last executing test programs: 15.610000615s ago: executing program 3 (id=188): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7", 0x4}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r0, 0x8}, {r1, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) 12.804568509s ago: executing program 3 (id=193): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) 10.150997899s ago: executing program 3 (id=200): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000200c0000000c8615e2c7ef25bbca0f000000000010080000000000005f305f0061303000"], 0x0, 0x2f, 0xff30}, 0x28) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_open_dev$vim2m(0x0, 0x2000142, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 9.127485502s ago: executing program 3 (id=204): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x1, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x200) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000012, 0x13b, 0x0, &(0x7f0000000500)="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", 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xe, 0x2, 0x6, @mcast2, @mcast1, 0x20, 0x20, 0x2, 0x9}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a0000040900010073797a430ddfc56e8d4b009672cdc626310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000114000000340001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.733614514s ago: executing program 2 (id=208): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) 7.656592946s ago: executing program 0 (id=209): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000200c0000000c8615e2c7ef25bbca0f000000000010080000000000005f305f0061303000"], 0x0, 0x2f, 0xff30}, 0x28) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = syz_open_dev$vim2m(0x0, 0x2000142, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0x0, 0x3, 0x9002, 0x9, 0x1, 0x8, 0x8, 0x9, 0xba3, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) r6 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) sendfile(r0, r6, &(0x7f0000000080)=0xffffffff, 0x4) 6.304397686s ago: executing program 1 (id=211): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000640)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[0x0]) dup3(r2, r0, 0x80000) 6.197297479s ago: executing program 2 (id=212): unshare(0x62040200) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$usbmon(&(0x7f00000008c0), 0x5, 0x800) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) 6.195981949s ago: executing program 0 (id=213): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000200c0000000c8615e2c7ef25bbca0f000000000010080000000000005f305f0061303000"], 0x0, 0x2f, 0xff30}, 0x28) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = syz_open_dev$vim2m(0x0, 0x2000142, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0x0, 0x3, 0x9002, 0x9, 0x1, 0x8, 0x8, 0x9, 0xba3, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) sendfile(r0, r6, &(0x7f0000000080)=0xffffffff, 0x4) 5.208886451s ago: executing program 1 (id=214): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(0x0, 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) 5.090028994s ago: executing program 3 (id=215): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7", 0x4}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r0, 0x8}, {r1, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) 4.979856887s ago: executing program 0 (id=216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x804) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 3.97478613s ago: executing program 1 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @private}]}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0b00000000000000280000000040069078224e23", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="5002100090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@eol]}}}}}}, 0x3a) 3.93040302s ago: executing program 0 (id=218): syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0', 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) migrate_pages(0x0, 0xfc, &(0x7f0000000080)=0xffffffffffff6df7, &(0x7f0000000240)=0x1) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$key(0xf, 0x3, 0x2) write$binfmt_script(r3, 0x0, 0x6f4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, r4, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x14a}}, './file0\x00'}) write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [{0x20, '+#(]&(\\)\''}, {0x20, 'syzkaller\x00'}, {0x20, 'syzkaller\x00'}], 0xa, "243f2cbfd1b3700dffada1133af5ef209ef4ba5c787326efc9eb6980fec1c3eca35af6353b7ebb55ce549b786e3a6097e0c9dc406eb8e0f2344cc019b92f02d2a1705f43dafd25d55e526239000c4895286c6b77ae8836525a80f1d0441ef571f51cc52cb66763b5c51335bd10d335d5e913c2466f5e7a0185c09d735560d6846924206385531d464445d2f682dda1b8b38ff45b4efc7b3573fbff29a33f34b3cab6294a51c9dfbd95a7c494e479"}, 0xd9) 3.766967734s ago: executing program 2 (id=219): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, 0x0) r5 = syz_ublk_add_dev(r2, r3, r4, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x7) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) dup3(r9, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) lseek(r7, 0x851, 0x0) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r10, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3.732901055s ago: executing program 1 (id=220): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) 2.760168517s ago: executing program 2 (id=221): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000200c0000000c8615e2c7ef25bbca0f000000000010080000000000005f305f0061303000"], 0x0, 0x2f, 0xff30}, 0x28) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_open_dev$vim2m(0x0, 0x2000142, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 2.057631983s ago: executing program 1 (id=222): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000640)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[0x0]) dup3(r2, r0, 0x80000) 1.886915227s ago: executing program 0 (id=223): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000200c0000000c8615e2c7ef25bbca0f000000000010080000000000005f305f0061303000"], 0x0, 0x2f, 0xff30}, 0x28) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = syz_open_dev$vim2m(0x0, 0x2000142, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0x0, 0x3, 0x9002, 0x9, 0x1, 0x8, 0x8, 0x9, 0xba3, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) r6 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) sendfile(r0, r6, &(0x7f0000000080)=0xffffffff, 0x4) 1.73317025s ago: executing program 3 (id=224): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x1, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x200) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000012, 0x13b, 0x0, &(0x7f0000000500)="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", 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xe, 0x2, 0x6, @mcast2, @mcast1, 0x20, 0x20, 0x2, 0x9}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a0000040900010073797a430ddfc56e8d4b009672cdc626310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000114000000340001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.667237152s ago: executing program 2 (id=225): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(0x0, 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) 