last executing test programs: 13m25.675674939s ago: executing program 0 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) 13m23.778293675s ago: executing program 0 (id=84): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="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", 0x66b}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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", 0x14a}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 13m21.335738285s ago: executing program 32 (id=63): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') readv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 13m15.617738124s ago: executing program 0 (id=97): syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) read(r1, 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0xaf9f, 0x6, 0x1, 0x0, 0x53, "d9d3ddcc07cde276d624b939703976368e9ede", 0x1, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500"], 0xbc}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000000805000000000000000000030000090900010073797a3100000000060002400011000014000480080805400000000508000640000000000500030006000000f1cde77eb26308006fb72510d1dfa4a433f063acdfd57863f37f3020e4eee5018e3ad1d7afd8bea9bb25d0eb145186ec961d57ec10688f37511c102214112d2c692b4244a76e52f66501c78799cf2cdde372bbe68c23f76b25f85aabe50b18b5684f4cf95664fbfdf2f2073cece1b039b77c7f55a079d8d2853142368ab2e81369be75d58bdbcf39096e1aaad09249bee2ead7aceae861c9be3fa9377ed862b46b983a343d1068d691116be935c7671125b9bead9975479b0173bfe651d9f6e2fdbc40e205f0503a6538e2663f784a0693712e2b31c8cbeb553a847a487fe0fbfc82"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000001f80)=""/52, 0x34}, 0xc0000}], 0x1, 0x40012110, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) 13m10.567357597s ago: executing program 0 (id=100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0xc7, 0x2000) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) 13m8.519340587s ago: executing program 0 (id=104): socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x890b, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000000580)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000019580)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019600)='./sys\x00', &(0x7f0000019640)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r5, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000019800)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000019880)={'batadv_slave_0\x00', {0x2, 0x0, @loopback}}) bind$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000300)=0x33, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) 13m6.218776432s ago: executing program 1 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ef) mkdirat(r1, &(0x7f0000000240)='./file2\x00', 0x120) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000540)=ANY=[], 0x12) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xae4d2f8ed3bfc611) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd) 13m5.584511308s ago: executing program 1 (id=109): fsopen(&(0x7f0000000180)='pvfs2\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x29a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13m5.262862166s ago: executing program 1 (id=111): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r0, 0x40087446, &(0x7f00000007c0)={0x0, 0x0}) 13m1.834749859s ago: executing program 1 (id=112): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x7, 0x50000}]}) writev(0xffffffffffffffff, 0x0, 0x0) 13m1.39836536s ago: executing program 1 (id=113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0xc7, 0x2000) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) 12m58.996796818s ago: executing program 0 (id=114): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'pcl812\x00', [0x100, 0x4, 0x302, 0xd, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1000006c, 0x7, 0x8, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x1000000, 0x268, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffffc]}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi3\x00', 0x40400, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$char_usb(r2, &(0x7f0000000280)='-0', 0x2) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000540)={0x4000000, 0x28, 0x0, 0x0, 0x2}) 12m58.548881079s ago: executing program 1 (id=117): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="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", 0x66b}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e", 0x14a}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 12m43.504474845s ago: executing program 33 (id=114): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'pcl812\x00', [0x100, 0x4, 0x302, 0xd, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1000006c, 0x7, 0x8, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x1000000, 0x268, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffffc]}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi3\x00', 0x40400, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$char_usb(r2, &(0x7f0000000280)='-0', 0x2) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000540)={0x4000000, 0x28, 0x0, 0x0, 0x2}) 12m43.266246031s ago: executing program 34 (id=117): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="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", 0x66b}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e", 0x14a}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 12m11.183361502s ago: executing program 2 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m9.321952397s ago: executing program 2 (id=168): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 12m6.554674505s ago: executing program 2 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x103, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff73", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268e9", 0x6}], 0x2}, 0x40) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) 12m5.046999892s ago: executing program 2 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801000000"], 0x128}, 0x4004000) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, &(0x7f0000000280)=r5}, 0x20) 12m3.810351771s ago: executing program 2 (id=174): socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x890b, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000000580)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000019580)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019600)='./sys\x00', &(0x7f0000019640)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r5, &(0x7f00000196c0)=""/265, 0x109) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000019800)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, 0x0) bind$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000300)=0x33, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) 12m2.478256904s ago: executing program 2 (id=176): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0xb, &(0x7f0000000280)={0x8, 0x0, 0x4}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r3, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) r4 = epoll_create1(0x80000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r6, 0x6242}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x10000018}) 11m46.826019555s ago: executing program 35 (id=176): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0xb, &(0x7f0000000280)={0x8, 0x0, 0x4}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r3, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) r4 = epoll_create1(0x80000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r6, 0x6242}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x10000018}) 7m48.582212634s ago: executing program 6 (id=496): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0xb, &(0x7f0000000280)={0x8, 0x0, 0x4}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r3, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) r4 = epoll_create1(0x80000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r6, 0x6242}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000040)={0x10000018}) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u8=&(0x7f0000000140)}}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000240), 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) 7m44.872241845s ago: executing program 6 (id=506): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r0) ioctl$TIOCMBIC(r2, 0x5417, 0x0) 7m42.434296394s ago: executing program 6 (id=514): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 7m40.145926129s ago: executing program 6 (id=521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x400, @empty}}, 0x3, 0x0, 0x800, 0x0, 0x32, 0x81}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{0x0}], 0x1, 0x40, 0x101) close_range(r1, 0xffffffffffffffff, 0x0) 7m37.286734329s ago: executing program 6 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r4, 0x0, 0x0, 0x6, 0x3) 7m35.571406071s ago: executing program 6 (id=532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x99fd, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) 7m20.102556947s ago: executing program 36 (id=532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x99fd, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) 4m22.733385235s ago: executing program 9 (id=803): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='hpfs\x00', 0x20920d1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) r4 = open(&(0x7f0000000000)='./file0\x00', 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x50, 0x3, 0x8, @private0, @private0, 0x7800, 0x20, 0x7bed, 0x588}}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000840)) r5 = socket$inet(0x2, 0x2, 0x1) socket(0xb, 0x800, 0x0) sendmsg$inet(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000200)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000300000007000000830b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0xee00) 4m20.508079379s ago: executing program 9 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) flock(0xffffffffffffffff, 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 4m16.818220509s ago: executing program 9 (id=818): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m13.758213363s ago: executing program 9 (id=824): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000041000f01fefeffff00000000017c0000040042801400018006000600800a00", @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x316}}, './file0\x00'}) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000300)={@private1}, &(0x7f0000000540)=0x14) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f00000000c0)='./file0\x00', 0x3a7) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setresuid(0x0, 0xee01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r6, 0x402, 0xfb0fca2daa2f4273) 4m11.602259116s ago: executing program 9 (id=825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) 4m11.197166566s ago: executing program 9 (id=829): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x1, 0x44, 0x48, 0xcf, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x2}}]}}]}}]}}, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) syz_usb_control_io$uac2(r0, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m55.318568102s ago: executing program 37 (id=829): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x1, 0x44, 0x48, 0xcf, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x2}}]}}]}}]}}, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) syz_usb_control_io$uac2(r0, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m29.236008068s ago: executing program 7 (id=1002): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) 2m17.930532863s ago: executing program 7 (id=1019): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) writev(r1, &(0x7f0000000040)=[{}, {&(0x7f0000000140)="e82ce69ab868c5", 0x7}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x18, 0x7, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) lseek(r3, 0x1, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, 0x0) 2m15.466204692s ago: executing program 7 (id=1020): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='hpfs\x00', 0x20920d1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) r4 = open(&(0x7f0000000000)='./file0\x00', 0x282080, 0x8e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x50, 0x3, 0x8, @private0, @private0, 0x7800, 0x20, 0x7bed, 0x588}}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000840)) r5 = socket$inet(0x2, 0x2, 0x1) socket(0xb, 0x800, 0x0) sendmsg$inet(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000200)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000300000007000000830b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0xee00) 2m14.058596537s ago: executing program 7 (id=1023): request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='Ri\x00'/18, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(r1, 0xa, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='virtiofs\x00', 0x2200892, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r2, &(0x7f00000003c0), 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)=@ethtool_eee={0x44, 0x7, 0x4, 0x6, 0x9, 0x2, 0x7ff, 0x2400000, [0xc307, 0x8]}}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, 0x0, 0x4880) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0x4, [0xa8, 0x0, 0x5, 0x9, 0x6e45, 0x4, 0x4, 0x3, 0xf800, 0x8000, 0xfe01, 0x401, 0x817e, 0x4, 0x68d, 0xd1d, 0x9, 0x1ff, 0x8, 0x9, 0x0, 0x2454, 0x2d64, 0x81, 0x3, 0xfff7, 0x8ba7, 0x6, 0x5, 0x3, 0xed3d, 0xa, 0x5, 0x4, 0xff, 0x5, 0x9, 0xf, 0x7, 0x0, 0x8, 0x2dc2, 0x0, 0x0, 0xa6, 0xb4, 0x1ff, 0x40], 0xc}}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='pim6reg0\x00', 0x3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r5, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 2m9.345706862s ago: executing program 7 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0xfffffffffffffd77, &(0x7f0000000200)=0x3fefff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x8000004) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x3, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000ac1414aa00000000ac6a1d3a00000000000000000000000000000000000003000000000006000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xcc}}, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000040)={0x4, "ad4da8f7b0a03317a91aaa55ea8c98b0f0e0a96025e5b557ebecbcbb6ac257f8", 0x3, 0x4, 0x3, 0x8, 0x4, 0x0, 0x101, 0x9}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000003c0)=@x86={0x6b, 0x4, 0xc, 0x0, 0x10000000, 0x7f, 0x3, 0xa, 0xd, 0xa0, 0x8, 0x8, 0x0, 0x2, 0x9, 0x43, 0x3, 0x2, 0x7, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x2, 0xfffffffffffffffc, 0x7, 0x6, 0x6, 0x100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) 2m7.902751677s ago: executing program 7 (id=1031): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, 0x0, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f00001f1000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40088c0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000003c0)={0x0, 0x0, {0xffffffffffffffff}}) dup3(r3, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000700)=0x31) 1m51.921020186s ago: executing program 38 (id=1031): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, 0x0, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f00001f1000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40088c0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000003c0)={0x0, 0x0, {0xffffffffffffffff}}) dup3(r3, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000700)=0x31) 1m29.206218849s ago: executing program 8 (id=1079): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x99fd, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r8, &(0x7f0000000a00)}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x0, 0x8, 0x1000}], 0x3) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m26.429034656s ago: executing program 8 (id=1081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) flock(0xffffffffffffffff, 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 1m15.169050431s ago: executing program 8 (id=1090): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x99fd, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r8, &(0x7f0000000a00)}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x0, 0x8, 0x1000}], 0x3) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m8.099193142s ago: executing program 8 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090325bd7000fcdbdf25080000000800", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 1m4.569613329s ago: executing program 8 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0xfffffffffffffd77, &(0x7f0000000200)=0x3fefff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x8000004) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x3, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000ac1414aa00000000ac6a1d3a00000000000000000000000000000000000003000000000006000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xcc}}, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000040)={0x4, "ad4da8f7b0a03317a91aaa55ea8c98b0f0e0a96025e5b557ebecbcbb6ac257f8", 0x3, 0x4, 0x3, 0x8, 0x4, 0x0, 0x101, 0x9}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000003c0)=@x86={0x6b, 0x4, 0xc, 0x0, 0x10000000, 0x7f, 0x3, 0xa, 0xd, 0xa0, 0x8, 0x8, 0x0, 0x2, 0x9, 0x43, 0x3, 0x2, 0x7, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x2, 0xfffffffffffffffc, 0x7, 0x6, 0x6, 0x100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40}) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="8d36a2d20e6973f3", 