ T38] #0: ffff8880216bf138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.388560][ T38] #1: ffffc90006ef7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.388634][ T38] #2: ffff88802a476210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1449.388743][ T38] #3: ffff8880259ba210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1449.388830][ T38] #4: ffff8880650b61d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1449.388885][ T38] locks held by kworker/1:1/11778: 6, on CPU#1: [ 1449.388899][ T38] #0: ffff8880216bf138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.389037][ T38] #1: ffffc90004da7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.389089][ T38] #2: ffff88802a15e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1449.389139][ T38] #3: ffff88803ff40210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1449.389189][ T38] #4: ffff888061c4e1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1449.389239][ T38] #5: ffffffff8e060a40 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1449.389291][ T38] locks held by udevd/12642: 4, on CPU#0: [ 1449.389310][ T38] #0: ffff888041083a68 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 1449.389362][ T38] #1: ffff888025371078 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1449.389421][ T38] #2: ffff88802ae533c8 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1449.389478][ T38] #3: ffff8880259ba210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1449.389549][ T38] locks held by udevd/12847: 4, on CPU#1: [ 1449.389563][ T38] #0: ffff88805aedc090 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 1449.389612][ T38] #1: ffff88803be6d878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1449.389669][ T38] #2: ffff8880606d71e8 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1449.389733][ T38] #3: ffff88803ff40210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1449.389783][ T38] locks held by kworker/u8:23/14629: 2, on CPU#1: [ 1449.389797][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.389849][ T38] #1: ffffc90004c97c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.389987][ T38] locks held by syz.7.1942/15584: 1, on CPU#0: [ 1449.390058][ T38] #0: ffff88802a476210 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x790 [ 1449.390111][ T38] locks held by syz-executor/16583: 1, on CPU#0: [ 1449.390124][ T38] #0: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1449.390174][ T38] locks held by syz-executor/16595: 1, on CPU#0: [ 1449.390188][ T38] #0: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1449.390271][ T38] locks held by syz-executor/16601: 1, on CPU#1: [ 1449.390285][ T38] #0: ffffffff8f5d1bf8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1449.390333][ T38] locks held by kworker/1:12/16675: 3, last CPU#1: [ 1449.390347][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.390398][ T38] #1: ffffc90005307c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1449.390448][ T38] #2: ffffffff8ed0ccb8 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 1449.390557][ T38] locks held by syz.1.2125/16828: 4, last CPU#0: [ 1449.390571][ T38] #0: ffff888034abbd08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1449.390623][ T38] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1449.390670][ T38] #2: ffff88803aa20c58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1449.390733][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1449.390787][ T38] [ 1449.390792][ T38] ============================================= [ 1449.390792][ T38] [ 1449.390802][ T38] NMI backtrace for cpu 1 [ 1449.390819][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1449.390847][ T38] Tainted: [L]=SOFTLOCKUP [ 1449.390854][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1449.390865][ T38] Call Trace: [ 1449.390875][ T38] [ 1449.390883][ T38] dump_stack_lvl+0xe8/0x150 [ 1449.390911][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1449.390939][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1449.390969][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1449.390999][ T38] sys_info+0x135/0x170 [ 1449.391022][ T38] watchdog+0xfd7/0x1030 [ 1449.391053][ T38] ? watchdog+0x1c7/0x1030 [ 1449.391081][ T38] kthread+0x38b/0x470 [ 1449.391102][ T38] ? __pfx_watchdog+0x10/0x10 [ 1449.391122][ T38] ? __pfx_kthread+0x10/0x10 [ 1449.391142][ T38] ret_from_fork+0x514/0xb70 [ 1449.391165][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1449.391184][ T38] ? __switch_to+0xc89/0x1420 [ 1449.391211][ T38] ? __pfx_kthread+0x10/0x10 [ 1449.391231][ T38] ret_from_fork_asm+0x1a/0x30 [ 1449.391264][ T38] [ 1449.391288][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1449.391316][ C0] NMI backtrace for cpu 0 [ 1449.391335][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1449.391358][ C0] Tainted: [L]=SOFTLOCKUP [ 1449.391365][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1449.391375][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 1449.391429][ C0] Code: b0 65 fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5c 6d d1 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 57 ef f8 05 cc 44 89 f9 80 e1 07 38 c1 [ 1449.391443][ C0] RSP: 0000:ffffc90000167900 EFLAGS: 00000202 [ 1449.391459][ C0] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000 [ 1449.391471][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1449.391482][ C0] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000 [ 1449.391493][ C0] R10: dffffc0000000000 R11: ffffffff8560c900 R12: dffffc0000000000 [ 1449.391505][ C0] R13: 0000000000000020 R14: ffffffff99e99220 R15: 0000000000000000 [ 1449.391516][ C0] FS: 0000000000000000(0000) GS:ffff888125bd4000(0000) knlGS:0000000000000000 [ 1449.391531][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1449.391544][ C0] CR2: 00007f88b1174d58 CR3: 00000000373c6000 CR4: 00000000003526f0 [ 1449.391560][ C0] Call Trace: [ 1449.391568][ C0] [ 1449.391576][ C0] __serial8250_console_fifo_write+0x1ec/0x3f0 [ 1449.391603][ C0] serial8250_console_write+0xac5/0x1230 [ 1449.391626][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1449.391651][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1449.391680][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1449.391704][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1449.391734][ C0] nbcon_kthread_func+0x679/0x880 [ 1449.391758][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1449.391778][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1449.391801][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1449.391835][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1449.391860][ C0] kthread+0x38b/0x470 [ 1449.391876][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1449.391895][ C0] ? __pfx_kthread+0x10/0x10 [ 1449.391912][ C0] ret_from_fork+0x514/0xb70 [ 1449.391930][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1449.391946][ C0] ? __switch_to+0xc89/0x1420 [ 1449.391969][ C0] ? __pfx_kthread+0x10/0x10 [ 1449.391985][ C0] ret_from_fork_asm+0x1a/0x30 [ 1449.392008][ C0] [ 1449.392437][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1450.720712][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1450.732184][ T38] Tainted: [L]=SOFTLOCKUP [ 1450.736769][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1450.747285][ T38] Call Trace: [ 1450.751008][ T38] [ 1450.754064][ T38] vpanic+0x56d/0xa60 [ 1450.758144][ T38] ? __pfx___schedule+0x10/0x10 [ 1450.763522][ T38] ? __pfx_vpanic+0x10/0x10 [ 1450.768111][ T38] panic+0xc5/0xd0 [ 1450.771850][ T38] ? __pfx_panic+0x10/0x10 [ 1450.776354][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1450.782006][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1450.787399][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1450.793570][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1450.800059][ T38] watchdog+0x1030/0x1030 [ 1450.804410][ T38] ? watchdog+0x1c7/0x1030 [ 1450.808943][ T38] kthread+0x38b/0x470 [ 1450.813205][ T38] ? __pfx_watchdog+0x10/0x10 [ 1450.818081][ T38] ? __pfx_kthread+0x10/0x10 [ 1450.822960][ T38] ret_from_fork+0x514/0xb70 [ 1450.828002][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1450.833546][ T38] ? __switch_to+0xc89/0x1420 [ 1450.838436][ T38] ? __pfx_kthread+0x10/0x10 [ 1450.843149][ T38] ret_from_fork_asm+0x1a/0x30 [ 1450.848152][ T38] [ 1450.851445][ T38] Kernel Offset: disabled [ 1450.856112][ T38] Rebooting in 86400 seconds..