725.736293ms ago: executing program 1 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x804) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 130.064477ms ago: executing program 0 (id=227): unshare(0x62040200) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_open_dev$usbmon(&(0x7f00000008c0), 0x5, 0x800) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) 0s ago: executing program 2 (id=228): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000200c0000000c8615e2c7ef25bbca0f000000000010080000000000005f305f0061303000"], 0x0, 0x2f, 0xff30}, 0x28) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = syz_open_dev$vim2m(0x0, 0x2000142, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0x0, 0x3, 0x9002, 0x9, 0x1, 0x8, 0x8, 0x9, 0xba3, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) sendfile(r0, r6, &(0x7f0000000080)=0xffffffff, 0x4) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 59.616416][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.627171][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. syzkaller login: [ 82.986029][ T5763] cgroup: Unknown subsys name 'net' [ 83.131301][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.832713][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.550191][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.560896][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.570052][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.578401][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.587232][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.595528][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.638992][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.647127][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.655064][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.655930][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.663882][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.672333][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.679744][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.684388][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.691454][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.706385][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.715058][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.728646][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.736115][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.736871][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.744306][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.751088][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.772507][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.780059][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.354250][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.387817][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.491299][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.705184][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.713229][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.720662][ T5776] bridge_slave_0: entered allmulticast mode [ 87.729498][ T5776] bridge_slave_0: entered promiscuous mode [ 87.745445][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.752763][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.759969][ T5778] bridge_slave_0: entered allmulticast mode [ 87.767568][ T5778] bridge_slave_0: entered promiscuous mode [ 87.775584][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.789018][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.796487][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.803840][ T5776] bridge_slave_1: entered allmulticast mode [ 87.811066][ T5776] bridge_slave_1: entered promiscuous mode [ 87.830313][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.837984][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.845302][ T5778] bridge_slave_1: entered allmulticast mode [ 87.852769][ T5778] bridge_slave_1: entered promiscuous mode [ 87.921728][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.929143][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.937137][ T5777] bridge_slave_0: entered allmulticast mode [ 87.944397][ T5777] bridge_slave_0: entered promiscuous mode [ 87.963390][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.970574][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.978293][ T5777] bridge_slave_1: entered allmulticast mode [ 87.986247][ T5777] bridge_slave_1: entered promiscuous mode [ 88.018516][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.056229][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.068276][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.097372][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.109547][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.153520][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.177330][ T5778] team0: Port device team_slave_0 added [ 88.187520][ T5776] team0: Port device team_slave_0 added [ 88.197077][ T5776] team0: Port device team_slave_1 added [ 88.214623][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.221937][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.229369][ T5775] bridge_slave_0: entered allmulticast mode [ 88.237891][ T5775] bridge_slave_0: entered promiscuous mode [ 88.259534][ T5778] team0: Port device team_slave_1 added [ 88.294759][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.303141][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.310506][ T5775] bridge_slave_1: entered allmulticast mode [ 88.317724][ T5775] bridge_slave_1: entered promiscuous mode [ 88.350859][ T5777] team0: Port device team_slave_0 added [ 88.383536][ T5777] team0: Port device team_slave_1 added [ 88.403081][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.410097][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.436291][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.450203][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.457285][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.486460][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.498535][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.505878][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.531917][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.562690][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.576258][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.604588][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.611634][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.637896][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.667241][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.674315][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.701921][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.738900][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.748229][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.774669][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.785996][ T5780] Bluetooth: hci1: command tx timeout [ 88.792534][ T5789] Bluetooth: hci2: command tx timeout [ 88.805740][ T5775] team0: Port device team_slave_0 added [ 88.815418][ T5775] team0: Port device team_slave_1 added [ 88.862462][ T5780] Bluetooth: hci3: command tx timeout [ 88.868118][ T5780] Bluetooth: hci0: command tx timeout [ 88.905440][ T5778] hsr_slave_0: entered promiscuous mode [ 88.912878][ T5778] hsr_slave_1: entered promiscuous mode [ 88.920999][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.928435][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.955093][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.982566][ T5777] hsr_slave_0: entered promiscuous mode [ 88.992040][ T5777] hsr_slave_1: entered promiscuous mode [ 88.998454][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.006551][ T5777] Cannot create hsr debugfs directory [ 89.036582][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.043860][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.070254][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.088783][ T5776] hsr_slave_0: entered promiscuous mode [ 89.095310][ T5776] hsr_slave_1: entered promiscuous mode [ 89.101868][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.109486][ T5776] Cannot create hsr debugfs directory [ 89.313115][ T5775] hsr_slave_0: entered promiscuous mode [ 89.319663][ T5775] hsr_slave_1: entered promiscuous mode [ 89.326901][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.335131][ T5775] Cannot create hsr debugfs directory [ 89.641638][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.657709][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.668687][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.680850][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.748427][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.765458][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.777665][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.808575][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.882447][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.892673][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.909027][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.951635][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.045217][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.071586][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.097888][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.108277][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.138601][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.207723][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.247159][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.254701][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.270920][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.278172][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.297662][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.361530][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.380176][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.387402][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.414381][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.421622][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.461574][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.526044][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.561163][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.568424][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.603233][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.639794][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.647079][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.728995][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.806232][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.813536][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.834810][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.842105][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.863775][ T5780] Bluetooth: hci1: command tx timeout [ 90.869376][ T5780] Bluetooth: hci2: command tx timeout [ 90.943174][ T5780] Bluetooth: hci0: command tx timeout [ 90.948665][ T5780] Bluetooth: hci3: command tx timeout [ 91.015487][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.235704][ T5778] veth0_vlan: entered promiscuous mode [ 91.268600][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.319683][ T5778] veth1_vlan: entered promiscuous mode [ 91.463675][ T5777] veth0_vlan: entered promiscuous mode [ 91.493389][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.505344][ T5778] veth0_macvtap: entered promiscuous mode [ 91.517993][ T5778] veth1_macvtap: entered promiscuous mode [ 91.535208][ T5777] veth1_vlan: entered promiscuous mode [ 91.592769][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.625779][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.644432][ T5777] veth0_macvtap: entered promiscuous mode [ 91.666051][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.684893][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.694510][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.703436][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.725693][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.741500][ T5777] veth1_macvtap: entered promiscuous mode [ 91.768176][ T5775] veth0_vlan: entered promiscuous mode [ 91.793004][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.804052][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.815594][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.830126][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.840840][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.852844][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.871101][ T5775] veth1_vlan: entered promiscuous mode [ 91.885729][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.895932][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.907488][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.917700][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.037724][ T5775] veth0_macvtap: entered promiscuous mode [ 92.054392][ T5775] veth1_macvtap: entered promiscuous mode [ 92.092758][ T5776] veth0_vlan: entered promiscuous mode [ 92.127785][ T5776] veth1_vlan: entered promiscuous mode [ 92.146734][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.160261][ T28] cfg80211: failed to load regulatory.db [ 92.174240][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.206365][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.219396][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.234612][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.246103][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.257909][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.277066][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.290794][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.332275][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.340323][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.385718][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.404650][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.414612][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.425140][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.438504][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.499557][ T5776] veth0_macvtap: entered promiscuous mode [ 