0x8, 0x4000000, 0x0, 0x0) 1m2.8610395s ago: executing program 8 (id=1108): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x4c040) 47.640897021s ago: executing program 39 (id=1108): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x4c040) 20.916934391s ago: executing program 5 (id=1153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x99fd, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r8, &(0x7f0000000a00)}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x0, 0x8, 0x1000}], 0x3) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 19.541159354s ago: executing program 5 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) pipe2(&(0x7f00000000c0), 0x80000) setns(0xc9, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000004000000000000000500"/113], 0x78) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x16) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f00000005c0), &(0x7f0000000580)=""/24}, 0x20) 15.898189703s ago: executing program 4 (id=1157): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x185301, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000fa3000/0x4000)=nil, 0x4000, 0x3b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, 0x0, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_settime(0xfffffffb, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x2008014) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x180000) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x92020007) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x810, 0x0, 0x0) 14.583488165s ago: executing program 3 (id=1159): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c78}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 14.494767127s ago: executing program 4 (id=1160): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) 14.102259097s ago: executing program 3 (id=1161): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r0, 0x40087446, 0x0) 12.813389268s ago: executing program 5 (id=1162): socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r7, &(0x7f0000000a00)}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x0, 0x8, 0x1000}], 0x3) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 11.860511452s ago: executing program 4 (id=1163): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) flock(0xffffffffffffffff, 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 10.737623239s ago: executing program 5 (id=1164): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x40) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={&(0x7f0000000080)="edcc4a4394a43eefcd348d302c216164b26c0d978cfaf8ad0bc3c829e5e37db036c8db94710ad65792fb3a7ea94b4bb77122a43ca40a6778e62bdfe7c8bb9b1d10d5152a4bdee9fad21ed2effb9fffedf4ce6d8a9dbb026774c18bdbf40477481138b927cc502a378521543dd62fd38eddd08afff508cc3ff3acc10242ed5add757332345bd3da5c5f720594eeaf2d2eb84fff86a3381c9f9369e6411896ced8566180", &(0x7f0000000180)=""/54, &(0x7f00000001c0), &(0x7f00000011c0)="aeb3fe4b1744af6b3ed3ec30fee93c87abc11ebb866cc9c28614a439a3d7c351974e7f6ac785a458a519e65d55ced49182c1a75b989a62d25e8fdcb9cdee4d7aaca5f9354e5f639c3eb8e9f015ac95ecc94c6ea543939580d777e50dcd320b81cfbd2ffe022842e04e2d9352187c28193e19140b00bcd59a36453fc8ce5d460e9c16ad9226043a", 0x2, 0x1}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000080000bf0570f3"}, 0x4000c, 0x3}) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x7afd, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbda5, 0x4000, 0x3, 0x2bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r10, r2, 0x80000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x40000811}, 0x0) r11 = openat(0xffffffffffffffff, &(0x7f0000001300)='./file0\x00', 0x200000, 0xc3) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x2, 0x2000000, 0x10, r11, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x5220, 0x0) write$tun(r11, &(0x7f0000001380)={@val={0x0, 0xf7}, @val={0x1, 0x1, 0x9, 0x3, 0x2, 0x8}, @llc={@llc={0x4e, 0x4, "c2", "dc35a3cf7752357582ec85cec9f7e76b5fc5c31b59244cf002f7b009b51f029ea0e7996cd1a03f01b13eb88e4a8317d6f7ec1276c062c9e30d6bf1d208742bc0a896accd1b02de2229ec60eaa0b740ecb3a140cd41cf1dc35217c198d9bd8bcf6c82b104576253d7394d012e2263a32d9f45be758804075000e65e668b38e1dafe6785032fa1b58681c98c4456"}}}, 0x9e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040)) 9.916323429s ago: executing program 3 (id=1165): syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d03000000b85ba123469d944958af20000000000000000105000000200000010e0000"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f0000000600)=[{&(0x7f0000000680)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x30}, {&(0x7f0000000700)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3d5", 0x3d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000ac141429000000001800000000000000845acc00000007000000ac1e01010000000020000000000000008400000008000000fe800000000000000000000000000035"], 0x70, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r4, &(0x7f00000008c0), 0x12) connect$x25(r4, &(0x7f0000000900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) 7.094062017s ago: executing program 3 (id=1166): socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x890b, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000000580)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000019580)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019600)='./sys\x00', &(0x7f0000019640)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r5, &(0x7f00000196c0)=""/265, 0x109) write$eventfd(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000019800)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000300)=0x33, 0x8) listen(r1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000340)={0x28, 0x0, 0x2710}, 0x10) 6.129616721s ago: executing program 3 (id=1167): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000040)) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f00000001c0)) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000140)=0x24) 4.425964562s ago: executing program 5 (id=1168): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @broadcast}, 0x220, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000040)='geneve1\x00', 0x61, 0xb, 0x3ff}) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) getrlimit(0xf, &(0x7f00000000c0)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) write(r1, &(0x7f0000000150)='33554432\x00', 0x9) 4.317437005s ago: executing program 4 (id=1169): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x100000000000000, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xfd}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) keyctl$clear(0x7, r0) 549.959247ms ago: executing program 3 (id=1170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) pipe2(&(0x7f00000000c0), 0x80000) setns(0xc9, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000004000000000000000500"/113], 0x78) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x16) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f00000005c0), &(0x7f0000000580)=""/24}, 0x20) 405.89451ms ago: executing program 4 (id=1171): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) 196.435465ms ago: executing program 5 (id=1172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000340)='naa.', 0x4) 0s ago: executing program 4 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) kernel console output (not intermixed with test programs): [ 616.930078][ T4345] usb 9-1: USB disconnect, device number 5 [ 617.188238][ T7714] udevd[7714]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.207034][ T4347] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 617.759473][ T4347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 617.967276][ T4347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 618.013481][ T4347] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 618.050708][ T4347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.086842][ T4347] usb 5-1: Product: syz [ 618.146503][ T4347] usb 5-1: Manufacturer: syz [ 618.163445][ T4347] usb 5-1: SerialNumber: syz [ 618.704020][ T4345] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 619.162822][ T4347] kaweth 5-1:1.0: Firmware present in device. [ 619.177990][ T4347] kaweth 5-1:1.0: Error reading configuration (-71), no net device created [ 619.187661][ T4347] kaweth: probe of 5-1:1.0 failed with error -5 [ 619.227469][ T4347] usb 5-1: USB disconnect, device number 8 [ 619.340618][ T4345] usb 10-1: Using ep0 maxpacket: 16 [ 619.356666][ T4345] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 619.403190][ T4345] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 619.417251][ T4345] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.439885][ T4345] usb 10-1: Product: syz [ 619.444219][ T4345] usb 10-1: Manufacturer: syz [ 619.460125][ T4345] usb 10-1: SerialNumber: syz [ 619.472272][ T4345] usb 10-1: config 0 descriptor?? [ 620.962811][ T4345] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 620.982689][ T4345] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 621.138881][ T4321] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 621.329779][ T4321] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 621.357046][ T4321] usb 6-1: config 253 has no interface number 0 [ 621.363465][ T4321] usb 6-1: config 253 interface 130 has no altsetting 0 [ 621.379305][ T4321] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 621.429945][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.458649][ T4321] usb 6-1: Product: syz [ 621.462978][ T4321] usb 6-1: Manufacturer: syz [ 621.502701][ T4321] usb 6-1: SerialNumber: syz [ 621.554407][ T4345] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 621.832704][ T7760] FAULT_INJECTION: forcing a failure. [ 621.832704][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 621.845692][ T7760] CPU: 0 PID: 7760 Comm: syz.8.714 Not tainted syzkaller #0 [ 621.853041][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.863141][ T7760] Call Trace: [ 621.866458][ T7760] [ 621.869422][ T7760] dump_stack_lvl+0x188/0x24e [ 621.874150][ T7760] ? show_regs_print_info+0x12/0x12 [ 621.879389][ T7760] ? load_image+0x410/0x410 [ 621.884014][ T7760] ? __might_sleep+0xd0/0xd0 [ 621.888639][ T7760] ? __lock_acquire+0x7ea0/0x7ea0 [ 621.893790][ T7760] should_fail_ex+0x390/0x4c0 [ 621.898512][ T7760] should_failslab+0x5/0x20 [ 621.903048][ T7760] slab_pre_alloc_hook+0x59/0x300 [ 621.908106][ T7760] ? __mutex_trylock_common+0x15c/0x260 [ 621.913698][ T7760] ? assoc_array_insert+0x8f/0x3080 [ 621.918950][ T7760] __kmem_cache_alloc_node+0x4f/0x270 [ 621.924355][ T7760] ? assoc_array_insert+0x8f/0x3080 [ 621.929590][ T7760] kmalloc_trace+0x26/0xe0 [ 621.934037][ T7760] assoc_array_insert+0x8f/0x3080 [ 621.939099][ T7760] ? key_link+0xc6/0x350 [ 621.943376][ T7760] ? mutex_lock_nested+0x10/0x10 [ 621.948354][ T7760] ? rwsem_write_trylock+0x135/0x1c0 [ 621.953677][ T7760] ? clear_nonspinnable+0x60/0x60 [ 621.958762][ T7760] __key_link_begin+0xd2/0x1e0 [ 621.963564][ T7760] key_link+0xd6/0x350 [ 621.967685][ T7760] ? key_task_permission+0x360/0x4a0 [ 621.973011][ T7760] keyctl_get_persistent+0x63a/0x780 [ 621.978335][ T7760] ? proc_key_users_show+0x310/0x310 [ 621.983672][ T7760] __se_sys_keyctl+0x59f/0x870 [ 621.988501][ T7760] ? __x64_sys_keyctl+0xc0/0xc0 [ 621.993391][ T7760] ? do_futex+0x310/0x320 [ 621.997753][ T7760] ? __ia32_sys_get_robust_list+0x100/0x100 [ 622.003688][ T7760] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 622.009742][ T7760] ? lock_chain_count+0x20/0x20 [ 622.014637][ T7760] ? lockdep_hardirqs_on+0x94/0x140 [ 622.019880][ T7760] ? __x64_sys_keyctl+0x1c/0xc0 [ 622.024769][ T7760] do_syscall_64+0x4c/0xa0 [ 622.029217][ T7760] ? clear_bhb_loop+0x60/0xb0 [ 622.033918][ T7760] ? clear_bhb_loop+0x60/0xb0 [ 622.038627][ T7760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.044572][ T7760] RIP: 0033:0x7f6591d9e1d9 [ 622.049016][ T7760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.068657][ T7760] RSP: 002b:00007f6592ccb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 622.077105][ T7760] RAX: ffffffffffffffda RBX: 00007f6592025fa0 RCX: 00007f6591d9e1d9 [ 622.085102][ T7760] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 622.093133][ T7760] RBP: 00007f6591e35888 R08: 0000000000000000 R09: 0000000000000000 [ 622.101132][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.109128][ T7760] R13: 00007f6592026038 R14: 00007f6592025fa0 R15: 00007fffa00cce08 [ 622.117141][ T7760] [ 622.161121][ T4345] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 622.197197][ T4345] em28xx 10-1:0.0: board has no eeprom [ 623.667446][ T4345] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 623.731488][ T26] audit: type=1800 audit(1791614268.815:2): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.711" name=08 dev="sda1" ino=2061 res=0 errno=0 [ 623.783003][ T4321] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 623.829337][ T4345] em28xx 10-1:0.0: dvb set to bulk mode. [ 623.847060][ T4316] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 623.855397][ T4321] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 623.864507][ T4321] dib0700: firmware download failed at 7 with -22 [ 624.123217][ T4316] usb 9-1: unable to get BOS descriptor or descriptor too short [ 624.136866][ T4321] usb 6-1: USB disconnect, device number 8 [ 624.218864][ T4316] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.368048][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.375073][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.390160][ T4316] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.565270][ T4316] usb 9-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 624.682555][ T4316] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.712098][ T4345] usb 10-1: USB disconnect, device number 2 [ 624.737725][ T4345] em28xx 10-1:0.0: Disconnecting em28xx [ 624.743809][ T26] audit: type=1800 audit(1791614269.835:3): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.711" name=08 dev="sda1" ino=2061 res=0 errno=0 [ 624.767508][ T7371] em28xx 10-1:0.0: Binding DVB extension [ 624.781018][ T4316] usb 9-1: Product: syz [ 624.815822][ T4316] usb 9-1: Manufacturer: syz [ 624.846189][ T4316] usb 9-1: SerialNumber: syz [ 626.902917][ T7371] em28xx 10-1:0.0: Registering input extension [ 626.921486][ T4345] em28xx 10-1:0.0: Closing input extension [ 627.057959][ T4345] em28xx 10-1:0.0: Freeing device [ 628.777522][ T7809] FAULT_INJECTION: forcing a failure. [ 628.777522][ T7809] name failslab, interval 1, probability 0, space 0, times 0 [ 628.790648][ T7809] CPU: 1 PID: 7809 Comm: syz.7.725 Not tainted syzkaller #0 [ 628.798010][ T7809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 628.808482][ T7809] Call Trace: [ 628.811819][ T7809] [ 628.814809][ T7809] dump_stack_lvl+0x188/0x24e [ 628.819576][ T7809] ? show_regs_print_info+0x12/0x12 [ 628.824849][ T7809] ? load_image+0x410/0x410 [ 628.829419][ T7809] ? __might_sleep+0xd0/0xd0 [ 628.834072][ T7809] ? __lock_acquire+0x7ea0/0x7ea0 [ 628.839184][ T7809] should_fail_ex+0x390/0x4c0 [ 628.843983][ T7809] should_failslab+0x5/0x20 [ 628.848578][ T7809] slab_pre_alloc_hook+0x59/0x300 [ 628.853676][ T7809] ? __mutex_trylock_common+0x15c/0x260 [ 628.859300][ T7809] ? assoc_array_insert+0x8f/0x3080 [ 628.864647][ T7809] __kmem_cache_alloc_node+0x4f/0x270 [ 628.870101][ T7809] ? assoc_array_insert+0x8f/0x3080 [ 628.875366][ T7809] kmalloc_trace+0x26/0xe0 [ 628.879845][ T7809] assoc_array_insert+0x8f/0x3080 [ 628.884938][ T7809] ? key_link+0xc6/0x350 [ 628.889252][ T7809] ? mutex_lock_nested+0x10/0x10 [ 628.894266][ T7809] ? rwsem_write_trylock+0x135/0x1c0 [ 628.899629][ T7809] ? clear_nonspinnable+0x60/0x60 [ 628.904740][ T7809] __key_link_begin+0xd2/0x1e0 [ 628.909579][ T7809] key_link+0xd6/0x350 [ 628.913718][ T7809] ? key_task_permission+0x360/0x4a0 [ 628.919086][ T7809] keyctl_get_persistent+0x63a/0x780 [ 628.924467][ T7809] ? proc_key_users_show+0x310/0x310 [ 628.929853][ T7809] __se_sys_keyctl+0x59f/0x870 [ 628.934693][ T7809] ? __x64_sys_keyctl+0xc0/0xc0 [ 628.939638][ T7809] ? do_futex+0x310/0x320 [ 628.944049][ T7809] ? __ia32_sys_get_robust_list+0x100/0x100 [ 628.950025][ T7809] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 628.956090][ T7809] ? lock_chain_count+0x20/0x20 [ 628.961069][ T7809] ? lockdep_hardirqs_on+0x94/0x140 [ 628.966346][ T7809] ? __x64_sys_keyctl+0x1c/0xc0 [ 628.971277][ T7809] do_syscall_64+0x4c/0xa0 [ 628.975761][ T7809] ? clear_bhb_loop+0x60/0xb0 [ 628.980503][ T7809] ? clear_bhb_loop+0x60/0xb0 [ 628.985255][ T7809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.991226][ T7809] RIP: 0033:0x7f7d2fb9e1d9 [ 628.995714][ T7809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.015917][ T7809] RSP: 002b:00007f7d3099f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 629.024402][ T7809] RAX: ffffffffffffffda RBX: 00007f7d2fe25fa0 RCX: 00007f7d2fb9e1d9 [ 629.032474][ T7809] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 629.040514][ T7809] RBP: 00007f7d2fc35888 R08: 0000000000000000 R09: 0000000000000000 [ 629.048559][ T7809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.056596][ T7809] R13: 00007f7d2fe26038 R14: 00007f7d2fe25fa0 R15: 00007fff9b61e118 [ 629.064654][ T7809] [ 633.327928][ T954] usb 9-1: USB disconnect, device number 6 [ 633.594966][ T7838] FAULT_INJECTION: forcing a failure. [ 633.594966][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 