92.514861][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.528236][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.537604][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.550479][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.572834][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.590265][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.600606][ T5776] veth1_macvtap: entered promiscuous mode [ 92.689145][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.720086][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.730822][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.742116][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.755403][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.766137][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.789598][ T5846] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 92.798643][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.832433][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.863031][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.892305][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.942254][ T5780] Bluetooth: hci2: command tx timeout [ 92.943454][ T5789] Bluetooth: hci1: command tx timeout [ 92.956920][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.023923][ T5789] Bluetooth: hci3: command tx timeout [ 93.023937][ T5780] Bluetooth: hci0: command tx timeout [ 93.072472][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.146052][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.202646][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.021945][ T5780] Bluetooth: hci1: command tx timeout [ 95.022007][ T5789] Bluetooth: hci2: command tx timeout [ 95.104653][ T5789] Bluetooth: hci3: command tx timeout [ 95.110131][ T5789] Bluetooth: hci0: command tx timeout [ 95.153511][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.164218][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.173131][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.182556][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.268918][ T3428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.284696][ T3428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.329902][ T5853] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.379389][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.388745][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.571740][ T5858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.585675][ T5858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.695867][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'. [ 95.731013][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.766132][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.855371][ T5868] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5'. [ 96.092091][ T27] audit: type=1800 audit(1786420275.091:2): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6" name="UDC" dev="configfs" ino=6634 res=0 errno=0 [ 96.095212][ T5870] configfs-gadget.g1 gadget.0: HOST MAC 2a:49:80:db:f0:f1 [ 96.119333][ T5870] configfs-gadget.g1 gadget.0: MAC b6:6f:bc:a7:2a:e0 [ 97.202235][ T5842] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.438675][ T5842] usb 1-1: Dual-Role OTG device on HNP port [ 97.451230][ T5842] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 97.486689][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.753610][ T5842] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 2a:49:80:db:f0:f1 [ 97.774196][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 98.852107][ T5900] syzkaller0: entered promiscuous mode [ 98.885349][ T5900] syzkaller0: entered allmulticast mode [ 99.168971][ T5821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.422642][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 99.442297][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.481330][ T5821] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.521127][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.561545][ T5821] usb 4-1: config 0 descriptor?? [ 99.591243][ T5902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.621719][ T5821] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 99.824306][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.023921][ T5820] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.039262][ T5820] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 100.049626][ T5820] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.066229][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.100684][ T5918] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 100.113075][ T5935] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 100.137467][ T5820] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 100.704911][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 100.715318][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 100.724530][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 100.734068][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 100.745057][ T5944] 9pnet_virtio: no channels available for device syz [ 100.811416][ T5765] usb 2-1: USB disconnect, device number 2 [ 101.611824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.193350][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.218587][ T6000] bridge1: entered promiscuous mode [ 103.238592][ T6000] bridge1: entered allmulticast mode [ 103.405622][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 103.419476][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 103.429365][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 103.438878][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 103.451347][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.462103][ T28] usb 2-1: config 189 has an invalid interface number: 127 but max is 0 [ 103.472035][ T6008] 9pnet_virtio: no channels available for device syz [ 103.493760][ T28] usb 2-1: config 189 has no interface number 0 [ 103.521981][ T28] usb 2-1: config 189 interface 127 has no altsetting 0 [ 103.545280][ T28] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 103.555436][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.563588][ T28] usb 2-1: Product: syz [ 103.568341][ T28] usb 2-1: Manufacturer: syz [ 103.573090][ T28] usb 2-1: SerialNumber: syz [ 103.847985][ T5992] Zero length message leads to an empty skb [ 104.131937][ T5821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.395689][ T5821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.428554][ T5821] usb 3-1: config 189 has an invalid interface number: 127 but max is 0 [ 104.485409][ T5821] usb 3-1: config 189 has no interface number 0 [ 104.524761][ T5821] usb 3-1: config 189 interface 127 has no altsetting 0 [ 104.549217][ T5821] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 104.561472][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.585905][ T5821] usb 3-1: Product: syz [ 104.594772][ T5821] usb 3-1: Manufacturer: syz [ 104.614578][ T5821] usb 3-1: SerialNumber: syz [ 104.915598][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.960764][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.268619][ T173] usb 4-1: USB disconnect, device number 2 [ 105.866151][ T28] usbserial_generic 2-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 105.878272][ T28] usbserial_generic 2-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 105.918493][ T28] usbserial_generic 2-1:189.127: device has no bulk endpoints [ 105.957488][ T28] safe_serial 2-1:189.127: safe_serial converter detected [ 105.972553][ T28] safe_serial: probe of 2-1:189.127 failed with error -22 [ 106.061410][ T28] usb 2-1: USB disconnect, device number 3 [ 106.585216][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 106.596537][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 106.605872][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 106.615312][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 106.634277][ T6068] 9pnet_virtio: no channels available for device syz [ 106.919276][ T5821] usbserial_generic 3-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 106.938700][ T5821] usbserial_generic 3-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 106.950378][ T5821] usbserial_generic 3-1:189.127: device has no bulk endpoints [ 106.968360][ T5821] safe_serial 3-1:189.127: safe_serial converter detected [ 106.976464][ T5821] safe_serial: probe of 3-1:189.127 failed with error -22 [ 107.020425][ T5821] usb 3-1: USB disconnect, device number 2 [ 107.515534][ T5821] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.676802][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.704527][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.721995][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 107.748855][ T5821] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 108.084638][ T5821] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.217424][ T5821] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.227501][ T5821] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.237625][ T5821] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.250836][ T5821] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.262583][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.493406][ T5821] usb 3-1: usb_control_msg returned -71 [ 108.500412][ T5821] usbtmc 3-1:16.0: can't read capabilities [ 108.533864][ T5821] usb 3-1: USB disconnect, device number 3 [ 110.279714][ T6110] 9pnet_virtio: no channels available for device syz [ 110.819517][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 112.560721][ T6138] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 113.382340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 114.422957][ T5820] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.509688][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 114.519345][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 114.528499][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 114.537495][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 114.549047][ T6154] 9pnet_virtio: no channels available for device syz [ 114.668168][ T5820] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.679727][ T5820] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 114.732066][ T5820] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.782818][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.817778][ T6140] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.849965][ T5820] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 114.874247][ T6160] 9pnet_virtio: no channels available for device syz [ 115.677934][ T6171] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 116.405026][ T5820] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.512111][ T9] usb 2-1: USB disconnect, device number 4 [ 116.667061][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.692135][ T5820] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.714132][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.793617][ T5820] usb 4-1: config 0 descriptor?? [ 116.844987][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 116.855073][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 116.865331][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 116.874874][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 116.886295][ T6187] 9pnet_virtio: no channels available for device syz [ 117.014597][ T5820] usbhid 4-1:0.0: can't add hid device: -71 [ 117.076842][ T5820] usbhid: probe of 4-1:0.0 failed with error -71 [ 117.165341][ T5820] usb 4-1: USB disconnect, device number 3 [ 117.442449][ T6198] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 117.537049][ T6198] team0: Port device dummy0 added [ 117.652285][ T5820] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.907027][ T5820] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 117.935862][ T5820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 117.958792][ T5820] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.004619][ T5820] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 118.021945][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.067998][ T5820] usb 4-1: Product: syz [ 118.073239][ T5820] usb 4-1: Manufacturer: syz [ 118.079155][ T5820] usb 4-1: SerialNumber: syz [ 118.300277][ T6222] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 118.721025][ T5820] usb 4-1: USB disconnect, device number 4 [ 119.440327][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.472267][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.586275][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 119.596152][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 119.605312][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 119.614414][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 119.625424][ T6231] 9pnet_virtio: no channels available for device syz [ 120.584512][ T6257] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 121.201831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.471866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 121.761815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 121.831819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.011831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.111823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.221823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.232265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 122.830600][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 122.847111][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 122.856246][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 122.868544][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 122.879330][ T6259] 9pnet_virtio: no channels available for device syz [ 123.091213][ T6269] syz.1.96[6269]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 123.403767][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.424427][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.325355][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 124.343276][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 124.413942][ T6298] 9pnet_virtio: no channels available for device syz [ 124.561200][ T6301] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 125.620021][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.691295][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.172116][ T5817] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.427184][ T5817] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.479382][ T5817] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 126.526541][ T5817] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.587075][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.648542][ T6323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.678496][ T5817] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 126.737615][ T6337] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 126.780349][ T6341] __nla_validate_parse: 2 callbacks suppressed [ 126.780366][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 126.798035][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 126.807591][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 126.816980][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 126.827678][ T6337] netlink: 'syz.0.115': attribute type 2 has an invalid length. [ 126.836704][ T6341] 9pnet_virtio: no channels available for device syz [ 127.163161][ T9] usb 2-1: USB disconnect, device number 5 [ 127.293626][ T6348] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 127.319095][ T6348] binder: 6345:6348 ioctl 4018620d 0 returned -22 [ 128.411697][ T6350] syz.3.114 uses obsolete (PF_INET,SOCK_PACKET) [ 128.475970][ T6350] netlink: 44 bytes leftover after parsing attributes in process `syz.3.114'. [ 129.174766][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.217343][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.939985][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 129.950962][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 129.960316][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 129.969518][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 129.980735][ T6383] 9pnet_virtio: no channels available for device syz [ 130.314991][ T6390] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 130.329820][ T6390] binder: 6385:6390 ioctl 4018620d 0 returned -22 [ 130.943280][ T5817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.224846][ T5817] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.261916][ T5817] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 131.302743][ T5817] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.328483][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.354983][ T6393] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.392314][ T5817] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 131.882023][ T6363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.504498][ T5842] usb 3-1: USB disconnect, device number 4 [ 132.811038][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 132.821035][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 132.830263][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 132.840264][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 132.855445][ T6426] 9pnet_virtio: no channels available for device syz [ 133.119880][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.198304][ T6432] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 133.215921][ T6432] binder: 6430:6432 ioctl 4018620d 0 returned -22 [ 133.600048][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.411006][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 135.421017][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 135.430677][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 135.439881][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 135.452277][ T6458] 9pnet_virtio: no channels available for device syz [ 136.781793][ C0] sched: RT throttling activated [ 137.723785][ T6446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.061365][ T6466] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 139.367114][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 139.377037][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 139.386628][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 139.396271][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 139.407071][ T6477] 9pnet_virtio: no channels available for device syz [ 139.459917][ T5789] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 140.179590][ T6493] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 141.435550][ T6495] warning: `syz.3.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.505378][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.515297][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.633117][ T6485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.002061][ T6511] 9pnet_virtio: no channels available for device syz [ 143.310520][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 143.737978][ T6514] netlink: 44 bytes leftover after parsing attributes in process `syz.2.167'. [ 144.186107][ T6524] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 145.148720][ T6514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.176060][ T6514] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.209301][ T6514] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.221445][ T6514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.229099][ T6514] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.243887][ T6514] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.251456][ T6514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.262430][ T6514] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.271524][ T6514] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.283897][ T6514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.290010][ T6514] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.303694][ T6514] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.546196][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 145.822035][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.691391][ T6544] tipc: Started in network mode [ 146.696707][ T6544] tipc: Node identity , cluster identity 4711 [ 146.703291][ T6544] tipc: Failed to obtain node identity [ 146.708826][ T6544] tipc: Enabling of bearer rejected, failed to enable media [ 146.885802][ T6551] loop5: detected capacity change from 0 to 7 [ 146.906014][ T6551] Dev loop5: unable to read RDB block 7 [ 146.913113][ T6551] loop5: AHDI p1 p2 p3 [ 146.917479][ T6551] loop5: partition table partially beyond EOD, truncated [ 146.927281][ T6551] loop5: p1 start 1601398130 is beyond EOD, truncated [ 146.968233][ T6551] loop5: p2 start 1702059890 is beyond EOD, truncated [ 147.262221][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.272380][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.352084][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.901848][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.853065][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 149.342726][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.342740][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.421929][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.983361][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.529307][ T6595] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 151.642232][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.642248][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.648310][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.311905][ T173] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.330912][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 