633.627162][ T7838] CPU: 0 PID: 7838 Comm: syz.4.731 Not tainted syzkaller #0 [ 633.634548][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 633.644664][ T7838] Call Trace: [ 633.647995][ T7838] [ 633.650970][ T7838] dump_stack_lvl+0x188/0x24e [ 633.655714][ T7838] ? show_regs_print_info+0x12/0x12 [ 633.660976][ T7838] ? load_image+0x410/0x410 [ 633.665562][ T7838] ? __might_sleep+0xd0/0xd0 [ 633.670224][ T7838] ? __lock_acquire+0x7ea0/0x7ea0 [ 633.675325][ T7838] should_fail_ex+0x390/0x4c0 [ 633.680076][ T7838] should_failslab+0x5/0x20 [ 633.684659][ T7838] slab_pre_alloc_hook+0x59/0x300 [ 633.689748][ T7838] ? x509_get_sig_params+0x28e/0x4c0 [ 633.695095][ T7838] __kmem_cache_alloc_node+0x4f/0x270 [ 633.700531][ T7838] ? x509_get_sig_params+0x28e/0x4c0 [ 633.705876][ T7838] __kmalloc+0xa3/0x240 [ 633.710090][ T7838] x509_get_sig_params+0x28e/0x4c0 [ 633.715260][ T7838] x509_cert_parse+0x4ab/0x7a0 [ 633.720104][ T7838] x509_key_preparse+0x60/0x660 [ 633.725009][ T7838] ? down_read+0x1a8/0x2d0 [ 633.729486][ T7838] asymmetric_key_preparse+0xa5/0x140 [ 633.734919][ T7838] key_create_or_update+0x432/0xa40 [ 633.740277][ T7838] ? security_key_permission+0x7c/0xa0 [ 633.745790][ T7838] ? key_type_put+0x20/0x20 [ 633.750346][ T7838] ? lookup_user_key_possessed+0x40/0x40 [ 633.756052][ T7838] ? __might_fault+0xc2/0x120 [ 633.760767][ T7838] ? __might_fault+0xa6/0x120 [ 633.765496][ T7838] __se_sys_add_key+0x34b/0x410 [ 633.770396][ T7838] ? __x64_sys_add_key+0xc0/0xc0 [ 633.775384][ T7838] ? lockdep_hardirqs_on+0x94/0x140 [ 633.780626][ T7838] ? __x64_sys_add_key+0x1c/0xc0 [ 633.785603][ T7838] do_syscall_64+0x4c/0xa0 [ 633.790059][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 633.794771][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 633.799479][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.805401][ T7838] RIP: 0033:0x7fd18299e1d9 [ 633.810024][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.829678][ T7838] RSP: 002b:00007fd1837c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 633.838147][ T7838] RAX: ffffffffffffffda RBX: 00007fd182c25fa0 RCX: 00007fd18299e1d9 [ 633.846173][ T7838] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 633.854199][ T7838] RBP: 00007fd182a35888 R08: ffffffffffffffff R09: 0000000000000000 [ 633.862225][ T7838] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 633.870501][ T7838] R13: 00007fd182c26038 R14: 00007fd182c25fa0 R15: 00007ffcf1697d38 [ 633.878541][ T7838] [ 633.887573][ T4944] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 634.109275][ T4944] usb 10-1: config 253 has an invalid interface number: 130 but max is 0 [ 634.126302][ T4944] usb 10-1: config 253 has no interface number 0 [ 634.142976][ T4944] usb 10-1: config 253 interface 130 has no altsetting 0 [ 634.169440][ T4944] usb 10-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 634.305693][ T4944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.411329][ T4944] usb 10-1: Product: syz [ 634.501502][ T4944] usb 10-1: Manufacturer: syz [ 634.552591][ T4944] usb 10-1: SerialNumber: syz [ 636.739638][ T7871] jffs2: notice: (7871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 640.397670][ T7892] tipc: Started in network mode [ 640.402637][ T7892] tipc: Node identity 2000004, cluster identity 4711 [ 640.409494][ T7892] tipc: Node number set to 33554436 [ 644.167069][ T4944] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 644.191497][ T4944] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 644.217167][ T4944] dib0700: firmware download failed at 7 with -22 [ 644.339848][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.7.749'. [ 644.349051][ T7910] device veth0_to_bond entered promiscuous mode [ 644.482747][ T4944] usb 10-1: USB disconnect, device number 3 [ 644.889604][ T7919] jffs2: notice: (7919) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 645.247217][ T4601] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 645.439897][ T4601] usb 5-1: unable to get BOS descriptor or descriptor too short [ 645.456915][ T4601] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.896613][ T4601] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.235459][ T4601] usb 5-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 646.244844][ T4601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.278426][ T4601] usb 5-1: Product: syz [ 646.283528][ T4601] usb 5-1: Manufacturer: syz [ 646.302883][ T4601] usb 5-1: SerialNumber: syz [ 646.595989][ T7943] jffs2: notice: (7943) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 647.387319][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'. [ 647.469052][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'. [ 648.945051][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.748'. [ 650.592252][ T4601] usb 5-1: USB disconnect, device number 9 [ 651.943926][ T7969] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 651.950982][ T7969] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 651.959719][ T7969] vhci_hcd vhci_hcd.0: Device attached [ 652.148259][ T7970] vhci_hcd: connection closed [ 652.152166][ T4431] vhci_hcd: stop threads [ 652.167536][ T954] vhci_hcd: vhci_device speed not set [ 652.250686][ T954] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 652.264769][ T4431] vhci_hcd: release socket [ 652.330888][ T4431] vhci_hcd: disconnect device [ 652.683878][ T7980] jffs2: notice: (7980) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 652.733317][ T7714] udevd[7714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.939350][ T7984] FAULT_INJECTION: forcing a failure. [ 652.939350][ T7984] name failslab, interval 1, probability 0, space 0, times 0 [ 652.987035][ T7984] CPU: 0 PID: 7984 Comm: syz.9.759 Not tainted syzkaller #0 [ 652.994412][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 653.004510][ T7984] Call Trace: [ 653.007845][ T7984] [ 653.010809][ T7984] dump_stack_lvl+0x188/0x24e [ 653.015532][ T7984] ? show_regs_print_info+0x12/0x12 [ 653.020761][ T7984] ? load_image+0x410/0x410 [ 653.025297][ T7984] ? __might_sleep+0xd0/0xd0 [ 653.029913][ T7984] ? __lock_acquire+0x7ea0/0x7ea0 [ 653.034995][ T7984] should_fail_ex+0x390/0x4c0 [ 653.039719][ T7984] should_failslab+0x5/0x20 [ 653.044253][ T7984] slab_pre_alloc_hook+0x59/0x300 [ 653.049313][ T7984] ? __mutex_trylock_common+0x15c/0x260 [ 653.054913][ T7984] ? assoc_array_insert+0x8f/0x3080 [ 653.060167][ T7984] __kmem_cache_alloc_node+0x4f/0x270 [ 653.065577][ T7984] ? assoc_array_insert+0x8f/0x3080 [ 653.070805][ T7984] kmalloc_trace+0x26/0xe0 [ 653.075250][ T7984] assoc_array_insert+0x8f/0x3080 [ 653.080322][ T7984] ? key_link+0xc6/0x350 [ 653.084621][ T7984] ? mutex_lock_nested+0x10/0x10 [ 653.089596][ T7984] ? rwsem_write_trylock+0x135/0x1c0 [ 653.094917][ T7984] ? clear_nonspinnable+0x60/0x60 [ 653.099987][ T7984] __key_link_begin+0xd2/0x1e0 [ 653.104790][ T7984] key_link+0xd6/0x350 [ 653.108913][ T7984] ? key_task_permission+0x360/0x4a0 [ 653.114239][ T7984] keyctl_get_persistent+0x63a/0x780 [ 653.119590][ T7984] ? proc_key_users_show+0x310/0x310 [ 653.124988][ T7984] __se_sys_keyctl+0x59f/0x870 [ 653.129788][ T7984] ? __x64_sys_keyctl+0xc0/0xc0 [ 653.134689][ T7984] ? do_futex+0x310/0x320 [ 653.139055][ T7984] ? __ia32_sys_get_robust_list+0x100/0x100 [ 653.144985][ T7984] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 653.151052][ T7984] ? lock_chain_count+0x20/0x20 [ 653.155992][ T7984] ? lockdep_hardirqs_on+0x94/0x140 [ 653.161234][ T7984] ? __x64_sys_keyctl+0x1c/0xc0 [ 653.166134][ T7984] do_syscall_64+0x4c/0xa0 [ 653.170595][ T7984] ? clear_bhb_loop+0x60/0xb0 [ 653.175394][ T7984] ? clear_bhb_loop+0x60/0xb0 [ 653.180112][ T7984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.186038][ T7984] RIP: 0033:0x7fb01ad9e1d9 [ 653.190485][ T7984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.210126][ T7984] RSP: 002b:00007fb01bbd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 653.218593][ T7984] RAX: ffffffffffffffda RBX: 00007fb01b025fa0 RCX: 00007fb01ad9e1d9 [ 653.226634][ T7984] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 653.234660][ T7984] RBP: 00007fb01ae35888 R08: 0000000000000000 R09: 0000000000000000 [ 653.242689][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.250718][ T7984] R13: 00007fb01b026038 R14: 00007fb01b025fa0 R15: 00007fff401227a8 [ 653.258762][ T7984] [ 654.881006][ T4601] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 655.587070][ T4601] usb 9-1: Using ep0 maxpacket: 32 [ 655.602598][ T4601] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 655.711575][ T4601] usb 9-1: config 0 has no interface number 0 [ 655.727245][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 655.832237][ T4601] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 655.946486][ T4601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.990835][ T7] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 656.029151][ T7] usb 5-1: config 253 has no interface number 0 [ 656.079958][ T4601] usb 9-1: Product: syz [ 656.123578][ T7] usb 5-1: config 253 interface 130 has no altsetting 0 [ 656.154155][ T4601] usb 9-1: Manufacturer: syz [ 656.219386][ T4601] usb 9-1: SerialNumber: syz [ 656.240752][ T7] usb 5-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 657.097645][ T8005] tipc: Started in network mode [ 657.102575][ T8005] tipc: Node identity 2000004, cluster identity 4711 [ 657.109369][ T8005] tipc: Node number set to 33554436 [ 657.280703][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.294592][ T4601] usb 9-1: config 0 descriptor?? [ 657.300597][ T7] usb 5-1: Product: syz [ 657.304988][ T7] usb 5-1: Manufacturer: syz [ 657.310368][ T7] usb 5-1: SerialNumber: syz [ 657.398041][ T954] vhci_hcd: vhci_device speed not set [ 657.443773][ T4601] usb 9-1: can't set config #0, error -71 [ 657.472821][ T4601] usb 9-1: USB disconnect, device number 7 [ 657.751344][ T8013] FAULT_INJECTION: forcing a failure. [ 657.751344][ T8013] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 657.777082][ T8013] CPU: 0 PID: 8013 Comm: syz.8.769 Not tainted syzkaller #0 [ 657.784484][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 657.794589][ T8013] Call Trace: [ 657.797919][ T8013] [ 657.800897][ T8013] dump_stack_lvl+0x188/0x24e [ 657.805647][ T8013] ? show_regs_print_info+0x12/0x12 [ 657.810948][ T8013] ? load_image+0x410/0x410 [ 657.815515][ T8013] ? __lock_acquire+0x7ea0/0x7ea0 [ 657.820613][ T8013] should_fail_ex+0x390/0x4c0 [ 657.825358][ T8013] _copy_from_iter+0x1c0/0x1130 [ 657.830272][ T8013] ? rcu_is_watching+0x11/0xa0 [ 657.835100][ T8013] ? __alloc_pages+0x290/0x4f0 [ 657.840100][ T8013] ? copyout_mc+0x110/0x110 [ 657.844708][ T8013] ? page_copy_sane+0x4e/0x390 [ 657.849535][ T8013] copy_page_from_iter+0x77/0x100 [ 657.854623][ T8013] tun_get_user+0x1b2d/0x3be0 [ 657.859361][ T8013] ? tun_get_user+0x66f/0x3be0 [ 657.864178][ T8013] ? rcu_read_unlock+0xa0/0xa0 [ 657.869020][ T8013] ? tun_get+0x1c/0x2e0 [ 657.873227][ T8013] ? __lock_acquire+0x7ea0/0x7ea0 [ 657.878296][ T8013] ? tun_get+0x1c/0x2e0 [ 657.882497][ T8013] tun_chr_write_iter+0x112/0x1f0 [ 657.887609][ T8013] vfs_write+0x482/0x9a0 [ 657.891919][ T8013] ? file_end_write+0x250/0x250 [ 657.896934][ T8013] ? __fget_files+0x3fc/0x460 [ 657.901674][ T8013] ? __fdget_pos+0x1d4/0x360 [ 657.906314][ T8013] ? ksys_write+0x70/0x260 [ 657.910793][ T8013] ksys_write+0x14d/0x260 [ 657.915202][ T8013] ? __ia32_sys_read+0x80/0x80 [ 657.920015][ T8013] ? lockdep_hardirqs_on+0x94/0x140 [ 657.925260][ T8013] do_syscall_64+0x4c/0xa0 [ 657.929725][ T8013] ? clear_bhb_loop+0x60/0xb0 [ 657.934480][ T8013] ? clear_bhb_loop+0x60/0xb0 [ 657.939232][ T8013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.945201][ T8013] RIP: 0033:0x7f6591d5ea0e [ 657.949647][ T8013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 657.969293][ T8013] RSP: 002b:00007f6592ccafb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 657.977748][ T8013] RAX: ffffffffffffffda RBX: 00007f6592ccb6c0 RCX: 00007f6591d5ea0e [ 657.985758][ T8013] RDX: 0000000000000046 RSI: 0000200000000000 RDI: 00000000000000c8 [ 657.993772][ T8013] RBP: 00007f6591e35888 R08: 0000000000000000 R09: 0000000000000000 [ 658.001779][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.009780][ T8013] R13: 00007f6592026038 R14: 00007f6592025fa0 R15: 00007fffa00cce08 [ 658.017800][ T8013] [ 658.097071][ T7371] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 658.289453][ T7371] usb 8-1: unable to get BOS descriptor or descriptor too short [ 658.305207][ T7371] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.756623][ T7371] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.789574][ T7371] usb 8-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 659.823491][ T7371] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.864730][ T7371] usb 8-1: Product: syz [ 659.887139][ T7371] usb 8-1: Manufacturer: syz [ 659.891864][ T7371] usb 8-1: SerialNumber: syz [ 661.774303][ T7371] usb 8-1: USB disconnect, device number 6 [ 661.854103][ T8042] jffs2: notice: (8042) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 662.073482][ T7714] udevd[7714]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.321000][ T7] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 663.353132][ T7] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 663.381821][ T7] dib0700: firmware download failed at 7 with -22 [ 663.944983][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.9.777'. [ 664.812770][ T4944] usb 5-1: USB disconnect, device number 10 [ 665.164940][ T8076] FAULT_INJECTION: forcing a failure. [ 665.164940][ T8076] name failslab, interval 1, probability 0, space 0, times 0 [ 665.179974][ T8077] FAULT_INJECTION: forcing a failure. [ 665.179974][ T8077] name failslab, interval 1, probability 0, space 0, times 0 [ 665.214488][ T8076] CPU: 1 PID: 8076 Comm: syz.7.780 Not tainted syzkaller #0 [ 665.221889][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 665.232002][ T8076] Call Trace: [ 665.235351][ T8076] [ 665.238335][ T8076] dump_stack_lvl+0x188/0x24e [ 665.243087][ T8076] ? show_regs_print_info+0x12/0x12 [ 665.248346][ T8076] ? load_image+0x410/0x410 [ 665.252902][ T8076] ? __might_sleep+0xd0/0xd0 [ 665.257710][ T8076] ? __lock_acquire+0x7ea0/0x7ea0 [ 665.262826][ T8076] ? __mutex_lock+0x1ab/0xae0 [ 665.267573][ T8076] should_fail_ex+0x390/0x4c0 [ 665.272319][ T8076] should_failslab+0x5/0x20 [ 665.276863][ T8076] slab_pre_alloc_hook+0x59/0x300 [ 665.281935][ T8076] ? memset+0x1e/0x40 [ 665.285959][ T8076] ? loopback_open+0x123/0xa50 [ 665.290760][ T8076] __kmem_cache_alloc_node+0x4f/0x270 [ 665.296174][ T8076] ? loopback_open+0x123/0xa50 [ 665.300977][ T8076] kmalloc_trace+0x26/0xe0 [ 665.305437][ T8076] loopback_open+0x123/0xa50 [ 665.310086][ T8076] ? snd_pcm_attach_substream+0x83a/0xac0 [ 665.315863][ T8076] snd_pcm_open_substream+0x109a/0x26a0 [ 665.321477][ T8076] ? snd_pcm_drop+0x250/0x250 [ 665.326308][ T8076] snd_pcm_open+0x1cc/0x600 [ 665.330887][ T8076] ? snd_pcm_mmap_control_fault+0x270/0x270 [ 665.336822][ T8076] ? do_task_dead+0xd0/0xd0 [ 665.341379][ T8076] snd_pcm_capture_open+0x6e/0xd0 [ 665.346436][ T8076] chrdev_open+0x585/0x5f0 [ 665.350893][ T8076] ? cd_forget+0x160/0x160 [ 665.355348][ T8076] ? fsnotify_perm+0x39b/0x550 [ 665.360145][ T8076] ? cd_forget+0x160/0x160 [ 665.364609][ T8076] do_dentry_open+0x7dd/0x10b0 [ 665.369446][ T8076] path_openat+0x2674/0x2f10 [ 665.374107][ T8076] ? kasan_set_track+0x60/0x70 [ 665.378927][ T8076] ? verify_lock_unused+0x140/0x140 [ 665.384165][ T8076] ? do_sys_openat2+0xdd/0x4f0 [ 665.389011][ T8076] ? do_filp_open+0x420/0x420 [ 665.393742][ T8076] do_filp_open+0x1ee/0x420 [ 665.398306][ T8076] ? vfs_tmpfile+0x470/0x470 [ 665.402966][ T8076] ? _raw_spin_unlock+0x24/0x40 [ 665.407843][ T8076] ? alloc_fd+0x590/0x640 [ 665.412215][ T8076] do_sys_openat2+0x14b/0x4f0 [ 665.416937][ T8076] ? do_sys_open+0xe0/0xe0 [ 665.421401][ T8076] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 665.427433][ T8076] ? lock_chain_count+0x20/0x20 [ 665.432327][ T8076] __x64_sys_openat+0x135/0x160 [ 665.437365][ T8076] do_syscall_64+0x4c/0xa0 [ 665.441840][ T8076] ? clear_bhb_loop+0x60/0xb0 [ 665.446563][ T8076] ? clear_bhb_loop+0x60/0xb0 [ 665.451292][ T8076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.457247][ T8076] RIP: 0033:0x7f7d2fb5ea0e [ 665.461805][ T8076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 665.481459][ T8076] RSP: 002b:00007f7d3099eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 665.489912][ T8076] RAX: ffffffffffffffda RBX: 00007f7d3099f6c0 RCX: 00007f7d2fb5ea0e [ 665.497916][ T8076] RDX: 0000000000000002 RSI: 00007f7d3099ec00 RDI: ffffffffffffff9c [ 665.506021][ T8076] RBP: 00007f7d3099ec00 R08: 0000000000000000 R09: 0000000000000000 [ 665.514176][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 665.522185][ T8076] R13: 00007f7d2fe26038 R14: 00007f7d2fe25fa0 R15: 00007fff9b61e118 [ 665.530233][ T8076] [ 665.562726][ T8077] CPU: 1 PID: 8077 Comm: syz.5.781 Not tainted syzkaller #0 [ 665.570117][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 665.580252][ T8077] Call Trace: [ 665.583602][ T8077] [ 665.586573][ T8077] dump_stack_lvl+0x188/0x24e [ 665.591317][ T8077] ? show_regs_print_info+0x12/0x12 [ 665.596584][ T8077] ? load_image+0x410/0x410 [ 665.601145][ T8077] ? __lock_acquire+0x7ea0/0x7ea0 [ 665.606236][ T8077] should_fail_ex+0x390/0x4c0 [ 665.611008][ T8077] should_failslab+0x5/0x20 [ 665.615570][ T8077] slab_pre_alloc_hook+0x59/0x300 [ 665.620657][ T8077] ? kvmalloc_node+0x6c/0x180 [ 665.625390][ T8077] __kmem_cache_alloc_node+0x4f/0x270 [ 665.630826][ T8077] ? kvmalloc_node+0x6c/0x180 [ 665.635553][ T8077] __kmalloc_node+0xa2/0x240 [ 665.640192][ T8077] ? __nf_register_net_hook+0x232/0x910 [ 665.645799][ T8077] kvmalloc_node+0x6c/0x180 [ 665.650358][ T8077] nf_hook_entries_grow+0x31a/0x760 [ 665.655632][ T8077] __nf_register_net_hook+0x2c9/0x910 [ 665.661087][ T8077] nf_register_net_hook+0xae/0x190 [ 665.666260][ T8077] nf_register_net_hooks+0x40/0x1a0 [ 665.671527][ T8077] nf_synproxy_ipv4_init+0x76/0xe0 [ 665.676701][ T8077] synproxy_tg4_check+0x133/0x200 [ 665.681880][ T8077] xt_check_target+0x49d/0xbf0 [ 665.686724][ T8077] ? xt_find_jump_offset+0xe0/0xe0 [ 665.691911][ T8077] ? pcpu_alloc+0x1102/0x16b0 [ 665.696668][ T8077] ? xt_find_target+0x1ed/0x230 [ 665.701585][ T8077] translate_table+0x176f/0x1f60 [ 665.706606][ T8077] ? ipt_register_table+0x7b0/0x7b0 [ 665.711884][ T8077] ? __might_fault+0xa6/0x120 [ 665.716629][ T8077] ? __virt_addr_valid+0x188/0x540 [ 665.722101][ T8077] ? __might_fault+0xa6/0x120 [ 665.726835][ T8077] ? _copy_from_user+0x10b/0x170 [ 665.732031][ T8077] do_ipt_set_ctl+0x9f1/0xe00 [ 665.736808][ T8077] ? nf_setsockopt+0x218/0x280 [ 665.741635][ T8077] ? ipt_unregister_table_exit+0x220/0x220 [ 665.747541][ T8077] ? __lock_acquire+0x7ea0/0x7ea0 [ 665.752633][ T8077] ? trace_contention_end+0x5f/0x170 [ 665.758061][ T8077] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 665.763792][ T8077] ? mutex_unlock+0x10/0x10 [ 665.768362][ T8077] ? aa_af_perm+0x340/0x340 [ 665.772934][ T8077] nf_setsockopt+0x25f/0x280 [ 665.777588][ T8077] ? sock_common_recvmsg+0x190/0x190 [ 665.782937][ T8077] __sys_setsockopt+0x2bf/0x3d0 [ 665.787844][ T8077] __x64_sys_setsockopt+0xb1/0xc0 [ 665.792925][ T8077] do_syscall_64+0x4c/0xa0 [ 665.797393][ T8077] ? clear_bhb_loop+0x60/0xb0 [ 665.802122][ T8077] ? clear_bhb_loop+0x60/0xb0 [ 665.806877][ T8077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.812825][ T8077] RIP: 0033:0x7f1041d9e1d9 [ 665.817380][ T8077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.837087][ T8077] RSP: 002b:00007f1042ca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 665.845608][ T8077] RAX: ffffffffffffffda RBX: 00007f1042025fa0 RCX: 00007f1041d9e1d9 [ 665.853695][ T8077] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 665.861807][ T8077] RBP: 00007f1041e35888 R08: 00000000000002c0 R09: 0000000000000000 [ 665.869826][ T8077] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.877849][ T8077] R13: 00007f1042026038 R14: 00007f1042025fa0 R15: 00007ffcbcb45818 [ 665.885980][ T8077] [ 666.768371][ T27] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 666.985313][ T27] usb 10-1: unable to get BOS descriptor or descriptor too short [ 666.997997][ T27] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.026978][ T27] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 667.068946][ T27] usb 10-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 667.096991][ T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.126093][ T27] usb 10-1: Product: syz [ 667.136511][ T27] usb 10-1: Manufacturer: syz [ 667.146318][ T27] usb 10-1: SerialNumber: syz [ 667.609756][ T8100] device-mapper: ioctl: Invalid ioctl structure: uuid f, name , dev 5b [ 667.842538][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.9.784'. [ 667.854243][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.9.784'. [ 668.449006][ T8111] netlink: 'syz.4.788': attribute type 12 has an invalid length. [ 670.433944][ T27] usb 10-1: USB disconnect, device number 4 [ 672.430211][ T7714] udevd[7714]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.897236][ T4601] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 677.292414][ T4601] usb 9-1: device descriptor read/all, error -71 [ 677.929609][ T8164] fuse: Bad value for 'fd' [ 678.356076][ T8175] loop9: detected capacity change from 0 to 16384 [ 679.807083][ T4601] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 679.838806][ T8175] loop9: detected capacity change from 16384 to 0 [ 679.923905][ T7371] smpboot: CPU 1 is now offline [ 679.998936][ T4601] usb 9-1: unable to get BOS descriptor or descriptor too short [ 680.075832][ T4601] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.157567][ T4601] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 680.238254][ T4601] usb 9-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 680.283425][ T4601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.313435][ T4601] usb 9-1: Product: syz [ 680.634453][ T8197] : renamed from bond_slave_0 [ 682.389745][ T4601] usb 9-1: Manufacturer: syz [ 682.410430][ T4601] usb 9-1: SerialNumber: syz [ 682.548597][ T4601] usb 9-1: can't set config #1, error -71 [ 682.598854][ T4601] usb 9-1: USB disconnect, device number 9 [ 683.262888][ T8215] ======================================================= [ 683.262888][ T8215] WARNING: The mand mount option has been deprecated and [ 683.262888][ T8215] and is ignored by this kernel. Remove the mand [ 683.262888][ T8215] option from the mount to silence this warning. [ 683.262888][ T8215] ======================================================= [ 683.460468][ T8219] fuse: Bad value for 'fd' [ 683.497382][ T4601] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 683.787007][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 684.546547][ T4601] usb 9-1: config 253 has an invalid interface number: 130 but max is 0 [ 685.619016][ T4601] usb 9-1: config 253 has no interface number 0 [ 685.625435][ T4601] usb 9-1: config 253 interface 130 has no altsetting 0 [ 685.721379][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.727894][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.787885][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 685.811351][ T4601] usb 9-1: string descriptor 0 read error: -71 [ 685.840135][ T7] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 685.866108][ T4601] usb 9-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 685.893085][ T7] usb 5-1: config 0 has no interface number 0 [ 685.916283][ T8215] FAULT_INJECTION: forcing a failure. [ 685.916283][ T8215] name failslab, interval 1, probability 0, space 0, times 0 [ 685.929829][ T8215] CPU: 0 PID: 8215 Comm: syz.7.810 Not tainted syzkaller #0 [ 685.937162][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 685.947227][ T8215] Call Trace: [ 685.950515][ T8215] [ 685.953457][ T8215] dump_stack_lvl+0x188/0x24e [ 685.958156][ T8215] ? show_regs_print_info+0x12/0x12 [ 685.963369][ T8215] ? load_image+0x410/0x410 [ 685.967892][ T8215] ? __might_sleep+0xd0/0xd0 [ 685.972494][ T8215] ? __lock_acquire+0x7ea0/0x7ea0 [ 685.977541][ T8215] should_fail_ex+0x390/0x4c0 [ 685.982331][ T8215] should_failslab+0x5/0x20 [ 685.986860][ T8215] slab_pre_alloc_hook+0x59/0x300 [ 685.991907][ T8215] kmem_cache_alloc+0x56/0x2f0 [ 685.996681][ T8215] ? fib_insert_alias+0x300/0x1280 [ 686.001827][ T8215] fib_insert_alias+0x300/0x1280 [ 686.006789][ T8215] ? lockdep_rtnl_is_held+0x22/0x30 [ 686.012021][ T8215] ? fib_find_node+0x294/0x2f0 [ 686.016799][ T8215] fib_trie_unmerge+0x308/0xce0 [ 686.021675][ T8215] fib_unmerge+0xbc/0x350 [ 686.026029][ T8215] fib4_rule_configure+0x114/0xae0 [ 686.031151][ T8215] ? __nla_parse+0x3c/0x50 [ 686.035582][ T8215] fib_nl_newrule+0x135a/0x1e40 [ 686.040483][ T8215] ? fib_rules_seq_read+0xf0/0xf0 [ 686.045523][ T8215] ? rcu_is_watching+0x11/0xa0 [ 686.050310][ T8215] ? trace_contention_end+0x5f/0x170 [ 686.055638][ T8215] ? fib_rules_seq_read+0xf0/0xf0 [ 686.060680][ T8215] rtnetlink_rcv_msg+0x863/0xfb0 [ 686.065633][ T8215] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 686.070777][ T8215] ? rtnetlink_bind+0x80/0x80 [ 686.075553][ T8215] ? __local_bh_enable_ip+0x136/0x1c0 [ 686.080937][ T8215] ? lockdep_hardirqs_on+0x94/0x140 [ 686.086241][ T8215] ? __local_bh_enable_ip+0x136/0x1c0 [ 686.091625][ T8215] ? _local_bh_enable+0xa0/0xa0 [ 686.096490][ T8215] ? __dev_queue_xmit+0x281/0x3810 [ 686.101625][ T8215] ? __dev_queue_xmit+0x281/0x3810 [ 686.106756][ T8215] ? __dev_queue_xmit+0x1d84/0x3810 [ 686.111983][ T8215] ? __dev_queue_xmit+0x281/0x3810 [ 686.117118][ T8215] ? ref_tracker_free+0x682/0x830 [ 686.122252][ T8215] ? refcount_inc+0x70/0x70 [ 686.126788][ T8215] ? memcpy+0x3c/0x60 [ 686.130787][ T8215] ? __copy_skb_header+0x3ba/0x4f0 [ 686.135921][ T8215] ? __skb_clone+0x446/0x6c0 [ 686.140527][ T8215] netlink_rcv_skb+0x1ef/0x440 [ 686.145303][ T8215] ? rtnetlink_bind+0x80/0x80 [ 686.150008][ T8215] ? netlink_ack+0x1160/0x1160 [ 686.154793][ T8215] ? netlink_deliver_tap+0x2e/0x1b0 [ 686.160021][ T8215] netlink_unicast+0x7ad/0x920 [ 686.164811][ T8215] netlink_sendmsg+0x8ad/0xbd0 [ 686.169601][ T8215] ? netlink_getsockopt+0x550/0x550 [ 686.174819][ T8215] ? apparmor_socket_sendmsg+0x8a/0x330 [ 686.180392][ T8215] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 686.185685][ T8215] ? security_socket_sendmsg+0x7c/0xa0 [ 686.191158][ T8215] ? netlink_getsockopt+0x550/0x550 [ 686.196394][ T8215] ____sys_sendmsg+0x5ed/0x9a0 [ 686.201176][ T8215] ? __sys_sendmsg_sock+0x30/0x30 [ 686.206209][ T8215] ? __import_iovec+0x306/0x510 [ 686.211084][ T8215] ? import_iovec+0x6f/0xa0 [ 686.215611][ T8215] ___sys_sendmsg+0x2a2/0x360 [ 686.220304][ T8215] ? __sys_sendmsg+0x2a0/0x2a0 [ 686.225130][ T8215] __se_sys_sendmsg+0x1c3/0x2b0 [ 686.229998][ T8215] ? __x64_sys_sendmsg+0x80/0x80 [ 686.234960][ T8215] ? lockdep_hardirqs_on+0x94/0x140 [ 686.240184][ T8215] do_syscall_64+0x4c/0xa0 [ 686.244752][ T8215] ? clear_bhb_loop+0x60/0xb0 [ 686.249462][ T8215] ? clear_bhb_loop+0x60/0xb0 [ 686.254187][ T8215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.260102][ T8215] RIP: 0033:0x7f7d2fb9e1d9 [ 686.264533][ T8215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.284170][ T8215] RSP: 002b:00007f7d3099f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.292622][ T8215] RAX: ffffffffffffffda RBX: 00007f7d2fe25fa0 RCX: 00007f7d2fb9e1d9 [ 686.300625][ T8215] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 686.308715][ T8215] RBP: 00007f7d2fc35888 R08: 0000000000000000 R09: 0000000000000000 [ 686.316720][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.324710][ T8215] R13: 00007f7d2fe26038 R14: 00007f7d2fe25fa0 R15: 00007fff9b61e118 [ 686.332713][ T8215] [ 686.352162][ T4601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.375081][ T7] usb 5-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xD8, skipping [ 686.421720][ T4601] usb 9-1: can't set config #253, error -71 [ 686.440122][ T7] usb 5-1: config 0 interface 200 has no altsetting 0 [ 686.479565][ T4601] usb 9-1: USB disconnect, device number 10 [ 686.556447][ T8215] db_root: cannot open: $ [ 686.587682][ T7] usb 5-1: string descriptor 0 read error: -71 [ 686.615318][ T7] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 686.674187][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.749135][ T7] usb 5-1: config 0 descriptor?? [ 686.791567][ T7] usb 5-1: can't set config #0, error -71 [ 686.842414][ T7] usb 5-1: USB disconnect, device number 11 [ 687.557084][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 689.154562][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 689.372464][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 689.423770][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.455189][ T8260] fuse: Bad value for 'fd' [ 689.490206][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.549254][ T7] usb 5-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 689.589299][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.643742][ T7] usb 5-1: Product: syz [ 689.662050][ T7] usb 5-1: Manufacturer: syz [ 689.666702][ T7] usb 5-1: SerialNumber: syz [ 689.697116][ T7371] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 689.922781][ T7371] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 690.114240][ T7371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.408036][ T126] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 690.438068][ T7371] usb 6-1: config 0 descriptor?? [ 690.494463][ T7371] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 690.652112][ T126] usb 10-1: config 253 has an invalid interface number: 130 but max is 0 [ 690.683111][ T126] usb 10-1: config 253 has no interface number 0 [ 690.715969][ T126] usb 10-1: config 253 interface 130 has no altsetting 0 [ 690.763425][ T126] usb 10-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 690.814345][ T126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.870004][ T126] usb 10-1: Product: syz [ 690.893153][ T126] usb 10-1: Manufacturer: syz [ 690.919241][ T126] usb 10-1: SerialNumber: syz [ 691.066539][ T7371] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 691.121355][ T7371] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 691.331307][ T7371] usb 6-1: USB disconnect, device number 9 [ 691.692871][ T7] usb 5-1: USB disconnect, device number 12 [ 691.786554][ T8190] udevd[8190]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.017125][ T4944] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 692.609008][ T4944] usb 9-1: config 0 has no interfaces? [ 692.614575][ T4944] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 692.732382][ T4944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.806483][ T4944] usb 9-1: config 0 descriptor?? [ 693.242788][ T4944] usb 9-1: USB disconnect, device number 11 [ 697.063387][ T126] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 697.451874][ T126] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 697.505357][ T126] dib0700: firmware download failed at 7 with -22 [ 697.986966][ T126] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 699.708281][ T8337] ptp ptp0: guarantee physical clock free running [ 699.861038][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 700.167490][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.258543][ T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 700.331958][ T126] usb 5-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 700.352784][ T8348] jffs2: notice: (8348) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 702.127020][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.169519][ T126] usb 5-1: Product: syz [ 702.199361][ T126] usb 5-1: Manufacturer: syz [ 702.233510][ T126] usb 5-1: SerialNumber: syz [ 702.317094][ T126] usb 5-1: can't set config #1, error -71 [ 702.358132][ T126] usb 5-1: USB disconnect, device number 13 [ 705.264658][ T8363] overlayfs: missing 'lowerdir' [ 705.513527][ T8369] syz.4.853: attempt to access beyond end of device [ 705.513527][ T8369] nbd4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 705.635537][ T8369] F2FS-fs (nbd4): Unable to read 1th superblock [ 705.746404][ T8369] syz.4.853: attempt to access beyond end of device [ 705.746404][ T8369] nbd4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 705.876267][ T8372] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 705.882829][ T8372] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 706.043664][ T8373] loop8: detected capacity change from 0 to 16384 [ 706.120261][ T8369] F2FS-fs (nbd4): Unable to read 2th superblock [ 706.160723][ T8372] vhci_hcd vhci_hcd.0: Device attached [ 706.249411][ T8385] loop8: detected capacity change from 16384 to 16383 [ 706.317359][ T8373] binder: 8368:8373 ioctl 84009422 200000000500 returned -22 [ 706.357407][ T4345] vhci_hcd: vhci_device speed not set [ 706.382094][ T8373] binder: 8368:8373 ioctl 50009403 2000000001c0 returned -22 [ 706.477227][ T4345] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 706.965199][ T8374] vhci_hcd: connection reset by peer [ 707.003049][ T4332] vhci_hcd: stop threads [ 707.019458][ T4332] vhci_hcd: release socket [ 707.076701][ T4332] vhci_hcd: disconnect device [ 707.153542][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 707.167763][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 707.175726][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 707.185805][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 707.198849][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 707.216369][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 707.842352][ T8397] XFS (nbd7): Invalid device [./loop0], error=-2 [ 708.322628][ T8402] jffs2: notice: (8402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 709.317038][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 710.446304][ T8392] chnl_net:caif_netlink_parms(): no params data found [ 711.268523][ T4283] usb 10-1: USB disconnect, device number 5 [ 711.397127][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 711.797695][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.827172][ T4345] vhci_hcd: vhci_device speed not set [ 711.936028][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.997703][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.051649][ T8392] device bridge_slave_0 entered promiscuous mode [ 712.172800][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.248830][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.279768][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.333146][ T8392] device bridge_slave_1 entered promiscuous mode [ 712.430756][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.452316][ T8450] FAULT_INJECTION: forcing a failure. [ 712.452316][ T8450] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 713.477085][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 714.305066][ T8450] CPU: 0 PID: 8450 Comm: syz.8.872 Not tainted syzkaller #0 [ 714.312403][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 714.322473][ T8450] Call Trace: [ 714.325766][ T8450] [ 714.328733][ T8450] dump_stack_lvl+0x188/0x24e [ 714.333449][ T8450] ? show_regs_print_info+0x12/0x12 [ 714.338687][ T8450] ? load_image+0x410/0x410 [ 714.343213][ T8450] ? __lock_acquire+0x7ea0/0x7ea0 [ 714.348266][ T8450] should_fail_ex+0x390/0x4c0 [ 714.352973][ T8450] prepare_alloc_pages+0x1e1/0x5b0 [ 714.358115][ T8450] __alloc_pages+0x130/0x4f0 [ 714.362731][ T8450] ? zone_statistics+0x170/0x170 [ 714.367718][ T8450] ? verify_lock_unused+0x140/0x140 [ 714.372968][ T8450] __folio_alloc+0xe/0x30 [ 714.377325][ T8450] vma_alloc_folio+0x499/0x900 [ 714.382113][ T8450] wp_page_copy+0x24b/0x1660 [ 714.386720][ T8450] ? __lock_acquire+0x7ea0/0x7ea0 [ 714.391832][ T8450] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 714.397487][ T8450] ? do_raw_spin_unlock+0x11d/0x230 [ 714.402817][ T8450] ? _raw_spin_unlock+0x24/0x40 [ 714.407675][ T8450] ? do_wp_page+0x678/0x16b0 [ 714.412283][ T8450] handle_mm_fault+0x1b1b/0x3d40 [ 714.417253][ T8450] ? mt_find+0x157/0x830 [ 714.421524][ T8450] ? numa_migrate_prep+0x250/0x250 [ 714.426650][ T8450] ? lock_chain_count+0x20/0x20 [ 714.431524][ T8450] ? lock_mm_and_find_vma+0xae/0x2f0 [ 714.436826][ T8450] do_user_addr_fault+0x58e/0xb20 [ 714.441896][ T8450] exc_page_fault+0x60/0x100 [ 714.446545][ T8450] ? clear_bhb_loop+0x60/0xb0 [ 714.451257][ T8450] asm_exc_page_fault+0x22/0x30 [ 714.456127][ T8450] RIP: 0033:0x7f6591c57236 [ 714.460552][ T8450] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d dc da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 714.480171][ T8450] RSP: 002b:00007f6592ccaf60 EFLAGS: 00010206 [ 714.486263][ T8450] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000a80000 [ 714.494246][ T8450] RDX: 00000000000025f5 RSI: 0000200000a80000 RDI: 0000200000a81000 [ 714.502230][ T8450] RBP: 00007f6591e55040 R08: 0000000000000000 R09: ffffffffffffffff [ 714.510244][ T8450] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 714.518231][ T8450] R13: 0000200000a80000 R14: 00007f6592025fa0 R15: 0000000000000000 [ 714.526233][ T8450] [ 714.629711][ T8457] jffs2: notice: (8457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 714.656807][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.898981][ T8392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.956890][ T8392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.160039][ T8392] team0: Port device team_slave_0 added [ 715.231350][ T8392] team0: Port device team_slave_1 added [ 715.382026][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.411064][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.501273][ T8474] block device autoloading is deprecated and will be removed. [ 715.555902][ T8392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.567074][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 715.678932][ T8474] syz.4.877: attempt to access beyond end of device [ 715.678932][ T8474] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 715.727984][ T11] tipc: Left network mode [ 715.734016][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.822759][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.981018][ T8474] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 716.051269][ T8392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.129917][ T8474] device-mapper: ioctl: error adding target to table [ 716.563858][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.878'. [ 716.608566][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.7.878'. [ 716.893189][ T8392] device hsr_slave_0 entered promiscuous mode [ 716.932298][ T8392] device hsr_slave_1 entered promiscuous mode [ 717.113300][ T8392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.141657][ T8392] Cannot create hsr debugfs directory [ 717.406530][ T8509] Bluetooth: MGMT ver 1.22 [ 719.223955][ T8515] unloading [ 720.160795][ T8511] ptp ptp0: guarantee physical clock free running [ 720.403564][ T8519] jffs2: notice: (8519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 721.586617][ T8541] input: syz1 as /devices/virtual/input/input9 [ 724.025616][ T8550] file system registered [ 724.030688][ T8550] unloading [ 724.127110][ T8552] input: syz1 as /devices/virtual/input/input10 [ 725.548877][ T8560] jffs2: notice: (8560) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 727.540036][ T8561] ptp ptp0: guarantee physical clock free running [ 727.577771][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 729.087507][ T11] device hsr_slave_0 left promiscuous mode [ 729.532182][ T8570] qnx4: no qnx4 filesystem (no root dir). [ 729.571989][ T11] device hsr_slave_1 left promiscuous mode [ 729.606256][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.694597][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.735649][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.781907][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.967880][ T11] device bridge_slave_1 left promiscuous mode [ 729.991198][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.281910][ T11] device bridge_slave_0 left promiscuous mode [ 730.309375][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.430502][ T11] device veth1_macvtap left promiscuous mode [ 730.454585][ T11] device veth0_macvtap left promiscuous mode [ 730.492203][ T11] device veth1_vlan left promiscuous mode [ 730.521932][ T11] device veth0_vlan left promiscuous mode [ 733.056619][ T8589] file system registered [ 733.061594][ T8589] unloading [ 734.701706][ T8597] jffs2: notice: (8597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 735.028348][ T8601] loop0: detected capacity change from 0 to 32768 [ 739.334704][ T8613] ptp ptp0: guarantee physical clock free running [ 739.483094][ T8608] device-mapper: table: 248:0: thin-pool: Error allocating cell sort array (-ENOMEM) [ 739.532657][ T8608] device-mapper: ioctl: error adding target to table [ 742.587736][ T8632] file system registered [ 742.592781][ T8632] unloading [ 742.596850][ T8633] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 743.004795][ T11] team0 (unregistering): Port device team_slave_1 removed [ 744.215976][ T11] team0 (unregistering): Port device team_slave_0 removed [ 744.393115][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.579451][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.383918][ T8644] jffs2: notice: (8644) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 747.162020][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.172780][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.187837][ T11] bond0 (unregistering): Released all slaves [ 748.097361][ T8660] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 748.160481][ T8392] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 748.357397][ T8392] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 748.701030][ T8392] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 748.773368][ T8392] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 749.429307][ T8674] file system registered [ 749.434272][ T8674] unloading [ 751.017754][ T8680] jffs2: notice: (8680) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 751.072553][ T8392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.167326][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 751.207445][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 751.243873][ T8392] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.278956][ T8685] fuse: Bad value for 'fd' [ 751.331820][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 751.384664][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 751.460935][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.468115][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.522353][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 751.581147][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 751.633608][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.640779][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.640206][ T8692] ptp ptp0: guarantee physical clock free running [ 753.663225][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 755.245100][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 755.531702][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 755.570340][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 755.629627][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 755.665644][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 755.706227][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 755.777503][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 755.811726][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 755.869813][ T8392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 755.929409][ T8392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 755.973005][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 756.012956][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 756.057806][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 756.328154][ T8712] file system registered [ 756.333713][ T8712] unloading [ 758.060885][ T8722] jffs2: notice: (8722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 758.658380][ T8737] fuse: Bad value for 'fd' [ 758.668505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.707564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.720737][ T8392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.226854][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 762.271523][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 762.326041][ T8392] device veth0_vlan entered promiscuous mode [ 762.378198][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 762.421724][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 763.812647][ T8752] syz.5.955 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 763.856663][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 763.902200][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 764.011919][ T8392] device veth1_vlan entered promiscuous mode [ 764.238310][ T8756] file system registered [ 764.243200][ T8756] unloading [ 765.418703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 765.447591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 765.507618][ T8392] device veth0_macvtap entered promiscuous mode [ 765.566635][ T8392] device veth1_macvtap entered promiscuous mode [ 765.601929][ T8763] jffs2: notice: (8763) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 765.692866][ T8764] FAULT_INJECTION: forcing a failure. [ 765.692866][ T8764] name failslab, interval 1, probability 0, space 0, times 0 [ 765.732901][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.810623][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.845181][ T8764] CPU: 0 PID: 8764 Comm: syz.7.958 Not tainted syzkaller #0 [ 765.852520][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 765.862605][ T8764] Call Trace: [ 765.865893][ T8764] [ 765.868832][ T8764] dump_stack_lvl+0x188/0x24e [ 765.873548][ T8764] ? show_regs_print_info+0x12/0x12 [ 765.878767][ T8764] ? load_image+0x410/0x410 [ 765.883287][ T8764] ? __might_sleep+0xd0/0xd0 [ 765.887914][ T8764] ? __lock_acquire+0x7ea0/0x7ea0 [ 765.892970][ T8764] should_fail_ex+0x390/0x4c0 [ 765.897676][ T8764] should_failslab+0x5/0x20 [ 765.902191][ T8764] slab_pre_alloc_hook+0x59/0x300 [ 765.907227][ T8764] ? __mutex_trylock_common+0x15c/0x260 [ 765.912804][ T8764] ? assoc_array_insert+0x8f/0x3080 [ 765.918022][ T8764] __kmem_cache_alloc_node+0x4f/0x270 [ 765.923424][ T8764] ? assoc_array_insert+0x8f/0x3080 [ 765.928631][ T8764] kmalloc_trace+0x26/0xe0 [ 765.933068][ T8764] assoc_array_insert+0x8f/0x3080 [ 765.938111][ T8764] ? key_link+0xc6/0x350 [ 765.942371][ T8764] ? mutex_lock_nested+0x10/0x10 [ 765.947352][ T8764] ? rwsem_write_trylock+0x135/0x1c0 [ 765.952692][ T8764] ? clear_nonspinnable+0x60/0x60 [ 765.957767][ T8764] __key_link_begin+0xd2/0x1e0 [ 765.962571][ T8764] key_link+0xd6/0x350 [ 765.966658][ T8764] ? key_task_permission+0x360/0x4a0 [ 765.971971][ T8764] keyctl_get_persistent+0x63a/0x780 [ 765.977311][ T8764] ? proc_key_users_show+0x310/0x310 [ 765.982654][ T8764] __se_sys_keyctl+0x59f/0x870 [ 765.987450][ T8764] ? __x64_sys_keyctl+0xc0/0xc0 [ 765.992318][ T8764] ? do_futex+0x310/0x320 [ 765.996671][ T8764] ? __ia32_sys_get_robust_list+0x100/0x100 [ 766.002614][ T8764] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 766.008613][ T8764] ? lock_chain_count+0x20/0x20 [ 766.013513][ T8764] ? lockdep_hardirqs_on+0x94/0x140 [ 766.018757][ T8764] ? __x64_sys_keyctl+0x1c/0xc0 [ 766.023676][ T8764] do_syscall_64+0x4c/0xa0 [ 766.028138][ T8764] ? clear_bhb_loop+0x60/0xb0 [ 766.032851][ T8764] ? clear_bhb_loop+0x60/0xb0 [ 766.037573][ T8764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.043506][ T8764] RIP: 0033:0x7f7d2fb9e1d9 [ 766.047946][ T8764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.067588][ T8764] RSP: 002b:00007f7d3099f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 766.076024][ T8764] RAX: ffffffffffffffda RBX: 00007f7d2fe25fa0 RCX: 00007f7d2fb9e1d9 [ 766.084096][ T8764] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 766.092081][ T8764] RBP: 00007f7d2fc35888 R08: 0000000000000000 R09: 0000000000000000 [ 766.100062][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.108046][ T8764] R13: 00007f7d2fe26038 R14: 00007f7d2fe25fa0 R15: 00007fff9b61e118 [ 766.116130][ T8764] [ 766.157707][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.233450][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.305790][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.376982][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.708848][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.717266][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 766.725313][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 766.847635][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 769.477778][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 769.491008][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 769.499130][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 769.506652][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 769.514296][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 769.521630][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 771.028954][ T8793] chnl_net:caif_netlink_parms(): no params data found [ 771.557202][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 773.189403][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.196549][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.323898][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 774.411685][ T8793] device bridge_slave_0 entered promiscuous mode [ 774.656488][ T8827] file system registered [ 774.661504][ T8827] unloading [ 775.225991][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.254957][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.292549][ T8793] device bridge_slave_1 entered promiscuous mode [ 775.334331][ T8835] team0: No ports can be present during mode change [ 775.484904][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.873285][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 777.013463][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.421775][ T8854] mmap: syz.7.978 (8854) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 777.475821][ T8793] team0: Port device team_slave_0 added [ 777.531507][ T4944] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 778.917410][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 779.158563][ T4944] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 779.668180][ T8793] team0: Port device team_slave_1 added [ 781.397879][ T8872] file system registered [ 781.402806][ T8872] unloading [ 781.456073][ T8864] fido_id[8864]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 781.471585][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.501879][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.650858][ T8876] jffs2: notice: (8876) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 781.683963][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.872864][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.905668][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.056377][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.098428][ T8883] FAULT_INJECTION: forcing a failure. [ 782.098428][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 782.111289][ T8883] CPU: 0 PID: 8883 Comm: syz.5.985 Not tainted syzkaller #0 [ 782.118589][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 782.128655][ T8883] Call Trace: [ 782.131945][ T8883] [ 782.134887][ T8883] dump_stack_lvl+0x188/0x24e [ 782.139586][ T8883] ? show_regs_print_info+0x12/0x12 [ 782.144823][ T8883] ? load_image+0x410/0x410 [ 782.149348][ T8883] ? __might_sleep+0xd0/0xd0 [ 782.153971][ T8883] ? __lock_acquire+0x7ea0/0x7ea0 [ 782.159020][ T8883] should_fail_ex+0x390/0x4c0 [ 782.163724][ T8883] should_failslab+0x5/0x20 [ 782.168246][ T8883] slab_pre_alloc_hook+0x59/0x300 [ 782.173310][ T8883] ? __mutex_trylock_common+0x15c/0x260 [ 782.178915][ T8883] ? assoc_array_insert+0x8f/0x3080 [ 782.184158][ T8883] __kmem_cache_alloc_node+0x4f/0x270 [ 782.189565][ T8883] ? assoc_array_insert+0x8f/0x3080 [ 782.194781][ T8883] kmalloc_trace+0x26/0xe0 [ 782.199241][ T8883] assoc_array_insert+0x8f/0x3080 [ 782.204286][ T8883] ? key_link+0xc6/0x350 [ 782.208547][ T8883] ? mutex_lock_nested+0x10/0x10 [ 782.213517][ T8883] ? rwsem_write_trylock+0x135/0x1c0 [ 782.218820][ T8883] ? clear_nonspinnable+0x60/0x60 [ 782.223878][ T8883] __key_link_begin+0xd2/0x1e0 [ 782.228674][ T8883] key_link+0xd6/0x350 [ 782.232765][ T8883] ? key_task_permission+0x360/0x4a0 [ 782.238077][ T8883] keyctl_get_persistent+0x63a/0x780 [ 782.243389][ T8883] ? proc_key_users_show+0x310/0x310 [ 782.248717][ T8883] __se_sys_keyctl+0x59f/0x870 [ 782.253524][ T8883] ? __x64_sys_keyctl+0xc0/0xc0 [ 782.258392][ T8883] ? do_futex+0x310/0x320 [ 782.262761][ T8883] ? __ia32_sys_get_robust_list+0x100/0x100 [ 782.268671][ T8883] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 782.274689][ T8883] ? lock_chain_count+0x20/0x20 [ 782.279584][ T8883] ? lockdep_hardirqs_on+0x94/0x140 [ 782.284796][ T8883] ? __x64_sys_keyctl+0x1c/0xc0 [ 782.289666][ T8883] do_syscall_64+0x4c/0xa0 [ 782.294099][ T8883] ? clear_bhb_loop+0x60/0xb0 [ 782.298792][ T8883] ? clear_bhb_loop+0x60/0xb0 [ 782.303491][ T8883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.309400][ T8883] RIP: 0033:0x7f1041d9e1d9 [ 782.314145][ T8883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.333761][ T8883] RSP: 002b:00007f1042ca3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 782.342187][ T8883] RAX: ffffffffffffffda RBX: 00007f1042025fa0 RCX: 00007f1041d9e1d9 [ 782.350172][ T8883] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 782.358166][ T8883] RBP: 00007f1041e35888 R08: 0000000000000000 R09: 0000000000000000 [ 782.366154][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.374171][ T8883] R13: 00007f1042026038 R14: 00007f1042025fa0 R15: 00007ffcbcb45818 [ 782.382184][ T8883] [ 782.425539][ T7687] device hsr_slave_0 left promiscuous mode [ 782.471318][ T7687] device hsr_slave_1 left promiscuous mode [ 782.503444][ T7687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.545093][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.581337][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.617680][ T7687] device bridge_slave_1 left promiscuous mode [ 783.997069][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.029748][ T7687] device bridge_slave_0 left promiscuous mode [ 784.053880][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.163347][ T7687] device veth1_macvtap left promiscuous mode [ 785.201879][ T7687] device veth0_macvtap left promiscuous mode [ 785.232198][ T7687] device veth1_vlan left promiscuous mode [ 785.261892][ T7687] device veth0_vlan left promiscuous mode [ 786.148690][ T4283] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 786.200588][ T4283] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 788.023163][ T8909] fido_id[8909]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 788.409769][ T8916] jffs2: notice: (8916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 789.085890][ T8923] file system registered [ 789.090877][ T8923] unloading [ 789.168793][ T7687] team0 (unregistering): Port device team_slave_1 removed [ 789.244853][ T7687] team0 (unregistering): Port device team_slave_0 removed [ 789.370717][ T7687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.478793][ T8927] FAULT_INJECTION: forcing a failure. [ 789.478793][ T8927] name failslab, interval 1, probability 0, space 0, times 0 [ 789.491943][ T8927] CPU: 0 PID: 8927 Comm: syz.5.997 Not tainted syzkaller #0 [ 789.499338][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 789.509409][ T8927] Call Trace: [ 789.512711][ T8927] [ 789.515673][ T8927] dump_stack_lvl+0x188/0x24e [ 789.520374][ T8927] ? show_regs_print_info+0x12/0x12 [ 789.525595][ T8927] ? load_image+0x410/0x410 [ 789.530121][ T8927] ? __might_sleep+0xd0/0xd0 [ 789.534726][ T8927] ? __lock_acquire+0x7ea0/0x7ea0 [ 789.539806][ T8927] should_fail_ex+0x390/0x4c0 [ 789.544515][ T8927] should_failslab+0x5/0x20 [ 789.549032][ T8927] slab_pre_alloc_hook+0x59/0x300 [ 789.554072][ T8927] ? __mutex_trylock_common+0x15c/0x260 [ 789.559642][ T8927] ? assoc_array_insert+0x8f/0x3080 [ 789.564854][ T8927] __kmem_cache_alloc_node+0x4f/0x270 [ 789.570256][ T8927] ? assoc_array_insert+0x8f/0x3080 [ 789.575504][ T8927] kmalloc_trace+0x26/0xe0 [ 789.579949][ T8927] assoc_array_insert+0x8f/0x3080 [ 789.585021][ T8927] ? key_link+0xc6/0x350 [ 789.589285][ T8927] ? mutex_lock_nested+0x10/0x10 [ 789.594245][ T8927] ? rwsem_write_trylock+0x135/0x1c0 [ 789.599554][ T8927] ? clear_nonspinnable+0x60/0x60 [ 789.604614][ T8927] __key_link_begin+0xd2/0x1e0 [ 789.609483][ T8927] key_link+0xd6/0x350 [ 789.613567][ T8927] ? key_task_permission+0x360/0x4a0 [ 789.618869][ T8927] keyctl_get_persistent+0x63a/0x780 [ 789.624178][ T8927] ? proc_key_users_show+0x310/0x310 [ 789.629492][ T8927] __se_sys_keyctl+0x59f/0x870 [ 789.634270][ T8927] ? __x64_sys_keyctl+0xc0/0xc0 [ 789.639132][ T8927] ? do_futex+0x310/0x320 [ 789.643495][ T8927] ? __ia32_sys_get_robust_list+0x100/0x100 [ 789.649411][ T8927] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 789.655411][ T8927] ? lock_chain_count+0x20/0x20 [ 789.660298][ T8927] ? lockdep_hardirqs_on+0x94/0x140 [ 789.665506][ T8927] ? __x64_sys_keyctl+0x1c/0xc0 [ 789.670369][ T8927] do_syscall_64+0x4c/0xa0 [ 789.674799][ T8927] ? clear_bhb_loop+0x60/0xb0 [ 789.679488][ T8927] ? clear_bhb_loop+0x60/0xb0 [ 789.684177][ T8927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.690078][ T8927] RIP: 0033:0x7f1041d9e1d9 [ 789.694504][ T8927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.714126][ T8927] RSP: 002b:00007f1042ca3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 789.722574][ T8927] RAX: ffffffffffffffda RBX: 00007f1042025fa0 RCX: 00007f1041d9e1d9 [ 789.730573][ T8927] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 789.738587][ T8927] RBP: 00007f1041e35888 R08: 0000000000000000 R09: 0000000000000000 [ 789.746568][ T8927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.754546][ T8927] R13: 00007f1042026038 R14: 00007f1042025fa0 R15: 00007ffcbcb45818 [ 789.762537][ T8927] [ 789.907754][ T7687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.915569][ T7371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 791.936383][ T7371] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 792.193899][ T8945] fido_id[8945]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 792.536465][ T7687] bond0 (unregistering): Released all slaves [ 792.986400][ T8793] device hsr_slave_0 entered promiscuous mode [ 794.048232][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1004'. [ 794.065210][ T8793] device hsr_slave_1 entered promiscuous mode [ 794.198453][ T8793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 794.231621][ T8793] Cannot create hsr debugfs directory [ 794.718235][ T8962] FAULT_INJECTION: forcing a failure. [ 794.718235][ T8962] name failslab, interval 1, probability 0, space 0, times 0 [ 794.731660][ T8962] CPU: 0 PID: 8962 Comm: syz.8.1009 Not tainted syzkaller #0 [ 794.739057][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 794.749120][ T8962] Call Trace: [ 794.752411][ T8962] [ 794.755354][ T8962] dump_stack_lvl+0x188/0x24e [ 794.760053][ T8962] ? show_regs_print_info+0x12/0x12 [ 794.765274][ T8962] ? load_image+0x410/0x410 [ 794.769791][ T8962] ? __might_sleep+0xd0/0xd0 [ 794.774425][ T8962] ? __lock_acquire+0x7ea0/0x7ea0 [ 794.779474][ T8962] should_fail_ex+0x390/0x4c0 [ 794.784203][ T8962] should_failslab+0x5/0x20 [ 794.788715][ T8962] slab_pre_alloc_hook+0x59/0x300 [ 794.793755][ T8962] ? __mutex_trylock_common+0x15c/0x260 [ 794.799315][ T8962] ? assoc_array_insert+0x8f/0x3080 [ 794.804524][ T8962] __kmem_cache_alloc_node+0x4f/0x270 [ 794.809915][ T8962] ? assoc_array_insert+0x8f/0x3080 [ 794.815130][ T8962] kmalloc_trace+0x26/0xe0 [ 794.819564][ T8962] assoc_array_insert+0x8f/0x3080 [ 794.824609][ T8962] ? key_link+0xc6/0x350 [ 794.828888][ T8962] ? mutex_lock_nested+0x10/0x10 [ 794.833842][ T8962] ? rwsem_write_trylock+0x135/0x1c0 [ 794.839151][ T8962] ? clear_nonspinnable+0x60/0x60 [ 794.844198][ T8962] __key_link_begin+0xd2/0x1e0 [ 794.848982][ T8962] key_link+0xd6/0x350 [ 794.853071][ T8962] ? key_task_permission+0x360/0x4a0 [ 794.858376][ T8962] keyctl_get_persistent+0x63a/0x780 [ 794.863685][ T8962] ? proc_key_users_show+0x310/0x310 [ 794.869022][ T8962] __se_sys_keyctl+0x59f/0x870 [ 794.873803][ T8962] ? __x64_sys_keyctl+0xc0/0xc0 [ 794.878669][ T8962] ? do_futex+0x310/0x320 [ 794.883037][ T8962] ? __ia32_sys_get_robust_list+0x100/0x100 [ 794.888954][ T8962] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 794.894958][ T8962] ? lock_chain_count+0x20/0x20 [ 794.899829][ T8962] ? lockdep_hardirqs_on+0x94/0x140 [ 794.905058][ T8962] ? __x64_sys_keyctl+0x1c/0xc0 [ 794.909928][ T8962] do_syscall_64+0x4c/0xa0 [ 794.914357][ T8962] ? clear_bhb_loop+0x60/0xb0 [ 794.919055][ T8962] ? clear_bhb_loop+0x60/0xb0 [ 794.923749][ T8962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.929656][ T8962] RIP: 0033:0x7f6591d9e1d9 [ 794.934083][ T8962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.960229][ T8962] RSP: 002b:00007f6592ccb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 794.968731][ T8962] RAX: ffffffffffffffda RBX: 00007f6592025fa0 RCX: 00007f6591d9e1d9 [ 794.976751][ T8962] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 794.984925][ T8962] RBP: 00007f6591e35888 R08: 0000000000000000 R09: 0000000000000000 [ 794.992952][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.000971][ T8962] R13: 00007f6592026038 R14: 00007f6592025fa0 R15: 00007fffa00cce08 [ 795.008975][ T8962] [ 797.359239][ T8972] virtio-fs: tag not found [ 798.848654][ T8793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 798.937440][ T8793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 798.991381][ T8793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 799.074273][ T8793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 799.745183][ T8986] file system registered [ 799.750682][ T8986] unloading [ 799.843501][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.921067][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 799.949419][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 800.011457][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.071865][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 800.111684][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 800.267449][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.274589][ T4832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.368459][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 800.431436][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 800.492477][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 800.540524][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.547690][ T4832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.650154][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1016'. [ 802.767241][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 802.875760][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 802.907833][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 802.978875][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 803.047618][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 803.107404][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 804.073283][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 804.971390][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 805.058324][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 805.125700][ T8793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 805.221487][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 805.261110][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 805.314744][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 806.587617][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 806.595152][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 806.661765][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.600217][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.606608][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.720485][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 808.765387][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 808.827961][ T4345] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 808.863120][ T7687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 808.893638][ T7687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 808.929837][ T4345] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 808.964715][ T8793] device veth0_vlan entered promiscuous mode [ 809.950095][ T9044] virtio-fs: tag not found [ 810.757579][ T7687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 810.839753][ T7687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 810.888210][ T8793] device veth1_vlan entered promiscuous mode [ 811.123022][ T9048] file system registered [ 811.128020][ T9048] unloading [ 811.197721][ T9043] fido_id[9043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 811.215196][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 811.255363][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 811.325973][ T8793] device veth0_macvtap entered promiscuous mode [ 811.391148][ T8793] device veth1_macvtap entered promiscuous mode [ 811.490438][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.560153][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.626682][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.688309][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.677831][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1027'. [ 812.876977][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.920413][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.982036][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.061973][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 813.093844][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 814.980486][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 815.050018][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 815.119333][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.175421][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.266972][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.320503][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.376951][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.430378][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.506795][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.346768][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 817.383646][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 817.482835][ T8793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.504927][ T8793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.543535][ T8793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.575656][ T8793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.906432][ T4832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.948396][ T4832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.822559][ T7687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 818.872575][ T7687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.926252][ T7687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.001203][ T7687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 819.528955][ T9095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1036'. [ 819.673033][ T9097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.854'. [ 820.510112][ T9111] file system registered [ 820.515040][ T9111] unloading [ 821.507333][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1040'. [ 824.225068][ T4345] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 826.165191][ T4345] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 827.390535][ T9142] fido_id[9142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 827.780732][ T4283] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 828.063482][ T4283] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 828.129805][ T4283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.217765][ T4283] usb 5-1: config 0 descriptor?? [ 828.264522][ T4283] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 828.860978][ T4283] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 828.930024][ T4283] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 829.063085][ T4283] usb 5-1: USB disconnect, device number 14 [ 830.798771][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1048'. [ 830.812335][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1048'. [ 832.036206][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 832.717905][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 832.728051][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 832.735807][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 832.744265][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 832.751711][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 832.759304][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 834.837617][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 835.613385][ T9185] chnl_net:caif_netlink_parms(): no params data found [ 836.916937][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 838.997154][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 839.033625][ T7687] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.157789][ T9222] ip_tables: iptables: counters copy to user failed while replacing table [ 839.293761][ T7687] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.494464][ T7687] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.465787][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 840.682275][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.714437][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.776456][ T9185] device bridge_slave_0 entered promiscuous mode [ 840.904259][ T7687] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.048040][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.055170][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.077027][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 841.127849][ T9185] device bridge_slave_1 entered promiscuous mode [ 841.304678][ T9185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.402507][ T9185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.706445][ T4283] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 841.761344][ T9185] team0: Port device team_slave_0 added [ 841.798377][ T4283] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 841.871801][ T9185] team0: Port device team_slave_1 added [ 842.963882][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.211983][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.396122][ T9254] fido_id[9254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 843.468493][ T9185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.664581][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.691045][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.941038][ T9185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.829928][ T9185] device hsr_slave_0 entered promiscuous mode [ 845.875651][ T9185] device hsr_slave_1 entered promiscuous mode [ 845.921742][ T9185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.972329][ T9185] Cannot create hsr debugfs directory [ 848.857819][ T9289] ip_tables: iptables: counters copy to user failed while replacing table [ 849.918353][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1072'. [ 851.916354][ T7687] device hsr_slave_0 left promiscuous mode [ 852.405307][ T7687] device hsr_slave_1 left promiscuous mode [ 852.449272][ T7687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.475622][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.533597][ T7687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.577654][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.634265][ T7687] device bridge_slave_1 left promiscuous mode [ 852.670793][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.729549][ T7687] device bridge_slave_0 left promiscuous mode [ 852.765868][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.948413][ T7687] device veth1_macvtap left promiscuous mode [ 852.983662][ T7687] device veth0_macvtap left promiscuous mode [ 853.022065][ T7687] device veth1_vlan left promiscuous mode [ 853.063327][ T7687] device veth0_vlan left promiscuous mode [ 853.863656][ T4283] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 853.911595][ T4283] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 854.248039][ T9331] fido_id[9331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 855.777289][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1082'. [ 863.155970][ T7687] team0 (unregistering): Port device team_slave_1 removed [ 864.402216][ T7687] team0 (unregistering): Port device team_slave_0 removed [ 864.600333][ T7687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.840450][ T7687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.043328][ T7687] bond0 (unregistering): Released all slaves [ 866.389062][ T9349] FAULT_INJECTION: forcing a failure. [ 866.389062][ T9349] name failslab, interval 1, probability 0, space 0, times 0 [ 866.402378][ T9349] CPU: 0 PID: 9349 Comm: syz.3.1084 Not tainted syzkaller #0 [ 866.409802][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 866.419879][ T9349] Call Trace: [ 866.423182][ T9349] [ 866.426125][ T9349] dump_stack_lvl+0x188/0x24e [ 866.430875][ T9349] ? show_regs_print_info+0x12/0x12 [ 866.436100][ T9349] ? load_image+0x410/0x410 [ 866.440727][ T9349] ? __lock_acquire+0x7ea0/0x7ea0 [ 866.445785][ T9349] should_fail_ex+0x390/0x4c0 [ 866.450500][ T9349] should_failslab+0x5/0x20 [ 866.455015][ T9349] slab_pre_alloc_hook+0x59/0x300 [ 866.460058][ T9349] ? do_syscall_64+0x4c/0xa0 [ 866.464677][ T9349] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 866.470769][ T9349] ? tnode_new+0xbf/0x370 [ 866.475117][ T9349] __kmem_cache_alloc_node+0x4f/0x270 [ 866.480510][ T9349] ? tnode_new+0xbf/0x370 [ 866.484861][ T9349] __kmalloc+0xa3/0x240 [ 866.489033][ T9349] tnode_new+0xbf/0x370 [ 866.493209][ T9349] resize+0x3e7/0x2620 [ 866.497340][ T9349] ? lockdep_rtnl_is_held+0x22/0x30 [ 866.502579][ T9349] fib_insert_alias+0xea0/0x1280 [ 866.507554][ T9349] fib_trie_unmerge+0x308/0xce0 [ 866.512470][ T9349] fib_unmerge+0xbc/0x350 [ 866.516860][ T9349] fib4_rule_configure+0x114/0xae0 [ 866.522017][ T9349] ? __nla_parse+0x3c/0x50 [ 866.526473][ T9349] fib_nl_newrule+0x135a/0x1e40 [ 866.531357][ T9349] ? __mutex_lock+0x7ec/0xae0 [ 866.536058][ T9349] ? __lock_acquire+0x7ea0/0x7ea0 [ 866.541115][ T9349] ? fib_rules_seq_read+0xf0/0xf0 [ 866.546199][ T9349] ? do_raw_spin_unlock+0x11d/0x230 [ 866.551440][ T9349] ? fib_rules_seq_read+0xf0/0xf0 [ 866.556494][ T9349] rtnetlink_rcv_msg+0x863/0xfb0 [ 866.561452][ T9349] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 866.566601][ T9349] ? rtnetlink_bind+0x80/0x80 [ 866.571315][ T9349] ? __local_bh_enable_ip+0x136/0x1c0 [ 866.576725][ T9349] ? lockdep_hardirqs_on+0x94/0x140 [ 866.581964][ T9349] ? __local_bh_enable_ip+0x136/0x1c0 [ 866.587356][ T9349] ? _local_bh_enable+0xa0/0xa0 [ 866.592240][ T9349] ? __dev_queue_xmit+0x281/0x3810 [ 866.597399][ T9349] ? __dev_queue_xmit+0x281/0x3810 [ 866.602526][ T9349] ? __dev_queue_xmit+0x1d84/0x3810 [ 866.607747][ T9349] ? __dev_queue_xmit+0x281/0x3810 [ 866.612881][ T9349] ? ref_tracker_free+0x682/0x830 [ 866.617926][ T9349] ? refcount_inc+0x70/0x70 [ 866.622447][ T9349] ? memcpy+0x3c/0x60 [ 866.626441][ T9349] ? __copy_skb_header+0x3ba/0x4f0 [ 866.631568][ T9349] ? __skb_clone+0x446/0x6c0 [ 866.636179][ T9349] netlink_rcv_skb+0x1ef/0x440 [ 866.640959][ T9349] ? rtnetlink_bind+0x80/0x80 [ 866.645666][ T9349] ? netlink_ack+0x1160/0x1160 [ 866.650468][ T9349] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.655686][ T9349] netlink_unicast+0x7ad/0x920 [ 866.660471][ T9349] netlink_sendmsg+0x8ad/0xbd0 [ 866.665255][ T9349] ? netlink_getsockopt+0x550/0x550 [ 866.670474][ T9349] ? apparmor_socket_sendmsg+0x8a/0x330 [ 866.676044][ T9349] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 866.681346][ T9349] ? security_socket_sendmsg+0x7c/0xa0 [ 866.686817][ T9349] ? netlink_getsockopt+0x550/0x550 [ 866.692030][ T9349] ____sys_sendmsg+0x5ed/0x9a0 [ 866.696810][ T9349] ? __sys_sendmsg_sock+0x30/0x30 [ 866.701842][ T9349] ? __import_iovec+0x306/0x510 [ 866.706716][ T9349] ? import_iovec+0x6f/0xa0 [ 866.711238][ T9349] ___sys_sendmsg+0x2a2/0x360 [ 866.715928][ T9349] ? __sys_sendmsg+0x2a0/0x2a0 [ 866.720733][ T9349] __se_sys_sendmsg+0x1c3/0x2b0 [ 866.725612][ T9349] ? __x64_sys_sendmsg+0x80/0x80 [ 866.730569][ T9349] ? lockdep_hardirqs_on+0x94/0x140 [ 866.735785][ T9349] do_syscall_64+0x4c/0xa0 [ 866.740215][ T9349] ? clear_bhb_loop+0x60/0xb0 [ 866.744907][ T9349] ? clear_bhb_loop+0x60/0xb0 [ 866.749598][ T9349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 866.755503][ T9349] RIP: 0033:0x7fe8e839e1d9 [ 866.759940][ T9349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.779584][ T9349] RSP: 002b:00007fe8e65f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.788018][ T9349] RAX: ffffffffffffffda RBX: 00007fe8e8625fa0 RCX: 00007fe8e839e1d9 [ 866.796006][ T9349] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 866.803997][ T9349] RBP: 00007fe8e8435888 R08: 0000000000000000 R09: 0000000000000000 [ 866.811981][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.819958][ T9349] R13: 00007fe8e8626038 R14: 00007fe8e8625fa0 R15: 00007ffee30cdc88 [ 866.827961][ T9349] [ 868.011283][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 868.241578][ T7371] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 868.311846][ T7371] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 868.673626][ T9390] fido_id[9390]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 869.521206][ T4601] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 869.865793][ T4601] usb 5-1: Using ep0 maxpacket: 16 [ 869.897480][ T4601] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 869.960449][ T4601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.040216][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.046558][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.056896][ T4601] usb 5-1: Product: syz [ 870.061106][ T4601] usb 5-1: Manufacturer: syz [ 870.103347][ T9185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 870.133033][ T4601] usb 5-1: SerialNumber: syz [ 870.227813][ T9185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 870.329097][ T9185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 870.395572][ T9185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 870.410195][ T4601] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 870.496291][ T4601] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 870.594791][ T4601] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 870.638098][ T4601] usb 5-1: media controller created [ 870.730641][ T4601] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 872.736454][ T4601] zl10353_read_register: readreg error (reg=127, ret==-32) [ 872.900408][ T4601] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 872.956961][ T4601] usb 5-1: USB disconnect, device number 15 [ 875.163948][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.271782][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 875.319884][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 875.359204][ T9185] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.414450][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 875.461137][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 875.521352][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.528649][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.003613][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 876.055136][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 876.133582][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 876.209112][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.216280][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.442168][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 876.534442][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 876.590600][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 876.645995][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 876.745865][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 876.820993][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 877.798021][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1104'. [ 877.943393][ T9185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 877.990118][ T4345] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 878.036564][ T4345] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 878.057690][ T9185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.144823][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 879.531646][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 880.098719][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 880.150259][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 880.211477][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 880.331041][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 880.404312][ T9473] fido_id[9473]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 883.543950][ T9185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.532865][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1117'. [ 884.685337][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.737154][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.812278][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 884.910407][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 884.975220][ T9185] device veth0_vlan entered promiscuous mode [ 886.243551][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 886.927552][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 886.999233][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 887.038182][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 887.100573][ T9185] device veth1_vlan entered promiscuous mode [ 887.245997][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 887.325003][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 887.382694][ T9185] device veth0_macvtap entered promiscuous mode [ 887.443018][ T4601] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 887.466013][ T9185] device veth1_macvtap entered promiscuous mode [ 887.524377][ T4601] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 887.554676][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.709684][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.803125][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.888023][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.932007][ T9526] fido_id[9526]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 887.984290][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.071475][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.165704][ T9185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.219650][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 888.281583][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 888.340859][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 888.389664][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.452862][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.532866][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.581337][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.660763][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.726070][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.801496][ T9185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.867637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 888.876362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 892.757211][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 894.433838][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 894.446805][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 894.455556][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 894.464387][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 894.473258][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 894.482451][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 895.138303][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 895.147634][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 895.155609][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 895.164421][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 895.172138][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 895.179574][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 895.777802][ T4283] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 895.865137][ T4283] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 896.305281][ T9583] fido_id[9583]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 896.501604][ T9568] chnl_net:caif_netlink_parms(): no params data found [ 896.517157][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 896.566562][ T9561] chnl_net:caif_netlink_parms(): no params data found [ 897.237156][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 898.596947][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 898.715535][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.748163][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.807108][ T9568] device bridge_slave_0 entered promiscuous mode [ 898.857578][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.864717][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.317230][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 900.677050][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 900.799225][ T9561] device bridge_slave_0 entered promiscuous mode [ 900.845986][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.885112][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.929707][ T9568] device bridge_slave_1 entered promiscuous mode [ 900.955231][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.006161][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.047959][ T9561] device bridge_slave_1 entered promiscuous mode [ 901.161997][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.229861][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.288433][ T9561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.428423][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 901.809599][ T9561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.867505][ T9568] team0: Port device team_slave_0 added [ 901.934953][ T9568] team0: Port device team_slave_1 added [ 902.904061][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 902.951217][ T9561] team0: Port device team_slave_0 added [ 903.006688][ T9561] team0: Port device team_slave_1 