152.342477][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 152.352886][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 152.363111][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 152.377731][ T6608] 9pnet_virtio: no channels available for device syz [ 153.344671][ T173] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.365302][ T173] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 153.390092][ T173] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.406283][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.440110][ T173] usb 3-1: can't set config #27, error -71 [ 153.483588][ T173] usb 3-1: USB disconnect, device number 5 [ 153.602661][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 153.997278][ T6628] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 156.019220][ T6643] 9pnet_virtio: no channels available for device syz [ 156.848321][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 157.139529][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 157.171936][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.384403][ T28] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.413302][ T28] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 157.433772][ T28] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.463359][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.574843][ T6651] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.351900][ T28] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 158.410412][ T6668] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 158.711354][ T173] usb 4-1: USB disconnect, device number 5 [ 160.210668][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 160.225609][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 160.236717][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 160.252587][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 160.270937][ T6691] 9pnet_virtio: no channels available for device syz [ 161.076786][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 161.408663][ T6699] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 163.037739][ T6682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.774623][ T5820] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.066098][ T5820] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.196528][ T5820] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 164.269764][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 164.284374][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 164.295315][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 164.306378][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 164.321027][ T6719] 9pnet_virtio: no channels available for device syz [ 164.788627][ T5820] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.797876][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.824231][ T6714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.840737][ T5820] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 165.992744][ C1] [ 165.995175][ C1] ================================ [ 166.000304][ C1] WARNING: inconsistent lock state [ 166.005477][ C1] syzkaller #0 Not tainted [ 166.009915][ C1] -------------------------------- [ 166.015050][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 166.021922][ C1] kworker/u4:9/3521 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 166.028475][ C1] ffff888025940130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 166.038037][ C1] {SOFTIRQ-ON-W} state was registered at: [ 166.043875][ C1] lock_acquire+0x19e/0x420 [ 166.048610][ C1] lock_sock_nested+0x48/0x100 [ 166.053504][ C1] x25_bind+0x20a/0x460 [ 166.057807][ C1] __sys_bind+0x2f0/0x3f0 [ 166.062300][ C1] __x64_sys_bind+0x7a/0x90 [ 166.066944][ C1] do_syscall_64+0x55/0xb0 [ 166.071495][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.077581][ C1] irq event stamp: 596902 [ 166.081958][ C1] hardirqs last enabled at (596902): [] __local_bh_enable_ip+0x13a/0x1c0 [ 166.092264][ C1] hardirqs last disabled at (596901): [] __local_bh_enable_ip+0xdb/0x1c0 [ 166.102291][ C1] softirqs last enabled at (596836): [] do_softirq+0xfa/0x1a0 [ 166.111441][ C1] softirqs last disabled at (596839): [] __irq_exit_rcu+0xd3/0x190 [ 166.120957][ C1] [ 166.120957][ C1] other info that might help us debug this: [ 166.129073][ C1] Possible unsafe locking scenario: [ 166.129073][ C1] [ 166.136570][ C1] CPU0 [ 166.139899][ C1] ---- [ 166.143219][ C1] lock(sk_lock-AF_X25); [ 166.147614][ C1] [ 166.151102][ C1] lock(sk_lock-AF_X25); [ 166.155673][ C1] [ 166.155673][ C1] *** DEADLOCK *** [ 166.155673][ C1] [ 166.163943][ C1] 4 locks held by kworker/u4:9/3521: [ 166.169263][ C1] #0: ffff88814c72dd38 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 166.180670][ C1] #1: ffffc9000cde7d00 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 166.195024][ C1] #2: ffff8880310a01b8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{3:3}, at: batadv_iv_ogm_schedule+0xe5/0x1080 [ 166.207019][ C1] #3: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 [ 166.217116][ C1] [ 166.217116][ C1] stack backtrace: [ 166.223090][ C1] CPU: 1 PID: 3521 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 166.230688][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.240798][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 166.248699][ C1] Call Trace: [ 166.252019][ C1] [ 166.254894][ C1] dump_stack_lvl+0x18c/0x250 [ 166.259620][ C1] ? show_regs_print_info+0x20/0x20 [ 166.264906][ C1] ? ret_from_fork_asm+0x11/0x20 [ 166.269906][ C1] valid_state+0x13b/0x1d0 [ 166.274367][ C1] mark_lock_irq+0xad/0x900 [ 166.278918][ C1] ? stack_trace_save+0xaa/0x100 [ 166.283916][ C1] ? save_trace+0xcd0/0xcd0 [ 166.288462][ C1] ? mark_lock+0x94/0x320 [ 166.292846][ C1] ? save_trace+0x5d/0xcd0 [ 166.297322][ C1] mark_lock+0x208/0x320 [ 166.301614][ C1] __lock_acquire+0xcfc/0x7d80 [ 166.306420][ C1] ? verify_lock_unused+0x140/0x140 [ 166.311636][ C1] ? verify_lock_unused+0x140/0x140 [ 166.316845][ C1] ? mark_lock+0x94/0x320 [ 166.321187][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 166.327180][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 166.332222][ C1] lock_acquire+0x19e/0x420 [ 166.336736][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 166.341889][ C1] ? read_lock_is_recursive+0x20/0x20 [ 166.347273][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 166.352679][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 166.357950][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 166.363344][ C1] ? _local_bh_enable+0xa0/0xa0 [ 166.368232][ C1] lock_sock_nested+0x48/0x100 [ 166.373014][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 166.378157][ C1] x25_kill_by_neigh+0x10d/0x250 [ 166.383132][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 166.388560][ C1] ? netif_receive_skb_core+0x34/0x230 [ 166.394048][ C1] ? netif_receive_skb_core+0x34/0x230 [ 166.399557][ C1] ? x25_device_event+0x280/0x280 [ 166.404613][ C1] netif_receive_skb_core+0x16a/0x230 [ 166.410048][ C1] lapbeth_napi_poll+0x42/0x80 [ 166.414863][ C1] __napi_poll+0xbb/0x460 [ 166.419249][ C1] net_rx_action+0x65f/0xcc0 [ 166.423912][ C1] ? net_tx_action+0x950/0x950 [ 166.428725][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 166.434728][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 166.440038][ C1] ? lock_chain_count+0x20/0x20 [ 166.444980][ C1] handle_softirqs+0x27d/0x820 [ 166.449777][ C1] ? read_tsc+0x9/0x20 [ 166.453871][ C1] ? ktime_get+0x24b/0x280 [ 166.458308][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 166.463098][ C1] ? do_softirq+0x1a0/0x1a0 [ 166.467620][ C1] __irq_exit_rcu+0xd3/0x190 [ 166.472233][ C1] ? irq_exit_rcu+0x20/0x20 [ 166.476771][ C1] irq_exit_rcu+0x9/0x20 [ 166.481027][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 166.486688][ C1] [ 166.489625][ C1] [ 166.492666][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.498673][ C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 166.504672][ C1] Code: 8a e8 f2 53 3c 09 65 66 8b 05 ba eb b0 7e 66 85 c0 75 54 bf 01 00 00 00 e8 2b 1d 0a 00 e8 56 16 3b 00 fb 65 8b 05 86 eb b0 7e <85> c0 75 05 e8 35 d0 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 166.524358][ C1] RSP: 0018:ffffc9000cde7920 EFLAGS: 00000282 [ 166.530473][ C1] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 7da2c47535512000 [ 166.538467][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 166.546449][ C1] RBP: ffffc9000cde79b0 R08: ffffffff911ed5e7 R09: 1ffffffff223dabc [ 166.554454][ C1] R10: dffffc0000000000 R11: fffffbfff223dabd R12: ffffffff8a51dece [ 166.562460][ C1] R13: ffff88805e8560f8 R14: dffffc0000000000 R15: 1ffff920019bcf24 [ 166.570452][ C1] ? batadv_iv_ogm_schedule+0x26e/0x1080 [ 166.576109][ C1] ? _local_bh_enable+0xa0/0xa0 [ 166.580975][ C1] ? batadv_iv_ogm_schedule+0x26e/0x1080 [ 166.586617][ C1] batadv_iv_ogm_schedule+0x26e/0x1080 [ 166.592102][ C1] ? pskb_expand_head+0xb33/0x1150 [ 166.597229][ C1] ? batadv_nc_skb_store_for_decoding+0x43a/0x6a0 [ 166.603653][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 166.610861][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6ed/0x800 [ 166.617919][ C1] ? process_scheduled_works+0x975/0x1600 [ 166.623654][ C1] process_scheduled_works+0xa60/0x1600 [ 166.629217][ C1] ? worker_attach_to_pool+0x370/0x370 [ 166.634697][ C1] ? assign_work+0x3cc/0x5d0 [ 166.639308][ C1] worker_thread+0xa5e/0xfe0 [ 166.643918][ C1] ? _raw_spin_unlock+0x40/0x40 [ 166.648794][ C1] ? __kthread_parkme+0x71/0x1c0 [ 166.653744][ C1] kthread+0x2fa/0x390 [ 166.657821][ C1] ? pr_cont_work+0x550/0x550 [ 166.662507][ C1] ? kthread_blkcg+0xd0/0xd0 [ 166.667121][ C1] ret_from_fork+0x48/0x80 [ 166.671546][ C1] ? kthread_blkcg+0xd0/0xd0 [ 166.676149][ C1] ret_from_fork_asm+0x11/0x20 [ 166.680937][ C1] [ 166.684027][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3546 [ 166.692847][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3521, name: kworker/u4:9 [ 166.702093][ C1] preempt_count: 100, expected: 0 [ 166.707115][ C1] RCU nest depth: 1, expected: 0 [ 166.712068][ C1] INFO: lockdep is turned off. [ 166.716824][ C1] Preemption disabled at: [ 166.716830][ C1] [] handle_softirqs+0x101/0x820 [ 166.727686][ C1] CPU: 1 PID: 3521 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 166.735242][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.745397][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 166.753219][ C1] Call Trace: [ 166.756501][ C1] [ 166.759353][ C1] dump_stack_lvl+0x18c/0x250 [ 166.764051][ C1] ? show_regs_print_info+0x20/0x20 [ 166.769254][ C1] ? load_image+0x420/0x420 [ 166.773778][ C1] ? handle_softirqs+0x101/0x820 [ 166.778730][ C1] __might_resched+0x48d/0x5f0 [ 166.783522][ C1] ? handle_softirqs+0x101/0x820 [ 166.788478][ C1] ? __might_sleep+0xe0/0xe0 [ 166.793082][ C1] ? read_lock_is_recursive+0x20/0x20 [ 166.798459][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 166.803848][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 166.809059][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 166.814449][ C1] ? _local_bh_enable+0xa0/0xa0 [ 166.819310][ C1] lock_sock_nested+0x5d/0x100 [ 166.824088][ C1] x25_kill_by_neigh+0x10d/0x250 [ 166.829078][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 166.834474][ C1] ? netif_receive_skb_core+0x34/0x230 [ 166.840006][ C1] ? netif_receive_skb_core+0x34/0x230 [ 166.845575][ C1] ? x25_device_event+0x280/0x280 [ 166.850607][ C1] netif_receive_skb_core+0x16a/0x230 [ 166.856002][ C1] lapbeth_napi_poll+0x42/0x80 [ 166.860780][ C1] __napi_poll+0xbb/0x460 [ 166.865123][ C1] net_rx_action+0x65f/0xcc0 [ 166.869727][ C1] ? net_tx_action+0x950/0x950 [ 166.874505][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 166.880495][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 166.885796][ C1] ? lock_chain_count+0x20/0x20 [ 166.890662][ C1] handle_softirqs+0x27d/0x820 [ 166.895441][ C1] ? read_tsc+0x9/0x20 [ 166.899521][ C1] ? ktime_get+0x24b/0x280 [ 166.903954][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 166.908732][ C1] ? do_softirq+0x1a0/0x1a0 [ 166.913284][ C1] __irq_exit_rcu+0xd3/0x190 [ 166.917897][ C1] ? irq_exit_rcu+0x20/0x20 [ 166.922412][ C1] irq_exit_rcu+0x9/0x20 [ 166.926663][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 166.932313][ C1] [ 166.935250][ C1] [ 166.938218][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.944246][ C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 166.950243][ C1] Code: 8a e8 f2 53 3c 09 65 66 8b 05 ba eb b0 7e 66 85 c0 75 54 bf 01 00 00 00 e8 2b 1d 0a 00 e8 56 16 3b 00 fb 65 8b 05 86 eb b0 7e <85> c0 75 05 e8 35 d0 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 166.969944][ C1] RSP: 0018:ffffc9000cde7920 EFLAGS: 00000282 [ 166.976026][ C1] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 7da2c47535512000 [ 166.984004][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 166.991990][ C1] RBP: ffffc9000cde79b0 R08: ffffffff911ed5e7 R09: 1ffffffff223dabc [ 166.999983][ C1] R10: dffffc0000000000 R11: fffffbfff223dabd R12: ffffffff8a51dece [ 167.007971][ C1] R13: ffff88805e8560f8 R14: dffffc0000000000 R15: 1ffff920019bcf24 [ 167.015959][ C1] ? batadv_iv_ogm_schedule+0x26e/0x1080 [ 167.021623][ C1] ? _local_bh_enable+0xa0/0xa0 [ 167.026502][ C1] ? batadv_iv_ogm_schedule+0x26e/0x1080 [ 167.032189][ C1] batadv_iv_ogm_schedule+0x26e/0x1080 [ 167.037671][ C1] ? pskb_expand_head+0xb33/0x1150 [ 167.042803][ C1] ? batadv_nc_skb_store_for_decoding+0x43a/0x6a0 [ 167.049249][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 167.056489][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6ed/0x800 [ 167.063543][ C1] ? process_scheduled_works+0x975/0x1600 [ 167.069291][ C1] process_scheduled_works+0xa60/0x1600 [ 167.074887][ C1] ? worker_attach_to_pool+0x370/0x370 [ 167.080371][ C1] ? assign_work+0x3cc/0x5d0 [ 167.084986][ C1] worker_thread+0xa5e/0xfe0 [ 167.089619][ C1] ? _raw_spin_unlock+0x40/0x40 [ 167.094520][ C1] ? __kthread_parkme+0x71/0x1c0 [ 167.099487][ C1] kthread+0x2fa/0x390 [ 167.103567][ C1] ? pr_cont_work+0x550/0x550 [ 167.108258][ C1] ? kthread_blkcg+0xd0/0xd0 [ 167.112900][ C1] ret_from_fork+0x48/0x80 [ 167.117332][ C1] ? kthread_blkcg+0xd0/0xd0 [ 167.121951][ C1] ret_from_fork_asm+0x11/0x20 [ 167.126731][ C1] [ 167.158030][ T5821] usb 4-1: USB disconnect, device number 6 [ 167.277746][ T6735] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present