added [ 903.067634][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.091456][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.277026][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.410662][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.476916][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 904.550051][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.378985][ T9636] ptp ptp0: guarantee physical clock free running [ 905.500847][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.571817][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.610368][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.708986][ T126] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 905.772781][ T126] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 907.646901][ T9561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.738775][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.781286][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.914948][ T9647] fido_id[9647]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 907.996010][ T9561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.185902][ T9568] device hsr_slave_0 entered promiscuous mode [ 908.233966][ T9568] device hsr_slave_1 entered promiscuous mode [ 908.406978][ T4283] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 909.399767][ T9568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.217022][ T9568] Cannot create hsr debugfs directory [ 910.282609][ T9561] device hsr_slave_0 entered promiscuous mode [ 910.329836][ T9561] device hsr_slave_1 entered promiscuous mode [ 910.337162][ T4283] usb 5-1: device descriptor read/64, error -71 [ 910.364281][ T9561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.480577][ T9561] Cannot create hsr debugfs directory [ 911.577013][ T4283] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 919.478130][ T9703] ptp ptp0: guarantee physical clock free running [ 919.812603][ T4944] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 919.857355][ T4944] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 919.909231][ T9568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 920.084407][ T9568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 921.222574][ T9568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 921.265094][ T9721] fido_id[9721]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 921.364381][ T9568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 921.406398][ T9729] netlink: 'syz.4.1155': attribute type 12 has an invalid length. [ 921.491758][ T9561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 923.588526][ T9561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 924.670550][ T9561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 924.761311][ T9561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 924.941923][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.969500][ T9740] random: crng reseeded on system resumption [ 925.039928][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 925.067763][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 925.121541][ T9568] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.176374][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 925.212171][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 925.269185][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.276345][ T4832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.374248][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 925.412283][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 925.462302][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 925.510195][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.517395][ T4832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.633964][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 925.681299][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.727163][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 925.760347][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 925.837407][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 925.885140][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 925.929127][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 926.030157][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 926.089961][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 926.131654][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 926.187708][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 926.262841][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 926.315015][ T9561] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.365514][ T9568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 926.554491][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 926.615631][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 926.657347][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 926.724656][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 928.097933][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 928.106463][ T5043] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.113699][ T5043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.853278][ T9768] ptp ptp0: guarantee physical clock free running [ 930.046426][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 930.134099][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 930.217638][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 930.255296][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.262508][ T5043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.375433][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 930.416041][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 930.467991][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 930.514223][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 930.572666][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 930.622438][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 930.684440][ T9561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 930.741114][ T9561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 930.803626][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 930.871236][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 930.947808][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 931.001022][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 931.057567][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 931.483391][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.490052][ T4261] kworker/dying (4261) used greatest stack depth: 15328 bytes left [ 931.498404][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.285047][ T9786] netlink: 'syz.3.1165': attribute type 12 has an invalid length. [ 933.362718][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 933.565874][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.670718][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 933.707610][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 933.787560][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 934.630886][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 934.713905][ T9568] device veth0_vlan entered promiscuous mode [ 934.818206][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 934.857336][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 934.931138][ T9568] device veth1_vlan entered promiscuous mode [ 934.997135][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 935.062355][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 935.187843][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 935.237435][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 935.304553][ T4601] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 935.316524][ T9568] device veth0_macvtap entered promiscuous mode [ 935.383637][ T4601] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 935.431736][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.519037][ T9568] device veth1_macvtap entered promiscuous mode [ 935.527085][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 935.535799][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 935.629932][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 935.693647][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 935.797768][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 935.829969][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 935.858428][ T9815] fido_id[9815]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 935.948948][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.017181][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.061897][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.127063][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.184802][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.231656][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.296945][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.362098][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.414980][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.453209][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 936.482671][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 938.252147][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 939.927685][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 940.182083][ T9561] device veth0_vlan entered promiscuous mode [ 940.237837][ T9561] device veth1_vlan entered promiscuous mode [ 940.252577][ T9821] zram0: detected capacity change from 0 to 65536 [ 940.288868][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.476892][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.516900][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.554963][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.582651][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.620434][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.646031][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.684381][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.726009][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.768283][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 940.791787][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 940.832698][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 940.865350][ T9837] [ 940.867720][ T9837] ====================================================== [ 940.874739][ T9837] WARNING: possible circular locking dependency detected [ 940.881771][ T9837] syzkaller #0 Not tainted [ 940.886195][ T9837] ------------------------------------------------------ [ 940.893218][ T9837] syz.5.1172/9837 is trying to acquire lock: [ 940.899211][ T9837] ffff88802193d590 (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14c/0x450 [ 940.910717][ T9837] [ 940.910717][ T9837] but task is already holding lock: [ 940.918090][ T9837] ffffffff8e6067e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 940.927365][ T9837] [ 940.927365][ T9837] which lock already depends on the new lock. [ 940.927365][ T9837] [ 940.937775][ T9837] [ 940.937775][ T9837] the existing dependency chain (in reverse order) is: [ 940.946798][ T9837] [ 940.946798][ T9837] -> #3 (tpg_instances_lock){+.+.}-{3:3}: [ 940.954786][ T9837] __mutex_lock+0x12d/0xae0 [ 940.959854][ T9837] tcm_alloc_inst+0x61/0x190 [ 940.965002][ T9837] usb_get_function_instance+0xd9/0x2e0 [ 940.971135][ T9837] function_make+0x118/0x350 [ 940.976269][ T9837] configfs_mkdir+0x511/0x9e0 [ 940.981503][ T9837] vfs_mkdir+0x386/0x570 [ 940.986278][ T9837] do_mkdirat+0x1d8/0x440 [ 940.991139][ T9837] __x64_sys_mkdirat+0x85/0x90 [ 940.996436][ T9837] do_syscall_64+0x4c/0xa0 [ 941.001388][ T9837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.007864][ T9837] [ 941.007864][ T9837] -> #2 (func_lock){+.+.}-{3:3}: [ 941.015007][ T9837] __mutex_lock+0x12d/0xae0 [ 941.020058][ T9837] usb_get_function_instance+0x2a/0x2e0 [ 941.026184][ T9837] function_make+0x118/0x350 [ 941.031332][ T9837] configfs_mkdir+0x511/0x9e0 [ 941.036549][ T9837] vfs_mkdir+0x386/0x570 [ 941.041320][ T9837] do_mkdirat+0x1d8/0x440 [ 941.046199][ T9837] __x64_sys_mkdirat+0x85/0x90 [ 941.051496][ T9837] do_syscall_64+0x4c/0xa0 [ 941.056451][ T9837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.062878][ T9837] [ 941.062878][ T9837] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 941.071150][ T9837] __mutex_lock+0x12d/0xae0 [ 941.076192][ T9837] configfs_rmdir+0x638/0x980 [ 941.081422][ T9837] vfs_rmdir+0x34e/0x4a0 [ 941.086195][ T9837] do_rmdir+0x29a/0x5c0 [ 941.090906][ T9837] __x64_sys_rmdir+0x45/0x50 [ 941.096029][ T9837] do_syscall_64+0x4c/0xa0 [ 941.100981][ T9837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.107408][ T9837] [ 941.107408][ T9837] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}: [ 941.116145][ T9837] __lock_acquire+0x3a03/0x7ea0 [ 941.121549][ T9837] lock_acquire+0x1bc/0x4a0 [ 941.126580][ T9837] down_write+0x36/0x60 [ 941.131284][ T9837] configfs_depend_item_unlocked+0x14c/0x450 [ 941.137800][ T9837] usbg_make_tpg+0x1dd/0x550 [ 941.142922][ T9837] target_fabric_make_tpg+0xa0/0x6d0 [ 941.148747][ T9837] configfs_mkdir+0x511/0x9e0 [ 941.153961][ T9837] vfs_mkdir+0x386/0x570 [ 941.158731][ T9837] do_mkdirat+0x1d8/0x440 [ 941.163597][ T9837] __x64_sys_mkdirat+0x85/0x90 [ 941.168886][ T9837] do_syscall_64+0x4c/0xa0 [ 941.173827][ T9837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.180247][ T9837] [ 941.180247][ T9837] other info that might help us debug this: [ 941.180247][ T9837] [ 941.190477][ T9837] Chain exists of: [ 941.190477][ T9837] &sb->s_type->i_mutex_key#24 --> func_lock --> tpg_instances_lock [ 941.190477][ T9837] [ 941.204306][ T9837] Possible unsafe locking scenario: [ 941.204306][ T9837] [ 941.211757][ T9837] CPU0 CPU1 [ 941.217129][ T9837] ---- ---- [ 941.222494][ T9837] lock(tpg_instances_lock); [ 941.227177][ T9837] lock(func_lock); [ 941.233595][ T9837] lock(tpg_instances_lock); [ 941.240794][ T9837] lock(&sb->s_type->i_mutex_key#24); [ 941.246260][ T9837] [ 941.246260][ T9837] *** DEADLOCK *** [ 941.246260][ T9837] [ 941.254418][ T9837] 4 locks held by syz.5.1172/9837: [ 941.259529][ T9837] #0: ffff888147e96460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 941.268765][ T9837] #1: ffff888055a7b900 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 941.279570][ T9837] #2: ffffffff8e2ea510 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 941.289338][ T9837] #3: ffffffff8e6067e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 941.299094][ T9837] [ 941.299094][ T9837] stack backtrace: [ 941.304999][ T9837] CPU: 0 PID: 9837 Comm: syz.5.1172 Not tainted syzkaller #0 [ 941.312385][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 941.322463][ T9837] Call Trace: [ 941.325753][ T9837] [ 941.328697][ T9837] dump_stack_lvl+0x188/0x24e [ 941.333392][ T9837] ? load_image+0x410/0x410 [ 941.337901][ T9837] ? show_regs_print_info+0x12/0x12 [ 941.343123][ T9837] ? print_circular_bug+0x12b/0x1a0 [ 941.348334][ T9837] check_noncircular+0x2f8/0x400 [ 941.353396][ T9837] ? look_up_lock_class+0x75/0x140 [ 941.358529][ T9837] ? print_deadlock_bug+0x5d0/0x5d0 [ 941.363744][ T9837] ? lockdep_lock+0xf1/0x1f0 [ 941.368351][ T9837] ? _find_first_zero_bit+0xd2/0x100 [ 941.373645][ T9837] __lock_acquire+0x3a03/0x7ea0 [ 941.378525][ T9837] ? verify_lock_unused+0x140/0x140 [ 941.383782][ T9837] ? __mutex_trylock_common+0x15c/0x260 [ 941.389360][ T9837] lock_acquire+0x1bc/0x4a0 [ 941.393880][ T9837] ? configfs_depend_item_unlocked+0x14c/0x450 [ 941.400057][ T9837] ? __might_sleep+0xd0/0xd0 [ 941.404672][ T9837] ? read_lock_is_recursive+0x10/0x10 [ 941.410057][ T9837] ? __mutex_trylock_common+0x15c/0x260 [ 941.415620][ T9837] ? usbg_make_tpg+0xf5/0x550 [ 941.420315][ T9837] ? mutex_lock_nested+0x10/0x10 [ 941.425268][ T9837] down_write+0x36/0x60 [ 941.429457][ T9837] ? configfs_depend_item_unlocked+0x14c/0x450 [ 941.435625][ T9837] configfs_depend_item_unlocked+0x14c/0x450 [ 941.441653][ T9837] usbg_make_tpg+0x1dd/0x550 [ 941.446266][ T9837] ? snprintf+0xe5/0x140 [ 941.450537][ T9837] ? usbg_drop_tport+0x20/0x20 [ 941.455340][ T9837] ? vscnprintf+0x80/0x80 [ 941.459691][ T9837] ? __kmem_cache_alloc_node+0x19d/0x270 [ 941.465437][ T9837] target_fabric_make_tpg+0xa0/0x6d0 [ 941.470741][ T9837] ? target_fabric_release_wwn+0xa0/0xa0 [ 941.476388][ T9837] configfs_mkdir+0x511/0x9e0 [ 941.481090][ T9837] vfs_mkdir+0x386/0x570 [ 941.485348][ T9837] do_mkdirat+0x1d8/0x440 [ 941.489693][ T9837] ? vfs_mkdir+0x570/0x570 [ 941.494152][ T9837] __x64_sys_mkdirat+0x85/0x90 [ 941.498938][ T9837] do_syscall_64+0x4c/0xa0 [ 941.503371][ T9837] ? clear_bhb_loop+0x60/0xb0 [ 941.508061][ T9837] ? clear_bhb_loop+0x60/0xb0 [ 941.512748][ T9837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.518654][ T9837] RIP: 0033:0x7f1041d9e1d9 [ 941.523077][ T9837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.542695][ T9837] RSP: 002b:00007f1042ca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 941.551117][ T9837] RAX: ffffffffffffffda RBX: 00007f1042025fa0 RCX: 00007f1041d9e1d9 [ 941.559093][ T9837] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 941.567088][ T9837] RBP: 00007f1041e35888 R08: 0000000000000000 R09: 0000000000000000 [ 941.575095][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 941.583070][ T9837] R13: 00007f1042026038 R14: 00007f1042025fa0 R15: 00007ffcbcb45818 [ 941.591074][ T9837] [ 941.623536][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready